Privacy Policy

HandInHand SBS (“the App”) is an internal portal application operated by HandInHand fundraising organization (“we”, “us”, or “our”). This Privacy Policy describes how we collect, use, and protect information from our staff members, volunteers, bat-sherut (national service) participants, and coordinators (“users”) who access the Donor Connect platform through this application.

This application is intended exclusively for authorized personnel of the HandInHand organization and is not available to the general public.

Account Information

• Full name, email address, and phone number
• Role and organizational assignment
• Profile photo (optional)
• Language and communication preferences

Activity Data

• Clock-in/out timestamps and session durations
• Activity types performed (home visits, hospital visits, phone calls, etc.)
• Daily reports and activity descriptions
• Absence requests (sick days, vacation) and supporting documents (e.g., doctor's notes)

Location Data

• Approximate location at the time of clock-in (used to verify on-site presence)
• Location data is only collected when you actively clock in and is not tracked continuously

Device Information

• Device type and operating system (for push notification delivery)
• Push notification tokens

We use the collected information to:

• Manage daily operations, shift scheduling, and activity coordination
• Track attendance and generate reports for organizational oversight
• Process absence requests and approvals
• Send push notifications for schedule updates, approvals, and reminders
• Facilitate communication between coordinators and field staff
• Generate aggregate statistics for organizational reporting

Your data is stored using the following infrastructure:

• Application hosting: Vercel (United States)
• Database: Neon PostgreSQL (encrypted at rest and in transit)
• File storage: Vercel Blob Storage (for uploaded documents and media)
• Real-time communication: Pusher (for live updates and notifications)

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), multi-factor authentication (MFA), role-based access control, and regular security reviews.

We do not sell or share your personal information with third parties for marketing purposes. Your data may be shared with:

• Your assigned coordinator(s) for operational oversight
• Organization administrators for reporting and compliance
• Infrastructure providers listed above (as data processors only)

As a user of this internal application, you may:

• Access your personal data by viewing your profile and activity history in the app
• Request correction of inaccurate information through your coordinator
• Request deletion of your account when you leave the organization
• Opt out of non-essential push notifications via the app settings

To exercise these rights, contact your coordinator or the organization's administration.

We retain your data for the duration of your engagement with the organization. After your departure, data may be retained for up to 7 years for compliance and reporting purposes, after which it will be securely deleted.

This application is intended for use by authorized organization personnel only. We do not knowingly collect data from children under 16.

We may update this Privacy Policy from time to time. Users will be notified of significant changes through in-app notifications. Continued use of the application after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, please contact:

• Email: support@handinhand.sbs
• Organization: HandInHand Fundraising Organization
• Website: https://handinhand.sbs