Privacy Policy

This policy covers the NonProfit Finder mobile app and this website, both operated by CampbellSoft Studios, the trade name of Kenneth Campbell, an individual doing business in Alabama, United States.

1. What the app collects

Nothing about you. The app does not ask for a name, email address, phone number or account, does not assign you an identifier, and does not contain analytics, attribution, crash-tracking or advertising SDKs.

Location

If you tap Near Me or use your location in a filter, the app asks iOS for your current position and uses it to sort results by distance. That coordinate is used on your device, is not written to any server, and is not retained after the search. Declining location access leaves the rest of the app fully usable; you can also search from a typed address instead.

What is stored on your device

The following live in the app's local database and settings storage on your device only. None of it is transmitted anywhere.

• Favorites, lists and list contents
• Pipeline tags and your notes on an organization
• Field Mode routes, stops, check-ins and follow-ups
• Saved filters and recent searches
• Which states you sync, your onboarding status and appearance preference
• The downloaded copy of the public nonprofit database
• A local safety snapshot of your saved items, used to restore them if the app's database has to be rebuilt

Because this data never leaves your device, we cannot see it, recover it, or delete it for you. Deleting the app deletes all of it. Use the export options in the app to keep a copy of anything that matters to you.

2. Syncing public data

When you tap Sync, the app downloads public nonprofit records from our hosted database (Supabase). The request carries no user identifier, no device identifier and no content from your device — just which states you asked for. As with any internet request, the hosting provider's servers process your device's IP address in order to return the response, and it appears in ordinary short-lived server logs. We do not use those logs to build a profile, and nothing in them is linked to anything you do inside the app.

3. Third-party services

• Supabase — hosts the public nonprofit database the app downloads. No personal data is sent to it.
• Apple Maps (iOS) — provides the map view and address lookup on iPhone and iPad, handled by Apple under Apple's privacy terms.
• Google Maps SDK (Android builds) — on Android, the map view and address geocoding are provided by Google Play Services. When you use them, Google may receive device information and the map area or address being looked up, handled under theGoogle Privacy Policy.
• External links you open — opening an organization's website, its Form 990 PDF, or the IRS Tax Exempt Organization Search hands you off to that site inside an in-app browser. Those sites are operated by other people under their own privacy policies.
• Apple App Store — Apple handles app distribution and reports only anonymous, aggregate statistics to us, such as download counts. Apple's own data practices are described in Apple's privacy policy.
• Netlify — hosts this website and processes contact form submissions.

4. This website

The site sets no cookies, runs no analytics and embeds no third-party trackers or fonts. Netlify, as host, records standard web server request logs (including IP addresses) for security and operational purposes.

The contact form

If you submit the contact form, we receive what you typed: the topic, your email address, optionally your name, any app version or device details you enter, and your message. Netlify also records the submission's IP address as a spam control. We use this only to answer you and to fix what you reported. It is not added to any mailing list, not used for marketing, and not shared with anyone. Submissions are kept while they are useful for support history and deleted when they are not.

The benchmark and funder tools

When you look up an organization on the Benchmark or Funders page, the EIN or organization name and state you enter are sent to our server, which reads the matching public IRS records from our hosted database (Supabase) and sends them back. We do not save what you look up, it is not tied to a name, email address or account, and no cookie is set. Like any web request, it appears in the ordinary short-lived server logs kept by Netlify and Supabase.

5. What we never do

• We do not sell or rent personal information, and we do not share it for advertising.
• We do not track you across apps or websites, and there is nothing to opt out of.
• We do not show advertisements.
• We do not create user profiles or require accounts.

6. Children

The app is not directed to children under 13 and knowingly collects no information from anyone, including children. It contains public information about organizations and requires no personal data to use.

7. Your rights

Privacy laws such as the CCPA and the GDPR give you rights to access, correct and delete personal information a company holds about you. In practice we hold none from the app: there is nothing to export or erase because nothing was ever collected. If you have written to us through the contact form and want that correspondence deleted, ask and we will delete it.

8. Data source and independence

NonProfit Finder is not affiliated with, endorsed by, or connected to the Internal Revenue Service or any other government agency. Organization data comes from publicly available U.S. government records, including:

• IRS Exempt Organizations Business Master File
• IRS Tax Exempt Organization Search
• IRS Form 990 e-file financial data
• Public Form 990 filing images and state charity registration records

9. Security

Data you create stays in your device's app storage, protected by the operating system's own app sandbox and device encryption. Network requests the app makes use HTTPS. No system is perfectly secure, but there is no account to breach and no personal data of yours on our side to lose.

10. Changes to this policy

If this policy changes, the "Last updated" date above changes with it, and material changes will be described here. Continuing to use the app after an update means the revised policy applies.

11. Contact

Privacy questions can go through the contact form, or by email token@campbellsoftstudios.com.