MANNA Privacy Policy

Version 1.6 Effective date: July 31, 2026 Last updated: July 31, 2026

MANNA is operated by STEWART APPLICATIONS LLC, a Tennessee limited liability company ("MANNA," "we," "us," or "our"). This Policy explains how we handle personal information through www.mymanna.app, the MANNA application, support, and related services.

MANNA is fundraising and donor-management software for adult missionaries, ministry workers, support-raised professionals, and organizations. MANNA does not process or hold donor funds.

1. Scope and supported countries

This Policy applies to MANNA's website, application, support, communications, integrations, resources, and any community features MANNA enables.

MANNA currently accepts new accounts only from the United States and South Africa. Access from another country requires written approval. Unless MANNA confirms otherwise, the Service is unavailable to residents of the European Economic Area, United Kingdom, Quebec, and restricted jurisdictions.

People may visit the public website from other locations. Service availability remains governed by the Terms of Service.

2. Our privacy roles

MANNA's role depends on the information:

  • MANNA-controlled data: MANNA generally acts as controller, responsible party, or business for account, billing, authentication, security, support, usage, profile, community, affiliate, marketing, and business records.
  • Customer-controlled CRM Data: The customer decides why and how to use information about donors, supporters, prospects, referrals, and contacts. The customer generally acts as controller or responsible party. MANNA generally acts as processor, operator, contractor, or service provider.

Customers are responsible for the legality, accuracy, notices, consent, sensitive-data conditions, and privacy requests connected with their CRM Data. Appendix A to the Terms contains MANNA's Data Processing Terms.

3. Information we collect

A. Account and authentication

MANNA uses Google sign-in. We may receive your name, email, Google identifier, profile image, sign-in status, and authentication metadata. MANNA does not receive your Google password.

B. Billing

Stripe processes payments. We may receive plan, trial, billing-contact, subscription, invoice, transaction, payment-status, renewal, cancellation, and limited payment-method information. MANNA does not intentionally store full card numbers.

C. CRM Data

Customers may enter or import:

  • names and contact details;
  • donation, pledge, and giving-history records;
  • funding goals and campaigns;
  • birthdays, anniversaries, tags, statuses, and relationship history;
  • tasks, reminders, follow-ups, and communication history;
  • prayer requests, ministry notes, personal notes, and relationship notes;
  • imported files and exported records; and
  • other customer-selected information.

These records describe donations. MANNA does not move donor funds.

D. Optional features

Where enabled, we may collect profile information, referrals, posts, comments, reactions, messages, reports, moderation records, and shared resources.

E. Integrations and exports

When a customer imports a file, connects Mailchimp, or uses another integration, MANNA processes the information selected or authorized. The customer is responsible for having authority to import, connect, export, and disclose the information.

F. Affiliate activity

A compensated link may contain a referral identifier. MANNA, the retailer, or an affiliate network may record:

  • the link selected and time;
  • referring-page, device, browser, and identifier information;
  • attributable clicks, signups, or purchases; and
  • product, order value, status, and commission reporting.

MANNA may receive affiliate commissions or referral compensation. MANNA does not receive full payment-card details through an affiliate program.

G. Support and technical information

We may collect:

  • support requests, feedback, reports, and communications;
  • IP address and approximate location;
  • browser, device, and operating-system details;
  • sessions, sign-in times, account activity, and features used;
  • import, export, and integration events;
  • cookies, tokens, and local-storage information; and
  • diagnostic, performance, error, security, and audit logs.

We may aggregate or de-identify information so that it no longer reasonably identifies a person.

H. Budgeting and transaction imports

MANNA allows you to create budgets, track income and expenses, and import transactions from supported CSV, OFX, and QFX files or pasted transaction text. Personal, family, household, ministry, and organizational budgeting are supported purposes. For purposes of Section 4, information reasonably needed for these budgeting features is permitted, subject to the other restrictions in that section.

Local processing. The budgeting import tool reads and parses your selected file or pasted text within your browser. The original file and raw pasted text are not uploaded to MANNA's servers or Base44 storage through this process. MANNA does not retain a server copy of this source material. Selecting a file leaves the original file on your device.

Information filtering. Before transaction records are displayed or saved, the import tool excludes recognized identifying fields, such as account numbers, account-holder details, addresses, routing numbers, and identification numbers. It also removes recognized long numeric sequences from transaction descriptions and filenames. These automated filters may miss information, particularly in descriptions, unusual file formats, or user-entered text. Review the import preview and remove unnecessary personal information before saving.

Saved information and uses. MANNA stores transaction dates, cleaned descriptions or merchant names, amounts, currencies, income or expense direction, categories, and any optional account alias. We also store budgeting information you enter and limited import metadata, including cleaned filenames and transaction-derived identifiers used to detect duplicates. These records are associated with your MANNA account. We use this information to provide budgets, transaction organization, categorization, duplicate detection, income and expense tracking, and related calculations and summaries.

Optional AI categorization. When you select "Suggest categories," MANNA sends cleaned merchant descriptions, amounts, currencies, and income or expense direction, together with your budget category names and identifiers, to Base44's managed AI service. This request excludes the original statement, raw pasted text, transaction dates, and dedicated account-holder or bank-account fields. Descriptions and category names may still reveal personal or sensitive information. You can use manual, rules-based, and history-based categorization without requesting AI suggestions. AI processing and platform-level data handling are described in Section 8.

Currency conversion. Exchange-rate requests contain the source and destination currency codes. Transaction amounts and merchant descriptions are excluded from those requests. Providers may also process technical request metadata.

Access and retention. Saved budgeting records are associated with your account and subject to access controls. Authorized MANNA administrators and infrastructure providers may access information for the purposes described in this Policy. Budgeting records are excluded from community sharing and from MANNA's Stripe, Mailchimp, and Google Calendar integration payloads. Saved transactions and budgeting records follow Section 12's retention and deletion rules. You may use available account controls or contact hello@mymanna.app to request access, correction, export, or deletion.

4. Sensitive and restricted information

CRM Data may reveal religious beliefs, prayer matters, giving history, financial circumstances, or personal situations. Customers must collect and use this information lawfully and keep it limited to what is necessary.

MANNA does not require a user to state personal religious beliefs in an account profile. Where an optional MANNA-controlled field collects sensitive information and applicable law requires consent, MANNA will request express consent.

Do not enter:

  • full payment-card numbers or security codes;
  • bank, payment-service, or account credentials;
  • government identification numbers;
  • detailed medical records;
  • unlawfully obtained information;
  • information about children without required authority; or
  • information unrelated to a legitimate fundraising or relationship-management purpose.

5. How we use information

MANNA-controlled information may be used to:

  • create, authenticate, operate, secure, and support accounts;
  • provide subscriptions, billing, integrations, resources, and enabled features;
  • communicate about accounts, products, security, support, and legal matters;
  • send marketing where permitted and honor opt-outs;
  • administer affiliate links and commission records;
  • monitor performance, reliability, adoption, and security;
  • prevent and investigate fraud, abuse, incidents, and Terms violations;
  • improve MANNA using account, technical, usage, support, aggregated, and de-identified information;
  • comply with law and lawful requests;
  • establish, exercise, or defend legal claims; and
  • evaluate or complete a financing, reorganization, merger, acquisition, or sale.

MANNA processes identifiable CRM Data only to provide, maintain, secure, and support the Service, follow customer instructions, enforce agreements, and comply with law.

MANNA does not use identifiable CRM Data for advertising or general product development. MANNA does not sell or rent donor lists, CRM Data, prayer requests, notes, messages, or imported files.

Depending on applicable law and the technology involved, affiliate-link activity may be classified as sale, sharing, or targeted advertising. Where required, MANNA will provide notice and an opt-out.

6. Legal grounds

Where applicable law requires a legal ground, MANNA may rely on:

  • performance of a contract;
  • legitimate interests in operating, securing, supporting, and improving MANNA;
  • consent;
  • compliance with legal obligations;
  • protection of safety and vital interests; and
  • establishment, exercise, or defense of legal claims.

Customers determine and document the legal grounds for their CRM Data.

7. How we disclose information

We may disclose information:

  • to Base44 for application infrastructure and related platform functions;
  • to Google for authentication;
  • to Stripe for billing, fraud prevention, and payments;
  • to Mailchimp when a customer requests a supported integration;
  • to email, logging, monitoring, security, support, and analytics providers;
  • to affiliate networks and retailers when a compensated link is used;
  • to an authorized spouse, another user, message recipient, integration, or export destination selected by the customer;
  • to lawyers, accountants, auditors, insurers, and other advisers;
  • where reasonably needed for law, safety, security, claims, or enforcement; and
  • in a financing, reorganization, merger, acquisition, bankruptcy, or sale.

Providers may access information needed for their role and are subject to applicable contracts and law.

8. Base44 and AI-provider processing

MANNA is built and operated using Base44. Information submitted to or generated in MANNA may pass through Base44 and its subprocessors, including AI providers that Base44 uses to operate its platform.

Base44 processes information under its applicable Privacy Policy, Data Processing Addendum, and Subprocessor List.

Customers should limit CRM Data to information needed for their work.

Budgeting data and AI-provider terms

MANNA currently uses a non-Enterprise Base44 plan. Base44's published documentation states that workspace data on non-Enterprise plans can be used to train AI models. Base44's handling of end-user personal information is also subject to its Data Processing Addendum and applicable law. Provider processing, including any permitted training and retention, is governed by the applicable contractual terms, service configurations, and legal requirements. MANNA does not promise a provider-wide training exclusion or zero retention for budgeting data.

Choosing manual, rules-based, or history-based categorization avoids the optional AI categorization request. Saved transaction records remain hosted by Base44 and subject to its applicable platform-level processing terms. Base44 selects the AI provider for managed categorization requests; MANNA does not specify a fixed provider or provider retention period for each request.

See Base44's Privacy and security documentation, Data Processing Addendum, and Subprocessor List.

9. Community visibility and administrative access

Shared content is visible to the selected audience, and messages are visible to recipients. Recipients may retain or share copies.

Authorized MANNA personnel and providers may have technical access to account content when reasonably needed for support, maintenance, security, safety, moderation, legal compliance, or enforcement.

Deleting content may remove it from the active account while copies remain with recipients, in required records, or in backups until rotation.

10. Cookies, affiliate tracking, and communications

MANNA uses cookies, tokens, local storage, and similar technologies for authentication, security, sessions, preferences, and core functions.

MANNA may use technical logs and product-usage events for reliability, adoption, and security. MANNA currently does not use third-party advertising pixels inside the Service.

Affiliate destinations or networks may use cookies or similar technologies on their own services after a user selects a compensated link.

Where a technology requires consent or an opt-out, MANNA will provide the control required by applicable law.

MANNA may send account, billing, support, security, and legal communications. Marketing messages include an unsubscribe method where required.

11. International processing

Stewart Applications LLC is a United States company. MANNA and its providers may process information in the United States and other provider locations.

Current provider locations are likely to include the United States, Israel, Germany, and the United Kingdom, together with locations shown in current provider lists.

Where required, transfers rely on a binding agreement, consent, contractual necessity, adequacy finding, or another lawful mechanism. South African transfers are handled under an available basis permitted by POPIA.

A customer must contact MANNA before using the Service for data subject to a restricted-transfer law requiring a separate transfer instrument.

12. Retention and deletion

MANNA retains information only as reasonably needed for:

  • an active account and requested services;
  • billing, tax, accounting, and transaction records;
  • support, security, fraud prevention, and service continuity;
  • disputes, enforcement, legal holds, and legal obligations; and
  • provider backup and deletion cycles.

You may delete available records and request account deletion. After closure, MANNA deletes or de-identifies live data when it is no longer needed. Routine backups expire through provider backup cycles.

Billing and tax records may be retained for up to seven years. Other records are retained according to purpose, sensitivity, risk, and legal requirements.

Recipients, integrations, and export destinations may keep independent copies.

13. Security and incidents

MANNA uses reasonable administrative, technical, and organizational safeguards appropriate to the information and risk. These may include access controls, authentication, encryption in transit, provider-supported encryption at rest, logging, backups, monitoring, and incident response.

No online system guarantees absolute security. Secure your Google account, devices, exports, and authorized access. Contact hello@mymanna.app promptly about suspected compromise.

MANNA will provide legally required breach notifications.

14. Privacy rights

Depending on applicable law, you may have rights to:

  • know whether and why information is processed;
  • access, correct, delete, or receive a copy;
  • object, restrict processing, or withdraw consent;
  • opt out of qualifying sale, sharing, targeted advertising, or profiling;
  • appeal a request decision; and
  • complain to a regulator.

Email hello@mymanna.app to submit a request about MANNA-controlled information. MANNA may verify identity and authority, request information needed to locate records, and apply lawful exceptions.

For customer-controlled CRM Data, contact the relevant MANNA customer first. MANNA will assist that customer as required.

South African users may also contact the Information Regulator.

MANNA does not make solely automated decisions that produce legal or similarly significant effects.

15. Children

MANNA accounts are limited to adults aged 18 or older. If MANNA learns that a minor created an account, MANNA may close it and take appropriate deletion steps.

A customer entering information about a child into CRM Data is responsible for the lawful basis, authority, safeguards, and necessity of that processing.

16. External services

Third-party services have their own terms and privacy practices. Review them before providing information or completing a transaction.

MANNA may earn compensation from a clearly disclosed affiliate link. A commercial relationship does not control the third party's privacy practices, products, prices, or transactions.

17. Changes

MANNA may update this Policy as the Service, providers, or law changes. The updated version will display a new date. Material changes receive any additional notice required by law.

18. Contact

MANNA / Stewart Applications LLC Attn: MANNA Privacy Officer Email: hello@mymanna.app Website: www.mymanna.app Mail: c/o Northwest Registered Agent Inc. 116 Agnes Rd, Suite 200 Knoxville, TN 37919 United States

By using MANNA, you acknowledge that you have read, understood, and agree to be bound by this document.

By using MANNA, you acknowledge that you have read, understood, and agree to be bound by this document.