MANNA Privacy Policy

Version 1.6
Effective date: July 31, 2026
Last updated: July 31, 2026

MANNA is operated by STEWART APPLICATIONS LLC, a Tennessee limited liability company ("MANNA," "we," "us," or "our"). This Policy explains how we handle personal information through www.mymanna.app, the MANNA application, support, and related services.

MANNA is fundraising and donor-management software for adult missionaries, ministry workers, support-raised professionals, and organizations. MANNA does not process or hold donor funds.

1. Scope and supported countries

This Policy applies to MANNA's website, application, support, communications, integrations, resources, and any community features MANNA enables.

MANNA currently accepts new accounts only from the United States and South Africa. Access from another country requires written approval. Unless MANNA confirms otherwise, the Service is unavailable to residents of the European Economic Area, United Kingdom, Quebec, and restricted jurisdictions.

People may visit the public website from other locations. Service availability remains governed by the Terms of Service.

2. Our privacy roles

MANNA's role depends on the information:

MANNA-controlled data: MANNA generally acts as controller, responsible party, or business for account, billing, authentication, security, support, usage, profile, community, affiliate, marketing, and business records.
Customer-controlled CRM Data: The customer decides why and how to use information about donors, supporters, prospects, referrals, and contacts. The customer generally acts as controller or responsible party. MANNA generally acts as processor, operator, contractor, or service provider.

Customers are responsible for the legality, accuracy, notices, consent, sensitive-data conditions, and privacy requests connected with their CRM Data. Appendix A to the Terms contains MANNA's Data Processing Terms.

3. Information we collect

A. Account and authentication

MANNA uses Google sign-in. We may receive your name, email, Google identifier, profile image, sign-in status, and authentication metadata. MANNA does not receive your Google password.

B. Billing

Stripe processes payments. We may receive plan, trial, billing-contact, subscription, invoice, transaction, payment-status, renewal, cancellation, and limited payment-method information. MANNA does not intentionally store full card numbers.

C. CRM Data

Customers may enter or import:

names and contact details;
donation, pledge, and giving-history records;
funding goals and campaigns;
birthdays, anniversaries, tags, statuses, and relationship history;
tasks, reminders, follow-ups, and communication history;
prayer requests, ministry notes, personal notes, and relationship notes;
imported files and exported records; and
other customer-selected information.

These records describe donations. MANNA does not move donor funds.

D. Optional features

Where enabled, we may collect profile information, referrals, posts, comments, reactions, messages, reports, moderation records, and shared resources.

E. Integrations and exports

When a customer imports a file, connects Mailchimp, or uses another integration, MANNA processes the information selected or authorized. The customer is responsible for having authority to import, connect, export, and disclose the information.

F. Affiliate activity

A compensated link may contain a referral identifier. MANNA, the retailer, or an affiliate network may record:

the link selected and time;
referring-page, device, browser, and identifier information;
attributable clicks, signups, or purchases; and
product, order value, status, and commission reporting.

MANNA may receive affiliate commissions or referral compensation. MANNA does not receive full payment-card details through an affiliate program.

G. Support and technical information

We may collect:

support requests, feedback, reports, and communications;
IP address and approximate location;
browser, device, and operating-system details;
sessions, sign-in times, account activity, and features used;
import, export, and integration events;
cookies, tokens, and local-storage information; and
diagnostic, performance, error, security, and audit logs.

We may aggregate or de-identify information so that it no longer reasonably identifies a person.

4. Sensitive and restricted information

CRM Data may reveal religious beliefs, prayer matters, giving history, financial circumstances, or personal situations. Customers must collect and use this information lawfully and keep it limited to what is necessary.

MANNA does not require a user to state personal religious beliefs in an account profile. Where an optional MANNA-controlled field collects sensitive information and applicable law requires consent, MANNA will request express consent.

Do not enter:

full payment-card numbers or security codes;
bank, payment-service, or account credentials;
government identification numbers;
detailed medical records;
unlawfully obtained information;
information about children without required authority; or
information unrelated to a legitimate fundraising or relationship-management purpose.

5. How we use information

MANNA-controlled information may be used to:

create, authenticate, operate, secure, and support accounts;
provide subscriptions, billing, integrations, resources, and enabled features;
communicate about accounts, products, security, support, and legal matters;
send marketing where permitted and honor opt-outs;
administer affiliate links and commission records;
monitor performance, reliability, adoption, and security;
prevent and investigate fraud, abuse, incidents, and Terms violations;
improve MANNA using account, technical, usage, support, aggregated, and de-identified information;
comply with law and lawful requests;
establish, exercise, or defend legal claims; and
evaluate or complete a financing, reorganization, merger, acquisition, or sale.

MANNA processes identifiable CRM Data only to provide, maintain, secure, and support the Service, follow customer instructions, enforce agreements, and comply with law.

MANNA does not use identifiable CRM Data for advertising or general product development. MANNA does not sell or rent donor lists, CRM Data, prayer requests, notes, messages, or imported files.

Depending on applicable law and the technology involved, affiliate-link activity may be classified as sale, sharing, or targeted advertising. Where required, MANNA will provide notice and an opt-out.

6. Legal grounds

Where applicable law requires a legal ground, MANNA may rely on:

performance of a contract;
legitimate interests in operating, securing, supporting, and improving MANNA;
consent;
compliance with legal obligations;
protection of safety and vital interests; and
establishment, exercise, or defense of legal claims.

Customers determine and document the legal grounds for their CRM Data.

7. How we disclose information

We may disclose information:

to Base44 for application infrastructure and related platform functions;
to Google for authentication;
to Stripe for billing, fraud prevention, and payments;
to Mailchimp when a customer requests a supported integration;
to email, logging, monitoring, security, support, and analytics providers;
to affiliate networks and retailers when a compensated link is used;
to an authorized spouse, another user, message recipient, integration, or export destination selected by the customer;
to lawyers, accountants, auditors, insurers, and other advisers;
where reasonably needed for law, safety, security, claims, or enforcement; and
in a financing, reorganization, merger, acquisition, bankruptcy, or sale.

Providers may access information needed for their role and are subject to applicable contracts and law.

8. Base44 and AI-provider processing

MANNA is built and operated using Base44. Information submitted to or generated in MANNA may pass through Base44 and its subprocessors, including AI providers that Base44 uses to operate its platform.

Base44 processes information under its applicable Privacy Policy, Data Processing Addendum, and Subprocessor List.

Customers should limit CRM Data to information needed for their work.

9. Community visibility and administrative access

Shared content is visible to the selected audience, and messages are visible to recipients. Recipients may retain or share copies.

Authorized MANNA personnel and providers may have technical access to account content when reasonably needed for support, maintenance, security, safety, moderation, legal compliance, or enforcement.

Deleting content may remove it from the active account while copies remain with recipients, in required records, or in backups until rotation.

10. Cookies, affiliate tracking, and communications

MANNA uses cookies, tokens, local storage, and similar technologies for authentication, security, sessions, preferences, and core functions.

MANNA may use technical logs and product-usage events for reliability, adoption, and security. MANNA currently does not use third-party advertising pixels inside the Service.

Affiliate destinations or networks may use cookies or similar technologies on their own services after a user selects a compensated link.

Where a technology requires consent or an opt-out, MANNA will provide the control required by applicable law.

MANNA may send account, billing, support, security, and legal communications. Marketing messages include an unsubscribe method where required.

11. International processing

Stewart Applications LLC is a United States company. MANNA and its providers may process information in the United States and other provider locations.

Current provider locations are likely to include the United States, Israel, Germany, and the United Kingdom, together with locations shown in current provider lists.

Where required, transfers rely on a binding agreement, consent, contractual necessity, adequacy finding, or another lawful mechanism. South African transfers are handled under an available basis permitted by POPIA.

A customer must contact MANNA before using the Service for data subject to a restricted-transfer law requiring a separate transfer instrument.

12. Retention and deletion

MANNA retains information only as reasonably needed for:

an active account and requested services;
billing, tax, accounting, and transaction records;
support, security, fraud prevention, and service continuity;
disputes, enforcement, legal holds, and legal obligations; and
provider backup and deletion cycles.

You may delete available records and request account deletion. After closure, MANNA deletes or de-identifies live data when it is no longer needed. Routine backups expire through provider backup cycles.

Billing and tax records may be retained for up to seven years. Other records are retained according to purpose, sensitivity, risk, and legal requirements.

Recipients, integrations, and export destinations may keep independent copies.

13. Security and incidents

MANNA uses reasonable administrative, technical, and organizational safeguards appropriate to the information and risk. These may include access controls, authentication, encryption in transit, provider-supported encryption at rest, logging, backups, monitoring, and incident response.

No online system guarantees absolute security. Secure your Google account, devices, exports, and authorized access. Contact hello@mymanna.app promptly about suspected compromise.

MANNA will provide legally required breach notifications.

14. Privacy rights

Depending on applicable law, you may have rights to:

know whether and why information is processed;
access, correct, delete, or receive a copy;
object, restrict processing, or withdraw consent;
opt out of qualifying sale, sharing, targeted advertising, or profiling;
appeal a request decision; and
complain to a regulator.

Email hello@mymanna.app to submit a request about MANNA-controlled information. MANNA may verify identity and authority, request information needed to locate records, and apply lawful exceptions.

For customer-controlled CRM Data, contact the relevant MANNA customer first. MANNA will assist that customer as required.

South African users may also contact the Information Regulator.

MANNA does not make solely automated decisions that produce legal or similarly significant effects.

15. Children

MANNA accounts are limited to adults aged 18 or older. If MANNA learns that a minor created an account, MANNA may close it and take appropriate deletion steps.

A customer entering information about a child into CRM Data is responsible for the lawful basis, authority, safeguards, and necessity of that processing.

16. External services

Third-party services have their own terms and privacy practices. Review them before providing information or completing a transaction.

MANNA may earn compensation from a clearly disclosed affiliate link. A commercial relationship does not control the third party's privacy practices, products, prices, or transactions.

17. Changes

MANNA may update this Policy as the Service, providers, or law changes. The updated version will display a new date. Material changes receive any additional notice required by law.

18. Contact

MANNA / Stewart Applications LLC
Attn: MANNA Privacy Officer
Email: hello@mymanna.app
Website: www.mymanna.app
Mail: c/o Northwest Registered Agent Inc.
116 Agnes Rd, Suite 200
Knoxville, TN 37919
United States