Privacy policy
Protecting your private information is our priority. This Privacy Policy applies to Lasting Change, Inc. ("Lasting Change", "we", "us") and covers the Lasting Change app on iPhone and Android, the web app, and https://www.makelastingchange.com. Lasting Change is a 501(c)(3) nonprofit that turns your spare change, or a monthly gift you choose, into donations to the charities you pick. By using Lasting Change, you agree to the practices described here.
What we collect
- Your account: your name, email address and phone number (if you sign in by phone), and your sign-in method (email, Google, Apple or phone).
- Your linked cards and bank accounts: when you link an account, our partner Plaid gives us account details and the card or bank transactions we use to calculate your round-ups. We store bank and card references, such as the bank name and last four digits. We never store full card or bank account numbers.
- Payments: gifts are processed by Stripe. Stripe holds your card or bank payment details; we keep a record of each gift (amount, date, charities and status).
- Your giving: the charities you choose, your gift history, totals, streaks and goals.
- Community: your display name and giving totals appear on the community leaderboard, along with any comments you post. You can stop your round-ups from being posted to the community in the app's settings.
- Notifications: if you allow notifications, a device token so we can send them. You can turn notifications off at any time.
- How you use the app: we use PostHog to understand how the app is used: which screens you visit and actions like signing up, linking an account or giving. This is tied to your account ID. PostHog also records your device type, operating system and an approximate location (city and country) derived from your IP address. We don't use session recording, and we don't collect your exact location.
How we use it
We use your information to run your account, calculate and charge your round-ups and gifts, send your gifts to the charities you choose, send receipts, tax receipts and account messages, show your impact, and improve the app. We send occasional news by email; you can unsubscribe at any time.
Who we share it with
We use these service providers to run Lasting Change. They process data for us, not for their own purposes, and must keep it confidential:
- Google Firebase: accounts, data storage, app hosting and push notifications.
- Plaid: linking your bank and card accounts, and reading the transactions used for round-ups.
- Stripe: card and bank payments, and payouts to charities.
- PostHog: product analytics.
- Resend: sending account and receipt emails.
- Zeffy: our donor records and newsletter.
Charities you give to: the charities that receive your gifts get a report of their donations that includes your name, email address, the gift amounts and dates, and whether you've agreed that they may contact you.
We don't sell, rent or lease your data, we don't show ads, and we don't track you across other companies' apps or websites.
We may disclose your information if the law requires it, or if we believe in good faith that it's necessary to comply with legal process, protect the rights or property of Lasting Change, or protect the personal safety of our users or the public.
Security
We take appropriate measures to protect your information from unauthorized access, use or change. Data is encrypted in transit, and payment details are held by Stripe, not by us. No transmission over the internet or a wireless network can be guaranteed to be completely secure, so we can't guarantee the security of information you send us.
Deleting your account
You can delete your account in the app (Account → Delete my account) or on the web at https://lasting-change-app.web.app/account. When you delete your account:
- We delete your profile, name, email and phone number; your linked bank and card accounts (and we disconnect them at Plaid); your transactions; any gifts not yet charged; your notification token; your community entry, comments and likes; your referral links; and your Stripe customer record and saved payment methods.
- We keep a record of gifts already made, with nothing that identifies you, so charities' totals and payouts stay correct. We keep these gift records indefinitely. Tax receipts are created from your gift history when you ask for one and sent to you by email. We keep a copy of the emails we send, including any receipt attached, in our email records, and those copies aren't removed when you delete your account. After your account is deleted we can no longer create a new receipt for you.
- Zeffy: if you're also in our donor records at Zeffy, that record stays, because it may hold gifts you made to us directly. Contact us to have it removed.
You can also ask us to delete your information by emailing info@makelastingchange.com. We may keep information where we need it to complete a transaction you asked for, detect or prevent fraud or security incidents, fix errors, or comply with a legal obligation.
Changes to this policy
We may update this policy from time to time. We'll tell you about significant changes by email or with a notice in the app. Continuing to use Lasting Change after a change means you accept the updated policy.
Contact
Questions or requests about your data: info@makelastingchange.com.
Effective as of November 5, 2026
