Generosity comprehensive privacy notice

Version 2026-11-01 · Effective November 1, 2026.

Web map information updated November 5, 2026.

1. Controller and contact

INSTITUTO DE DEBERES Y DERECHOS HUMANOS, a civil association, Mexican tax ID (RFC) IDD190329L69, is responsible for personal data processed through Generosity. Registered tax address: Temixco 7, acceso 1er callejón, colonia Pedregal de Santo Domingo, Coyoacán, Ciudad de México, C.P. 04369, Mexico.

Institute staff responsible for privacy can be reached at notificaciones@generosity.global or at that address. This is also the operational support and legal contact. Include “Generosity privacy” and a way to respond.

2. Data we process

Depending on the features you use, we process:

• Account: name, email, a hashed password, verification status, account identifier, sessions and access tokens. We retain your adult declaration, accepted terms/privacy version and acceptance date; routine registration does not request your birth date.
• External sign-in, if you choose an enabled provider: provider identifier, name, email and verification status the provider permits sharing. We do not receive your Google or Apple password.
• Organizations: name, activities, location, country, city and the representative's name and role. Optional fields include legal name, region, postal code, public address, phone and website. The contact email comes from the verified account.
• Support activity: related center and need, contribution type, quantities, units, availability, duration, optional notes, states and change history; self-reported personal help and explicitly marked visits.
• Operations and support: application references, communications you send, access and security records, IP address, technical browser or app information and actions by authorized staff. We avoid including passwords, tokens and private content in diagnostic logs.
• Preferences and device: language, permissions and notification or location settings. Some preferences, searches and pending operations remain on your device only. A map may use the area you browse; requesting permission does not mean publishing your location.

These flows do not request card details, bank credentials, biometric data, medical records or personal beneficiary data. Free-text notes must not include sensitive data, identifiable information about minors or protected addresses. If we receive unnecessary information, we will assess removal and any protection and consent measures required by law.

3. Necessary purposes

We use data to create and secure your account; verify email and recover access; record adult-policy acceptance; review location applications and contact representatives; assign and limit permissions; publish authorized center and need information; coordinate and record contributions, cancellations, confirmations and visits; synchronize your information; handle support and rights requests; prevent abuse and meet legal obligations.

Assigned centers see the minimum information required to manage contributions directed to them. Your location applications and personal history do not become public when you register. Receiving an application does not authorize publishing its contact details.

4. Optional purposes and choices

We currently do not use account data for personalized advertising, database sales or promotion of other Institute services. Any future secondary purpose will require separate information and a choice where applicable; it will not be a condition of essential features.

You can control location and notification permissions in your operating system and change the app language. Denying a permission does not prevent browsing public information through available options. We do not submit visits solely because of proximity. Requesting help does not authorize photographs or disclosure of your identity.

5. Providers, centers and transfers

We use Hostinger to host the API, database, website and email. Hosting infrastructure configured for this service is in the United States, so storage or processing may occur outside Mexico. Providers acting on the Institute's behalf must follow our instructions and applicable confidentiality and security measures.

When you choose external sign-in or use Google or Apple maps, these providers also process data under their own policies. The landing uses Google Fonts, whose loading communicates technical connection data to that provider. See Google's policy and Apple's policy.

The web map loads map imagery from the OpenStreetMap Foundation. To deliver it, this provider receives your IP address, technical connection data and requests identifying the map area being viewed, under its privacy policy. “Use my location” asks for browser permission: coordinates are used in memory to sort centers and position the map, without being stored or sent to the Generosity API in this flow. The requested map imagery lets the provider know which area you are viewing. You can search for centers by name or address without allowing your location.

When you direct an offer to a center, its authorized staff receive the transaction information necessary to coordinate it and record the outcome. They do not receive general access to your history, password or private applications. Additional contact or assistance data must be shared for the stated purpose based on your decision or an applicable legal exception.

We do not sell your data. Disclosures to authorities are limited to applicable legal requirements or obligations. If another transfer requires consent, we will request it before the transfer, specifying the recipient and purpose; registration is not blanket authorization for transfers.

6. Cookies and local storage

Web sign-in uses session and anti-forgery cookies. The landing remembers language in local storage and may retain a pending submission in session storage to retry without duplicates. Apps retain protected credentials, cache and pending operations associated with the account and server.

You can clear cookies and storage through your browser or app; doing so may sign you out or remove unsent drafts. It does not erase records already received by the server. These flows do not use advertising cookies or campaign-tracking tools.

Optional alerts use Google Firebase Cloud Messaging and, on iOS, Apple Push Notification service. When enabled, the provider receives the installation token and technical identifier, technical information needed to deliver messages, and account, notice and center references. Lock-screen text is generic. We do not send private notes or beneficiary data, and Analytics is not enabled for this service. You can turn alerts off in Settings or phone permissions; your account inbox is independent and retains notices for up to 90 days.

7. Retention and closure

We retain account data while the relationship is active and the data is necessary for its purposes. Location applications are retained during review and follow-up; contributions and changes are retained while needed to meet commitments, address incidents and evidence the transaction. The Institute reviews continued retention when resolving a request or receiving a cancellation request.

Executing closure permanently blocks access, but the closure flag does not itself erase records. On a cancellation request, we identify data to erase and, where a legal obligation or responsibility applies, the minimum data to restrict. We will explain the retention reason and applicable period or legal criterion. Restricted data is used only for those responsibilities; it does not enable account access or promotions. When the retention reason ends, data will be erased or effectively anonymized.

Backups are restricted to recovery purposes and managed consistently with applicable cancellation decisions. Restoring a backup must not reactivate a closed account or restart cancelled processing. An offline local copy cannot immediately be erased by the server. Institute staff handle these requests; marking an account does not promise automatic deletion of every copy.

8. ARCO rights, withdrawal and limits on use

You may request access, rectification, cancellation or opposition (ARCO), withdraw consent or limit use or disclosure through the contact in section 1, even without an installed app or with a closed account. These rights are independent of closing account access.

Include your name, a response channel, account email or reference, the data or processing concerned and a clear description. For corrections, identify the change and supporting information. We will verify identity or representation proportionately; do not send passwords, access codes or unsolicited sensitive documents. We will tell you if further information is needed to process the request.

We will communicate a decision on an ARCO request within 20 business days of receipt and, if granted, implement it within 15 business days after communicating the decision. The law permits one justified extension for an equal period. Consent withdrawal and use restrictions use the same channel; we will explain their effects and obligations that prevent stopping certain processing. Withdrawal is not retroactive.

Exercising rights is free except legally permitted reproduction or shipping costs disclosed beforehand; we aim to respond electronically without charge. We will explain any full or partial refusal. You may contact the competent authority under Mexico's Federal Law on Protection of Personal Data Held by Private Parties.

9. Minors

Accounts are limited to people who are at least 18 and have reached the age of majority where they live. We do not encourage minors to register or knowingly collect their account data. If you identify a minor's account, contact the Institute so we can verify the case, block access and handle the data appropriately. This does not prevent a center from assisting minors under its own obligations and protective measures.

10. Changes and questions

We will publish dated updates at this address. For material changes to purposes, recipients or choices requiring consent, we will explain the change and obtain necessary authorization before the new processing. We retain the acceptance version associated with registration.

Send questions to Institute staff at notificaciones@generosity.global. Spanish is the drafting reference without limiting applicable rights because of translation differences.