Privacy policy

What the platform collects and why, who processes it on our behalf, how long it is kept, your rights and how to delete your account.

This policy explains how the foundation that runs this website and the Muthaberon app processes your personal data when you donate, volunteer or use the app. The foundation is responsible for your data; the platform works on its behalf.

What we collect and why

Account and sign-in

• Phone number or email: to sign in with a one-time code (the app has no passwords), and to send the receipts and notifications you choose.
• Display name and preferred language if you enter them, and your consent to show your name publicly; every consent is recorded with its date and source.

Donations

• Amount, currency, project, payment status, receipt number and the payment gateway's reference, and your monthly donation if you have one.
• For donors without an account: the name and phone or email you enter, to send the receipt.
• We never collect or store your card details: you pay on the payment gateway's own page (ZainCash, Qi Card, or Stripe for donors outside Iraq), and card data never passes through our servers.

Location

• The "My location" button on the map: your device's location is used on the device only to move the map, and is not sent to us.
• Volunteers: an approximate area only (about 11 km precision) if you add one to your profile. When you check in with a QR code, your device's location is sent to compare it with the event's place, and we keep only the result (near or far).
• Field workers (the foundation's staff and assigned volunteers): the exact location of each planting or care visit and its photos, to prove that the tree was planted and cared for. Location is never requested in the background.

Photos and files

Photos of trees and projects and uploaded files are kept in the foundation's cloud storage (S3-compatible, such as Cloudflare R2). Embedded location data (EXIF) is removed from photos before they are published, and tree locations may be shown approximately to the public to protect them.

Volunteering, campaigns and certificates

• Your skills, availability and contact consent, and your event registrations, attendance and hours.
• The volunteering form, if you fill it in: your name, your phone number (your account's number, verified with a code, and whether it has WhatsApp), the kinds of volunteering you choose, your days, hours and availability dates, your city and notes. We use it to invite you to volunteer events that fit your times (one invitation per event, with a daily limit, in the app, by push and by email as you choose) and so the foundation's coordinators can contact you. Your number is masked in the volunteer list; only staff allowed to manage volunteers see it in full, and every such view and every export of the list is logged. You can pause the invitations or delete the form at any time from the "Volunteer" page; your registrations and hours stay.
• Campaigns you create (title, story and your name if you choose to show it).
• Certificates carry the name printed on them; their verification page shows it only to someone who holds the certificate's code.

Tree-cutting reports

If you report tree cutting (from the "Report tree cutting" page on the website or in the app, without an account or with yours):

• What we keep: the description, when you saw it, the location you chose (a pin on the map, your device's location or the photo's location), a nearby landmark if you write one, 1 to 5 photos, your name and phone number if you choose to add them (we do not verify them or send them messages; the foundation's staff use them only to contact you about the report), your consent, and the channel (website or app). If you are signed in, the report is linked to your account so you can see it in "My reports".
• Photos: their embedded location data (EXIF) is removed as soon as they are uploaded, and they are kept private: never published, seen only by staff allowed to manage reports, through short-lived links. The photo's embedded location is read before it is removed only to suggest it to you as the report's location, and it is used only if you choose "The photo's location".
• Location: your device's location is requested only when you press "Use my location".
• A report is never public: the tracking page shows only the status, to whoever holds the report number and the tracking code, without photos, location, name or phone. Contact details are masked for staff, and every full view, every opening of a report, every status change and every export is logged (exports contain no reporter data).
• Protection from abuse: we count reports per IP address, device and account per day using a fingerprint that does not reveal them. If the foundation turns on Cloudflare Turnstile, it loads on the website's report page for visitors who are not signed in, and Cloudflare receives technical data from your browser to check that you are not an automated program.
• The foundation may pass a report on to the competent authorities (such as the agriculture or environment directorate); it shares your name or phone only as far as following up the report needs.

Notifications

Your device's push token (Google Firebase Cloud Messaging) and device id, and your preferences per type and channel. The device token is removed when you sign out.

The automatic assistant

Questions you type in the help center are sent to an AI provider (Anthropic) after email addresses and long digit sequences are removed, and without your account id; it answers from the help articles only. Do not type personal details into it. Conversations with the dashboard assistant (staff only) are deleted automatically after the period the foundation sets (90 days by default).

Technical data and cookies

• IP address, to protect the service from abuse (rate limits); it is recorded with staff actions in the audit log.
• Operational logs and performance metrics on our servers, to find and fix failures.
• No ads, no advertising trackers and no third-party analytics libraries in the app or on the website.
• The website uses strictly necessary cookies only: language, the staff dashboard session, protection against forged requests, and the access token to a guest donation's status and receipt.

Who processes your data on our behalf

We share with these parties only what the service needs, and we never sell or rent your data:

• Payment gateways: ZainCash, Qi Card, Stripe.
• Messaging: SMS, WhatsApp and Telegram providers (such as Wevlix) for verification codes and notifications, and the email provider (SMTP).
• Push notifications: Google Firebase Cloud Messaging.
• Storage: S3-compatible cloud storage (such as Cloudflare R2) for photos and files.
• Artificial intelligence: Anthropic, if the foundation turns it on.
• Checking that the sender is human: Cloudflare Turnstile on the tree-cutting report form, if the foundation turns it on.
• Maps: OpenStreetMap maps hosted on our own servers; if the foundation chooses Google Maps, Google receives the map requests from your device.
• Hosting: a rented server operated by the foundation.

Some of these parties process data outside Iraq under their own data protection terms.

How long we keep it

• Your account data: for as long as your account exists, then 7 days after you ask to delete it (the time to cancel).
• Verification codes: deleted after two days; sign-in sessions 30 days after they end.
• Financial records (donations, receipts and ledger entries): kept for as long as the law requires, even after the account is deleted, with their link to you removed.
• The audit log: kept for accounting and security, without phone numbers or emails.
• Backups: rotated and deleted after about 30 days.
• Tree-cutting reports and their photos: environmental protection records the foundation keeps for as long as it needs them to follow up the report and with the authorities. When you delete your account, the report is unlinked from it and your name and phone are erased from it. If you reported without an account and want your name and phone erased from your report, ask the foundation, giving the report number.

Your rights

• Access, correction and a copy: see your data in the app or in My account on the website, edit your name and preferences, and download a complete copy of your data yourself (Export my data) after a confirmation code sent to your phone or email, or ask the foundation for it.
• Withdraw consent: stop showing your name or any type of notification at any time.
• Delete your account: in the app (Profile → Delete account) or on the website's account deletion page, without the app. See Deleting your account for what is deleted and what stays.

Account deletion in short

After you confirm a code sent to your phone or email, every session ends at once and the deletion is scheduled 7 days later; we send you a notice when you ask and a reminder a day before. During that time you can cancel by signing in to the app or on the website's deletion page, and you cannot donate or change your details until you cancel. When the period ends, your number, email, name, device tokens, notifications, volunteer profile, conversations and impact cards are deleted, your name and phone are erased from the tree-cutting reports you sent and they are unlinked from your account, and certificates issued to you are revoked with your name erased. Donations and issued receipts stay without your name because they are financial records.

Security

Connections are always encrypted (HTTPS), provider secrets are stored encrypted, donors' contact details are masked for most staff and every full view is logged, and signing in to the dashboard needs two-step verification.

Children

Donating and creating an account are for adults (18 or older). If we learn that we collected a child's data without a guardian's consent, we delete it.

Changes to this policy

Any change is published here, and the date of the last update is shown at the bottom of the page.

Contact

For any question or request about your data, contact the foundation through the contact channels published on its official website, or through the help center.

Last updated: 11 October 2026