Yeudi

1. Controller and Contact

The controller responsible for processing your personal data is:

CONNECT-TZEDAKA GMBH

Reichsratsstraße 11/3

1010 Wien, AUSTRIA

Company register no.: FN 615147 d

VAT ID (UID): ATU 800 04 736

Email: office@yeudi.app

Phone: +43 676 844 135 208

2. Scope of Application

This Privacy Policy applies to all users of the Yeudi platform (yeudi.app), including:

website and mobile applications,
donors,
charities and campaign organizers,
administrators and representatives of partner organizations,
worldwide, including users located in Europe, the United States, and Israel.

3. Categories of Personal Data Processed

3.1 Account and Identity Data

Name
Email address
Optional phone number
Account credentials (hashed)
Language and user preferences

3.2 Donation and Transaction Data

Donation amount and currency
Date and time of donation
Selected charity or campaign
Platform fee and "donor covers fee" selection
Transaction reference IDs
Donation receipts and confirmations

⚠️ Payment card and bank details are never stored by Yeudi.
They are processed exclusively by Stripe.

3.3 Technical and Usage Data

IP address
Device and browser information
App version
Log files, security events
Approximate location (derived from IP)

3.4 Communications

Support requests
Email correspondence
Feedback and inquiries

4. Purposes and Legal Bases (Art. 6 GDPR)

Purpose	Legal Basis
Account creation and platform access	Art. 6(1)(b) – Contract
Donation processing and fund distribution	Art. 6(1)(b) – Contract
Platform fee calculation and invoicing	Art. 6(1)(b), Art. 6(1)(c)
Fraud prevention & platform security	Art. 6(1)(f) – Legitimate interest
Legal and accounting obligations	Art. 6(1)(c)
Customer support	Art. 6(1)(b)
Analytics and service improvement	Art. 6(1)(f) or Art. 6(1)(a) (where consent is required)

5. Payment Processing – Stripe Connect

Donations on Yeudi are processed via Stripe Connect.

Stripe acts as an independent data controller for payment processing and financial compliance. Stripe is responsible for:

collecting payment details,
splitting donation amounts between parties (charities, Yeudi),
transferring funds,
fraud detection and regulatory compliance.

Stripe's Privacy Policy applies in parallel: https://stripe.com/privacy

6. Platform Fees & "Donor Covers Fee"

Yeudi applies a transparent platform fee.

Donors may optionally choose to cover the platform and payment processing fees, increasing the net amount received by charities.

This selection is stored as part of the transaction record.

7. Data Recipients

We may share personal data with:

Stripe Payments Europe Ltd. / Stripe Inc. (payment processing)
Hosting and infrastructure providers (EU/US-based cloud services)
Analytics and monitoring providers (where legally permitted)
Legal, tax, and compliance advisors
Authorities where legally required

All processors are bound by GDPR-compliant data processing agreements.

8. International Data Transfers

Where personal data is transferred outside the EEA (including the USA or Israel), we rely on:

EU Standard Contractual Clauses (SCCs), and
additional safeguards where required.

9. Data Retention

Data Type	Retention
Account data	Until account deletion
Transaction records	As required by tax & accounting law
Support communications	Up to 36 months
Security logs	Up to 180 days

10. Your Rights

You have the right to:

access,
rectification,
erasure,
restriction,
data portability,
objection,
withdrawal of consent (where applicable).

Requests may be sent to office@yeudi.app.

You may also file a complaint with the Austrian Data Protection Authority (Datenschutzbehörde – DSB).

11. Security Measures

We implement appropriate technical and organizational measures, including:

encryption in transit,
role-based access control,
logging and monitoring,
secure hosting infrastructure.

12. Children

The platform is not intended for users under 18 years of age, unless permitted by local law with parental consent.

13. Updates

We may update this Privacy Policy. Material changes will be communicated via the platform.

14. Child Safety Standards (CSAE/CSAM) – Zero Tolerance Policy

Tzedaka.io is committed to protecting children and maintaining a safe platform. We have a zero tolerance policy for any content or behavior involving child sexual abuse and exploitation (CSAE), including child sexual abuse material (CSAM).

14.1 Prohibited Content

The following is strictly prohibited on Yeudi (yeudi.app):

Any form of CSAM (images, videos, audio, or text)
Any content that depicts, promotes, normalizes, or facilitates sexual exploitation of minors
Grooming, sexual solicitation, or sexualized interactions involving minors
Sharing links, instructions, or requests related to CSAM or exploitation
Any attempt to evade detection or reporting mechanisms

Users must not upload, distribute, request, or promote such content under any circumstances.

14.2 Detection, Reporting, and Enforcement

We take reports seriously and may take immediate action, including:

Removing content
Suspending or terminating user accounts
Blocking uploads and restricting access to platform features
Reporting to appropriate authorities where required by law

Where legally obligated or appropriate, we may report suspected CSAM/CSAE to relevant authorities, including law enforcement or national reporting bodies.

14.3 User Reporting Mechanism (In-App and Email)

Users can report content or behavior that violates our Child Safety Standards by:

Using the in-app reporting function (where available), or
Contacting us directly at: office@yeudi.app

Reports should include any relevant information such as:

the campaign name,
screenshots or URLs (if applicable),
description of the issue.

14.4 Child Safety Point of Contact

For child safety-related issues, including CSAM/CSAE concerns, you may contact our Child Safety point of contact:

Child Safety Contact (Yeudi)

Email: office@yeudi.app

Subject line suggestion: "Child Safety Report – Urgent"

14.5 Legal Compliance

We comply with applicable child safety and reporting laws, including EU and Austrian requirements, and we cooperate with authorities when legally required.

14.6 Platform Not Intended for Children

Yeudi is not intended for users under 18 years of age, unless permitted by local law with parental consent. We do not knowingly allow child accounts and may request verification or restrict access where appropriate.