Legal

Privacy Policy

Last Updated: January 2026

MADA Community Centre ("we", "us", or "our") operates the MADA Tzedakah mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

This policy complies with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Privacy Officer

In accordance with Law 25, we have designated a Privacy Officer responsible for ensuring compliance with privacy legislation.

MADA Community Centre

6875 Boul. Decarie
Montreal, Quebec, H3W 3E4, Canada

Email: privacy@madacentre.com
Phone: (514) 342-4969

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Name — Your full name as provided during registration

Email address — Used for account authentication and communication

Password — Securely hashed and stored (we never store plain text passwords)

1.2 Payment Information

When you add payment methods or make transactions:

Card details — Processed and stored securely by Stripe. We only store the last 4 digits, card brand, and expiration date for display purposes.

Stripe Customer ID — A unique identifier linking your account to your Stripe payment profile

Transaction history — Records of donations, wallet refills, and settlements

1.3 Location Data

If you enable candle lighting reminders:

Geographic coordinates — Used solely to calculate accurate candle lighting times

Timezone information — To schedule reminders at the correct local time

Location data is optional and only collected with your explicit permission. You can disable it at any time through your device settings.

1.4 Usage Data

We automatically collect:

Tzedaka box activity — Coins dropped, goals set, and boxes emptied

Giving streaks — Consecutive days of giving for motivation tracking

Reminders created — Types and schedules of reminders you set

Preferences — Language, giving mode, preset amounts, and auto-refill settings

1.5 Address Information

If you choose to provide it for tax receipt purposes, we collect your mailing address: street, city, province/state, postal code, and country.

2. Third-Party Services

We use the following third-party services to operate our App:

Firebase (Google)

Authentication, Cloud Firestore for data storage, and Cloud Functions for backend operations.

Firebase Privacy Policy →

Stripe

Processes all payment transactions. PCI-DSS compliant. Securely stores payment method details.

Stripe Privacy Policy →

Google Sign-In

Optional authentication. We receive your name, email, and profile picture.

Google Privacy Policy →

Apple Sign-In

Optional authentication for iOS. We receive your name and email (or private relay email).

Apple Privacy Policy →

Google Places API

Provides address autocomplete functionality, used only when entering your tax receipt address.

3. How We Use Your Information

Process donations — Transfer funds to MADA Community Centre

Manage your account — Authenticate identity and maintain tzedaka boxes

Send reminders — Daily giving, Hebrew dates, candle lighting times

Candle lighting — Use location for accurate Shabbat and holiday times

Track streaks — Maintain your consecutive giving record

Tax receipts — Issue annual charitable donation receipts

Improve services — Understand usage to make improvements

Communicate — Send important account and service updates

4. Data Retention

Account dataRetained while your account is active
Transaction historyRetained for 7 years for tax and legal compliance
Location dataNot stored permanently; used only at time of calculation
Deleted accountsPermanently deleted within 30 days, except where retention is required by law

5. Data Security

All data transmission encrypted using TLS/SSL

Passwords hashed using industry-standard algorithms

Payment processing handled by PCI-compliant Stripe

Firebase provides enterprise-grade security for data storage

Access to user data restricted to authorized personnel only

6. Your Rights (Including Quebec Law 25)

Access your data — View all personal information we have about you

Correct your data — Update inaccurate or incomplete information

Delete your data — Request permanent deletion of your account (right to be forgotten)

Data portability — Receive a copy in a structured format (JSON or CSV)

Withdraw consent — Withdraw consent for data processing at any time

Opt out of notifications — Disable reminders through the App

Revoke location access — Disable location permissions through device settings

To exercise these rights, contact our Privacy Officer at privacy@madacentre.com. We will respond within 30 days.

Filing a Complaint

If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI): www.cai.gouv.qc.ca or call 1-888-528-7741.

7. Changes to This Policy

Posting the new Privacy Policy in the App

Updating the "Last Updated" date at the top

Sending you an email notification for significant changes

8. International Data Transfers

CanadaPrimary data storage via Firebase (Google Cloud)
United StatesPayment processing via Stripe; authentication via Google and Apple

Before any cross-border transfer, we ensure adequate privacy protections are in place. By using the App, you consent to the transfer of your information to these jurisdictions.

10. Contact Us

If you have questions about this Privacy Policy or our data practices:

MADA Community Centre

6875 Boul. Decarie
Montreal, Quebec, H3W 3E4, Canada

Email: info@madacentre.com
Privacy: privacy@madacentre.com
Website: madacentre.com