Foundation Console Privacy Policy

Foundation Console is a mobile app published by Salix Limited (NZBN 9429053674067) — “Salix”, “we”, “us” — on Google Play under the package name com.salix.foundationconsole. This policy explains what information the app handles, how it is used, and the rights you have under the New Zealand Privacy Act 2020.

Foundation Console is a private staff app for charities that run their website on a Salix-built platform. It signs in to the charity's own system and shows staff what is already there — donations, supporter records, incoming enquiries and volunteer applications, and event attendee lists — so they can respond and run events from a phone. It is a window onto the charity's own records, not a place where information is gathered by Salix.

Each charity is the operator of, and responsible for, the records shown in the app. It is currently used by Pearl of the Islands Foundation (New Zealand) and Raindrop Foundation San Antonio (United States). This policy covers the app; it is separate from the privacy policy for our website.

Accounts are created for named staff by the charity. You cannot register yourself, and the app shows nothing at all until a staff account signs in.

To sign you in and keep you signed in, Foundation Console processes:

• Your email address and password — entered at sign-in and sent to your charity's system to authenticate you. Your password is not stored on the device.
• Session tokens — a short-lived access token held only in memory, and a longer-lived refresh token held in the device's secure keystore, so you stay signed in. The refresh token is replaced each time it is used.
• Which charity you signed in to — stored on the device. You may be signed in to more than one at once and switch between them.

To deliver alerts, and only if you allow notifications:

• A push token — a notification token issued by Expo's push service is sent to your charity's system, along with your device platform (for example “android”) and device name, so it can alert you when a donation, application, enquiry or event booking arrives.

While you use the app, it displays your charity's own records, drawn live from its system:

• donations — including the donor's name, email address and amount; supporter and subscriber records; volunteer applications; travel enquiries; and event attendee lists, which may include attendees' names, email addresses, guest numbers and answers to questions that event asked.

These records are the charity's, shown to authorised staff on demand. They are not collected, copied or retained by Salix. The app keeps a copy on the device so screens open quickly and remain readable where there is no signal — for example an attendee list at a venue.

When you mark someone as arrived while offline, that single change is held on the device until a connection returns and it can be sent to the charity's system.

What the app does not do: it does not request your location, contacts, camera or microphone; it uses no advertising identifiers; it contains no third-party advertising or analytics SDKs; and it does not track you across other apps or websites.

Where a charity runs registered programmes for children, the records shown in the app can include a child's name and any allergy or medical note their parent or guardian provided. This information is displayed only to signed-in staff who need it to run the programme, and the platform deliberately never places it in a notification or confirmation email. Salix does not collect or retain it.

The app itself is a workplace tool for charity staff. It is not directed at children, and we do not knowingly collect information from them.

The information above is used only to run the app for you: to sign you in and keep you signed in, to connect to your charity's system and display its records, and to alert you when something new arrives. We do not use it for advertising, and we do not sell or rent it to anyone.

Foundation Console relies on a small number of services to work:

• Your charity's system — the platform that runs its website and holds its records. It receives your sign-in and your push token, and serves the information the app shows you.
• Expo (Expo push notification service, operated by 650 Industries, Inc.) — issues the push token and relays alerts to your device, where notifications are enabled.
• Apple or Google — the operating system's own notification service delivers the alert to your device: Apple Push Notification service on iOS, Firebase Cloud Messaging on Android.

These providers process data so the app can function. Some may store or process data outside New Zealand; where they do, we take reasonable steps to ensure it is protected to a standard comparable to the Privacy Act 2020.

• Notifications — to alert you to new donations, applications, enquiries and event bookings. You can decline, and the rest of the app still works; you simply will not get alerts.
• Network access — to reach your charity's system.

The app also includes standard permissions required by its app framework (such as vibration for notification alerts). It does not use these to collect information about you.

Information stored on your device — your email, session tokens, which charity you are signed in to, and the cached records described above — stays on the device until you sign out or uninstall the app. Signing out clears the cached records and ends the session on the charity's system. Your push token is kept by that system so it can alert you, until you sign out, the device is removed, or the token stops working.

You can remove your information at any time:

• Data on your device — sign out to clear your session and the cached records, or uninstall the app to remove everything Foundation Console has stored locally.
• Your staff account and your push token — contact your charity's administrator, or email us at info@salixtech.co.nz with the subject “Foundation Console deletion request”. We will action the request, or pass it to the charity that operates the system, and respond within 20 working days.

Requests about a record held by a charity — a donation, an enquiry, an attendee entry — should go to that charity, which is responsible for it. We will help identify the right contact if you are not sure.

Sign-in tokens are held in the device's secure keystore, and the app talks to your charity's system and to Expo over encrypted connections. Access tokens are short-lived and refresh tokens are replaced on every use, so a captured token has limited value, and an administrator can end a lost device's access immediately. No online service can promise perfect security, but we treat what the app handles with care.

We may update this policy as the app or our practices change. The “last updated” date at the top always reflects the current version.

Salix Limited (NZBN 9429053674067) — info@salixtech.co.nz. For privacy matters, address your message to the Privacy Officer. If you are not satisfied with how we have handled your information, you may complain to the Office of the Privacy Commissioner (privacy.org.nz).