Privacy Policy


<h1>Privacy Policy</h1>
<h4>For Karmafy in Apps and the Karmafy Website</h2>

<h2>Who are we?</h2>
Karmafy is a software service owned and operated by Karma Holdings Ltd., Seaview apt. 4, Ix-Xatt Ta' Qui-Si-Sana, Sliema SLM3130, Malta.

Please direct questions and comments on this Privacy Policy to <a href="mailto:support@karmafy.com.">support@karmafy.com</a>.

<h2>What is Karmafy?</h2>
Karma Points are a global currency for doing good. You earn Karma Points by using a Karmafy-enabled app, website, or other service. Karmafy keeps track of your Karma Points and how you choose to spend them.

The Karmafy experience as embedded in apps, games, websites, or other services, is regulated by a agreements between Karmafy and the owner or operator of such services. Your service provider’s privacy policy may have additional information about their integration with Karmafy.

<h2>Using a Karmafy-enabled App or Website</h2>

<h3>As an Anonymous User</h3>
When you start using a Karmafy-enabled app or website (“app” for short), we create an anonymous Karmafy account to hold the Karma Points you earn. The account is identified by a random number and does not allow Karmafy to determine your real identity. While you are using the app, we will record the following data:

<ul>
  <li>In-app activities that can earn you Karma points, e.g., completing a level in a game, making an in-app purchase, watching advertising material.
  <li>A history of Karma Points earned and how you earned them.
  <li>Your choice of one or more causes as beneficiary/ies of the Karma Points you earn. This includes previous choices, even if you change your mind later.
  <li>Possibly your user name and/or user ID in the app itself, if the app developer has chosen to support this. Again, this will not enable Karmafy to find your real identity.
  <li>Device settings that improve the user experience, such as your language preferences and the device type.
  <li>The IP number currently assigned to your device. This is usually enough information to determine the country and city you’re in.
</ul>

While you are using a Karmafy-enabled app anonymously, we will not:
<ul>
  <li>Ask for your personal identity or attempt to figure it out.
  <li>Access personal information on your device, such as contacts, messages, photos, etc.
  <li>Attempt to determine your physical location.
</ul>

Occasionally, you will be presented with the option of sharing your Karmafy activities through a third-party channel such as Facebook, Twitter, email, etc. In this case, the privacy policy of that provider of that service applies. Karmafy will not associate your identity in the third-party service with your anonymous Karmafy account.

<h3>As a Registered User</h3>
You will be given the option of registering with Karmafy and becoming a Karmafy user. This requires you to identify yourself with either a valid email address and/or log in through a third-party service such as Facebook. You will be asked to choose a user name. Your email address, Facebook identity and Karmafy user name will be recorded and stored by Karmafy.

As a registered Karmafy user, you use a single account to hold the Karma Points you earn in all Karmafy-enabled apps. You will be able to access the Karmafy website to view and modify all information associated with your account.

Since we intend to build a social network for doing good, the following information about you will be made available to other participants in the network:
<ul>
  <li>Your user name and (if uploaded) profile picture.
  <li>Your total earned Karma Points.
  <li>Your total contributions of Karma Points to causes.
</ul>

Nobody but Karmafy will have access to your personal identity such as email address and Facebook user ID. We will not share this information with anybody without your consent. This includes the owners/operators of Karmafy-enabled apps and other services.

You may at any time decide to close your Karmafy account by logging on to our website https://user.karmafy.com. 

<h2>Third-party Data Processors</h2>

In operating Karmafy, we make use of several third-party services:

<ul>
  <li>Google Analytics. We use GA for statistical and monitoring purposes only. We may send records of your Karmafy activities to GA, but in anonymised form. 
  <li>Braintree. Occasionally, you will be given the opportunity to donate directly to a cause. Payment is processed by Braintree, a division of PayPal, Inc. While Karmafy will retain a record of your donation, we have no access to your credit card information, which is securely communicated between yourself and Braintree.
</ul>
We may choose to contract with additional third-party services in the future, but we will always anonymise your data.

<h2>Security</h2>
We endeavour to keep your information secure through industry-standard physical, electronic, and procedural safeguards. If we detect a breach of security that may have caused your information to be revealed or compromised, we shall notify you.

<h2>Hosting Service</h2>
The Karmafy servers are hosted by Amazon Web Services, Inc., which complies with the Safe Harbour principles agreed between the United States, the European Union, and Switzerland. We may choose to relocate hosting to the EU at some point in the future.

<h2>Changes to this Policy</h2>
Changes to this policy will be announced on the Karmafy web site and, if such changes have direct relevance to yourself, in a message displayed inside Karmafy-enabled apps. 

<h2>Legislation</h2>
As a company operating in Malta, Karmafy is required to comply with the Data Protection Act 2001, which implements the European Data Protection Directive (95/46/EC).
In preparing this policy, we have tried to follow the recommendations in “Opinion 02/2013 on apps on smart devices“ issued by the Article 29 Data Protection Working Party.