Last Updated: October 9, 2025
Introduction
Hefestru Fund ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://hefestru.org (the "Website"), use our mobile applications, including the Eyes app (the "Apps"), or interact with our services (collectively, the "Services").
Hefestru Fund is a 501(c)(3) nonprofit organization incorporated in Delaware, United States, with EIN: 35-2894390. Our mission is to develop and provide innovative assistive technologies to help people with disabilities live more independently and safely.
By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Donate to our organization: Name, email address, mailing address, phone number, payment information, donation amount, and any additional information you choose to provide
- Subscribe to our newsletter: Email address and name
- Contact us: Name, email address, phone number, and any message content
- Participate in surveys or research: Responses to surveys, feedback, and research participation data
- Apply for programs or services: Personal information relevant to program eligibility and participation
- Use our mobile applications: Device information, usage data, and any personal information you choose to provide
Automatically Collected Information
When you visit our Website or use our Apps, we may automatically collect certain information, including:
- Device Information: IP address, browser type and version, operating system, device identifiers, and mobile device information
- Usage Data: Pages visited, time spent on pages, click patterns, referral sources, and navigation paths
- Location Data: General geographic location based on IP address (we do not collect precise GPS coordinates without explicit consent)
- Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies
Information from Third Parties
We may receive information about you from third parties, including:
- Payment processors: Transaction information and payment verification data
- Analytics providers: Website and app usage statistics and user behavior data
- Social media platforms: Information you choose to share when connecting with us through social media
- Research partners: Anonymized research data and study participation information
How We Use Your Information
We use the information we collect for the following purposes:
Mission-Related Activities
- Providing Services: Delivering our assistive technology applications and services
- Research and Development: Improving existing technologies and developing new assistive solutions
- User Support: Providing technical support and assistance for our applications
- Program Administration: Managing participation in our programs and services
Communication
- Newsletter and Updates: Sending newsletters, updates about our mission, and information about new technologies
- Donor Communications: Acknowledging donations, providing tax receipts, and sharing impact reports
- Customer Service: Responding to inquiries, providing support, and addressing concerns
- Research Communications: Contacting participants about research studies and surveys
Legal and Administrative
- Legal Compliance: Complying with applicable laws, regulations, and legal processes
- Tax Reporting: Maintaining records for tax purposes and providing donation receipts
- Security: Protecting against fraud, unauthorized access, and other security threats
- Administrative Functions: Managing our organization, maintaining records, and conducting internal operations
Analytics and Improvement
- Website Analytics: Understanding how visitors use our website to improve user experience
- App Analytics: Analyzing app usage to improve functionality and user experience
- Research: Conducting research to advance assistive technology development
- Performance Monitoring: Monitoring and improving the performance of our services
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
Service Providers
We may share information with trusted third-party service providers who assist us in operating our Services, including:
- Payment processors: For processing donations and payments
- Email service providers: For sending newsletters and communications
- Analytics providers: For understanding website and app usage
- Cloud storage providers: For securely storing data
- Research partners: For conducting research studies (with appropriate consent and anonymization)
Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Legal process: Court orders, subpoenas, or other legal requests
- Government investigations: Requests from government agencies
- Legal compliance: Compliance with applicable laws and regulations
- Protection of rights: Protecting our rights, property, or safety, or that of others
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will provide notice of any such transfer and ensure appropriate protections are in place.
Consent
We may share your information with your explicit consent for specific purposes not covered in this Privacy Policy.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Using industry-standard encryption for data transmission and storage
- Access Controls: Limiting access to personal information to authorized personnel only
- Regular Security Audits: Conducting regular security assessments and updates
- Secure Infrastructure: Using secure servers and cloud infrastructure
- Staff Training: Training staff on data protection and privacy best practices
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:
- Donor Information: Retained for tax and legal compliance purposes (typically 7 years)
- Newsletter Subscriptions: Retained until you unsubscribe or request deletion
- Customer Service Records: Retained for 3 years after the last interaction
- Research Data: Retained according to research protocols and legal requirements
- Website Analytics: Retained for 26 months (Google Analytics default)
Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
Access and Portability
- Right to Access: Request a copy of the personal information we hold about you
- Right to Portability: Request that we provide your information in a structured, machine-readable format
Correction and Deletion
- Right to Rectification: Request correction of inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal information (subject to legal and operational requirements)
Objection and Restriction
- Right to Object: Object to processing of your information for certain purposes
- Right to Restrict: Request restriction of processing in certain circumstances
Withdrawal of Consent
- Consent Withdrawal: Withdraw consent for processing based on consent (where applicable)
Communication Preferences
- Newsletter Unsubscribe: Unsubscribe from our newsletters and marketing communications
- Communication Preferences: Update your communication preferences
To exercise these rights, please contact us at info@hefestru.org. We will respond to your request within 30 days, subject to verification of your identity.
Children's Privacy
Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
For children between 13 and 18, we may collect information with appropriate parental consent or as permitted by applicable law.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. When we transfer your information internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses: Using EU-approved standard contractual clauses
- Adequacy Decisions: Transferring to countries with adequate data protection
- Certification Schemes: Using certified data processors and service providers
Third-Party Services
Our Services may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to these third-party services. We encourage you to review the privacy policies of any third-party services you use.
Third-Party Services We Use
- Google Analytics: For website analytics and user behavior tracking
- Mailchimp: For email marketing and newsletter management
- Payment Processors: For processing donations and payments
- Social Media Platforms: For social media integration and sharing
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Website. Cookies are small text files stored on your device that help us:
- Remember Preferences: Remember your preferences and settings
- Analyze Usage: Understand how you use our Website
- Improve Performance: Optimize Website performance and functionality
- Personalize Content: Provide personalized content and recommendations
Types of Cookies We Use
- Essential Cookies: Necessary for Website functionality
- Analytics Cookies: Help us understand Website usage
- Functional Cookies: Remember your preferences and choices
- Marketing Cookies: Used for targeted advertising (with consent)
You can control cookies through your browser settings. However, disabling cookies may affect Website functionality.
Mobile Applications
Our mobile applications, including the Eyes app, may collect additional information:
Device Information
- Device Identifiers: Unique device identifiers and hardware information
- Operating System: Device operating system and version information
- App Usage: How you use the app, features accessed, and time spent
- Performance Data: App performance metrics and crash reports
Location Data
- General Location: General geographic location for service improvement
- Precise Location: Precise location data only with explicit consent for specific features
Camera and Sensor Data
- Camera Access: Camera access for assistive technology features (with explicit consent)
- Sensor Data: Device sensor data for assistive technology functionality
- Depth Sensor Data: Depth sensor data for obstacle detection (processed locally on device)
Research and Development
As a nonprofit organization focused on assistive technology development, we may use anonymized and aggregated data for research purposes:
Research Activities
- Technology Development: Improving existing assistive technologies
- User Experience Research: Understanding user needs and preferences
- Accessibility Studies: Conducting research on accessibility and inclusion
- Academic Collaboration: Collaborating with academic institutions and researchers
Data Anonymization
- Personal Identifiers Removed: All personally identifiable information is removed
- Aggregation: Data is aggregated to prevent individual identification
- Consent: Research participation requires explicit consent
- Ethical Review: Research activities undergo appropriate ethical review
Donor Privacy
We are committed to protecting donor privacy and maintaining donor confidentiality:
Donor Information Protection
- Confidentiality: Donor information is kept confidential and secure
- Limited Sharing: Donor information is not shared with third parties except as required by law
- Opt-Out Options: Donors can opt out of recognition and public acknowledgment
- Tax Receipts: Donors receive appropriate tax receipts for their contributions
Donor Recognition
- Public Recognition: Donors may be publicly recognized unless they opt out
- Anonymous Donations: We respect requests for anonymous donations
- Donor Lists: Donor lists are not sold or shared with third parties
California Privacy Rights
If you are a California resident, you have additional privacy rights under the California Consumer Privacy Act (CCPA):
Right to Know
- Categories of Information: Right to know what categories of personal information we collect
- Sources: Right to know the sources of personal information
- Purposes: Right to know the purposes for collecting personal information
- Third Parties: Right to know what third parties we share information with
Right to Delete
- Deletion Request: Right to request deletion of personal information
- Verification: We will verify your identity before processing deletion requests
- Exceptions: Certain information may be retained for legal or operational purposes
Right to Opt-Out
- Sale of Information: Right to opt out of the sale of personal information (we do not sell personal information)
- Sharing for Business Purposes: Right to opt out of sharing for business purposes
Non-Discrimination
- Equal Service: We will not discriminate against you for exercising your privacy rights
- Service Quality: We will provide the same quality of service regardless of privacy choices
European Union Privacy Rights
If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR):
Lawful Basis for Processing
- Consent: Processing based on your explicit consent
- Contract: Processing necessary for contract performance
- Legal Obligation: Processing required by law
- Legitimate Interest: Processing for legitimate business interests
- Vital Interests: Processing to protect vital interests
Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee GDPR compliance. You can contact our DPO at info@hefestru.org.
Supervisory Authority
You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
Notification Methods
- Website Notice: Post the updated Privacy Policy on our Website
- Email Notification: Send email notifications to registered users
- App Notification: Provide in-app notifications for mobile app users
- Effective Date: Update the "Last Updated" date at the top of this Privacy Policy
Material Changes
For material changes that significantly affect your privacy rights, we will provide additional notice and may require renewed consent.
Continued Use
Your continued use of our Services after changes to this Privacy Policy constitutes acceptance of the updated terms.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Primary Contact
Hefestru Fund
Email: info@hefestru.org
Website: https://hefestru.org
Data Protection Officer
Email: info@hefestru.org
Subject Line: "Privacy Policy Inquiry"
Response Time
We will respond to all privacy-related inquiries within 30 days of receipt.
Additional Resources
Privacy Resources
- Federal Trade Commission: https://www.ftc.gov/privacy
- California Attorney General: https://oag.ca.gov/privacy
- European Data Protection Board: https://edpb.europa.eu/
Nonprofit Resources
- National Council of Nonprofits: https://www.councilofnonprofits.org/
- IRS Tax-Exempt Organizations: https://www.irs.gov/charities-non-profits
This Privacy Policy is effective as of October 9, 2025, and was last updated on October 9, 2025.
Hefestru Fund is a 501(c)(3) nonprofit organization incorporated in Delaware, United States, with EIN: 35-2894390.
