Privacy

6 Blessings is run by the operator of 6 Blessings. It keeps a record of your income and your charitable giving so you can see what you have set aside and what is left to give. This page says what information that involves, what is done with it, and what is not.

The short version: your information is used to run the service for you. It is not sold, not used for advertising, and not used to build a profile of you.

What changed on October 19, 2026

• Looking up a recipient sends the name or website you typed to a web search service (Brave) and an AI service (Anthropic), to find the organisation's public details. Nothing about you or your giving goes with it.
• Photos you choose for a recipient's picture are kept with your ledger.
• A new section on the iPhone app: Face ID, notifications, the home-screen widget, and connecting a bank in it.

What we hold

Your account. Your mobile number, which is what you sign in with. Your 4-digit PIN, stored only as a one-way hash, which we cannot read. An email address, if you choose to give one. If you ask a device to be remembered so it isn’t sent a code every time, a one-way hash that identifies that device.

What you record. The income entries, gifts, recipients, notes, settings and rules you enter, and any photo you choose for a recipient’s picture. Recipients’ photos are kept with your ledger and shown only to you.

Bank deposits, if you import a statement or connect a bank. For each deposit: its date, its amount, the description your bank gave it, and which of your accounts it arrived in.

• Money going out of your accounts is kept only when it looks like a gift, or you pick it as one. Other spending is not stored.
• Account balances are not stored.
• Your bank username and password never reach us. You enter them on your bank’s or the connection provider’s own page.
• The credential that keeps your bank connected is stored encrypted, and you can disconnect it at any time.

Technical records. The internet address and browser type of each device you sign in from, and a log of changes made to your ledger. These exist for security and so mistakes can be traced. We also count how many minutes a day you have the app open: only the number, nothing about what you did. If you choose to add your giving to the grand total, the sum of your gifts is added, without your name, to one combined figure that everyone using the app can see. Nothing about your own giving is shown, and you can say no or change your mind in Settings.

Cookies. A few: one keeps you signed in, and the others remember this device and choices you make on it, like your style. There are no advertising or analytics trackers.

What it is used for

To show you your ledger, to recognise deposits according to the rules you set, to keep your account secure, and to text you about your account: a code to confirm your number, a code when you sign in on a new device or reset your PIN, and a notice when your PIN or number changes. That is all we text: never reminders, news or offers. Message and data rates may apply.

Your mobile number is never sold, and never shared with anyone for their own marketing.

Who else handles it

Running the service means relying on a few other companies. Each receives only what its job requires.

• Hosting and database: Vercel and Supabase store and serve the service.
• Plaid: if you connect a bank through Plaid. You authorise Plaid and us to access and transmit your financial information from that bank on your behalf, and Plaid handles it under the Plaid End User Privacy Policy.
• SimpleFIN: if you choose to connect a bank through SimpleFIN, under your own account with them.
• Text messages: a messaging service (Twilio) delivers the texts described above. It receives your mobile number and the text.
• Email delivery: if you give an email address, a mail service sends the link that confirms it.
• Payments: if paid subscriptions are offered, card payments are taken by Stripe. Card numbers go to Stripe and never to us.
• Finding a recipient’s details: when you look up an organisation, the name or website you typed is sent to a web search service (Brave) and an AI service (Anthropic) to find its public details, like its logo, address and tax ID, and checked against public charity registers (the IRS’s list, and ProPublica). Nothing about you or your giving is sent with it.

Beyond these, your information is not shared with anyone unless the law requires it.

How it is protected

• Everything travels over an encrypted connection.
• Bank credentials are encrypted before they are stored.
• Each account’s records are separated from every other account’s inside the database itself, not only by the application.
• Signing in on a device we haven’t seen before takes a code texted to your phone as well as your PIN.

No system can promise perfect security. If something goes wrong that affects your information, you will be told.

The iPhone app

The app shows the same service and holds the same information as the website. It doesn’t track you across other apps or websites, and it has no advertising.

Face ID, if you switch it on, is handled by your iPhone: your face never reaches us. The phone keeps a key that only opens after Face ID, and we keep the matching public key, which can’t open anything on its own. Switch it off in Settings, and it is removed from the phone and from us.

Notifications, if you ask for them, come through Apple. Your iPhone gives us an address for them, which we keep for as long as you are signed in on that phone; signing out there removes it. A notification says only that something needs you, such as deposits waiting for a yes or no. It never shows an amount, a payer or a recipient, because it can be read on your lock screen.

The home-screen widget shows your giving shortcuts (their names and amounts), kept on your iPhone. So that it can log gifts by itself, your iPhone keeps a key for it, and we keep only a scrambled copy that can’t be turned back into the key. The key can only list your shortcuts, log a gift from one, and undo that gift; it can’t read anything else. Switching it off, signing out on that iPhone, or changing your PIN ends it.

Connecting a bank in the app uses Plaid’s own iPhone window instead of its website one. It works the same way: you sign in to your bank in Plaid’s window, and your bank password never reaches us.

Keeping, exporting and deleting

Your information is kept for as long as you have an account. You can download everything you have recorded at any time in Settings, under Your data.

You can delete your account there too. That erases your ledger (income, gifts, recipients, deposits and rules) and closes any bank connections. Copies in routine database backups expire on their own schedule shortly afterwards.

Your choices

You can see, correct, export and delete your information yourself, in the app. Depending on where you live you may have further rights under local law; contact us and we will help.

Children

6 Blessings is meant for adults and is not directed at children.

Changes and contact

If this page changes in a way that matters, the date above changes and account holders are told.

Questions, or anything you want corrected or removed: the person who invited you to the service.