PurposeMint Privacy Policy

1. Who we are and what this policy covers

This policy explains what information we collect, how we use and protect it, and the choices you have. It is written by two related organizations:

• Mint To Prosper Foundation ("MTPF") is a 501(c)(3) nonprofit (EIN 38-4371182). MTPF runs the Conqueror Community Savings Program ("CCSP") in Tulsa, Oklahoma and Baton Rouge, Louisiana.
• PurposeMint is a savings platform and a separate company that works as an initiative of MTPF. PurposeMint runs the PurposeMint app and the mypurposemint.com website.

In this policy, "we," "our" and "us" mean MTPF for CCSP and MTPF's websites, and PurposeMint for the PurposeMint app and platform. When MTPF and PurposeMint share your information with each other, they do so only as described in Section 5.

This policy applies to:

• Our websites, including minttoprosper.org and mypurposemint.com
• The PurposeMint app and platform
• Our programs, including CCSP
• Forms, surveys, applications, events, emails and text messages from us

It does not apply to websites or services run by others, such as Plaid or your bank, even when we link to them. Those organizations have their own privacy policies.

2. Information we collect

We collect only what we need to run our programs and services.

Information you give us

• Contact details: name, email address, phone number, mailing address
• Account details: login email and password. Passwords are stored using one-way hashing, so no one at MTPF or PurposeMint can see them.
• Program information: intake and eligibility responses, household size, income range, savings goals, and program participation records such as attendance and progress
• Demographic information (optional): such as age range, gender, household makeup. We use this to understand who we serve and to report combined results to funders.
• Financial history you choose to share: such as past experience with savings, debt, eviction or bankruptcy.
• Coaching information: notes your coach keeps about your goals and progress
• Voice check-ins: short audio recordings you choose to make in the PurposeMint app, and any written transcript of them.
• Payment details for money we send you: If you receive a welcome bonus, micro-grant, scholarship, or stipend, we'll collect the information needed to process your payment through Gusto, including any tax information required by law. All payouts are made through Gusto.
• Partner and organization details: organization name, role, and partnership application responses
• Feedback: survey responses, comments and messages you send us
• Photos and stories: photos taken at our events, and stories or quotes you agree to share
• Donation information: donor name and contact details. Payments are processed by our payment provider; we do not store full card numbers.

Financial information, only if you choose to connect a bank account

With your permission, and through Plaid (see Section 3), PurposeMint may receive:

• Account and routing numbers
• Account name, type and the institution's name
• Account balances
• Transaction history, such as dates, amounts and merchant names
• Loan and credit card details, such as balances owed and payment due dates
• Account holder name and contact details on file with your bank
• A photo of your government ID and a selfie, used only to confirm you are who you say you are.

We never receive or store your online banking username or password.

Information from others

• Plaid, as described in Section 3
• Program and banking partners, such as a partner bank confirming that you opened an account, or a community partner that referred you
• Coaches and volunteers who work with you through CCSP

Information collected automatically

• IP address, used to prevent abuse and spam
• Browser type and version, and device type
• Date and time of visits and submissions
• Pages viewed and app activity, used to improve our services

3. How we connect bank accounts through Plaid

PurposeMint uses Plaid Inc. ("Plaid") to connect your bank account securely. Connecting an account is always your choice.

• When you connect an account, you sign in to your bank through Plaid's secure screen. Your bank login goes to Plaid and your bank, not to us.
• Plaid then shares the financial information listed in Section 2 with PurposeMint, based on the permissions you approve.
• We use this information only to provide PurposeMint features, such as tracking savings progress, verifying accounts and supporting your savings goals.
• Plaid's handling of your information is governed by the Plaid End User Privacy Policy. By connecting an account, you agree to Plaid collecting, using and sharing your information as described there.
• You can disconnect a bank account at any time in your PurposeMint settings or by emailing tech@minttoprosper.org. You can also manage connections through Plaid Portal.
• After you disconnect, we stop receiving new data from that account and delete what we received as described in Section 8.

4. How we use information

We use your information to run our programs and services, and we never sell it.

• Provide PurposeMint features and track savings progress
• Check eligibility for and run CCSP and other programs
• Match you with coaching, workshops and partner resources you ask for
• Send you bonuses, micro-grants, scholarships or stipends you qualify for
• Process form submissions, applications and donations
• Send program updates, reminders and PurposeMint news (marketing only with your consent)
• Respond to your questions and requests
• Improve our services using feedback and usage patterns
• Measure program results. When we report results publicly, we use combined data that does not identify you, and we do not try to re-identify anyone from it.
• Prevent spam, fraud and misuse, and keep our services secure
• Meet legal, tax and grant reporting requirements

Financial data limits. We use financial data received through Plaid only to provide the PurposeMint features you signed up for. We do not use it for advertising, we do not sell it, and we do not use it to decide whether you can get credit.

5. How we share information

We do not sell, rent or trade your personal information. We share it only in these cases:

• MTPF and PurposeMint, only as needed to run the program you joined. For example, if you are in CCSP and use PurposeMint, your savings progress may be shared with your CCSP team. PurposeMint does not share data from your connected bank account with MTPF in a way that identifies you without your permission.
• Service providers that help us run our services, such as hosting, email, forms, payments, payroll, data storage and AI tools. They may use your information only to provide services to us and must protect it.
• Plaid, to connect your bank account, as described in Section 3.
• Banking partners that hold PurposeMint accounts or move money for us. Their use of your information is covered by their own privacy notice, which we will show you before you open an account.
• Program partners, such as community partners that help deliver CCSP or PurposeMint, only when needed to deliver the program you joined and under a written agreement.
• Funders and the public, only as combined results that do not identify you. We share stories, quotes or photos that identify you only with your written permission.
• Legal reasons, when required by law, court order or to protect the safety and rights of participants, MTPF, PurposeMint or others.
• Organizational changes, if PurposeMint or MTPF merges or transfers its operations. Any new owner must protect your information as this policy promises, and we will tell you before that happens.

We may also share information with your consent or at your direction.

6. AI and automated tools

Some PurposeMint features, such as savings tips, goal suggestions and voice check-ins, may use artificial intelligence (AI) tools from outside providers.

• We share only the information a feature needs to work.
• Our AI providers may not use your information to train their own models.
• AI suggestions are for information only. They are not financial, legal or tax advice, and they are never used on their own to make decisions about you, such as whether you can join a program.

7. Cookies and analytics

We use cookies and similar tools to keep our sites working and understand how they are used.

• Essential cookies keep you signed in and keep forms secure.
• Analytics show us which pages are visited and how, so we can improve them.
• Email tracking. Our emails may record whether a message was opened or a link was clicked.

You can block or delete cookies in your browser settings. Some features may not work without essential cookies. We do not use cookies to sell your information or show you third-party ads. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any sharing for advertising.

8. Data retention

We keep information only as long as we need it, then delete it or remove anything that identifies you.

We may keep some information longer when the law requires it or to resolve disputes. Combined data that does not identify you may be kept longer.

9. How we protect information

We follow a written Information Security Policy and protect your information with technical, administrative and physical safeguards, including:

• Encryption of data in transit (HTTPS) and at rest
• Access limited to staff and contractors who need it for their role, under confidentiality agreements
• Two-factor authentication on systems that hold personal or financial data
• Regular access reviews and a yearly risk review
• Security checks on the service providers we use
• A plan for responding to security incidents

No system is perfectly secure. If a security incident affects your personal information, we will notify you as required by law.

10. Your rights and choices

You control your information. Email tech@minttoprosper.org to make any of these requests. We will respond within 30 days.

• Access: ask for a copy of the personal information we hold about you
• Correction: ask us to fix information that is wrong or incomplete
• Deletion: ask us to delete your information, unless the law requires us to keep it
• Disconnect accounts: remove a connected bank account at any time (see Section 3)
• Close your account: close your PurposeMint account at any time
• Opt out of marketing: click "unsubscribe" in any email or reply STOP to any text
• Withdraw consent: take back any consent you gave, such as for your story or photo, without affecting earlier use

We may need to confirm your identity before completing a request. You may also have an authorized person make a request for you. If we turn down your request, we will tell you why, and you can ask us to review that decision by replying to our email. Depending on your state, you may have additional privacy rights, and we will honor them. We will not treat you differently for using your privacy rights.

11. Text messages, children and where data is stored

Text messages (SMS). If you give us your mobile number and opt in to texts, we treat that information as private. No mobile or messaging consent information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help at any time.

Children. Our services are for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. Contact us if you think a child has given us information.

Where your information is stored. Our services are based in the United States, and your information is stored in the United States. Some team members and service providers who support us work from other countries. When they access your information, they must follow this policy and our Information Security Policy.

12. Changes to this policy

We may update this policy from time to time. When we make a material change, we will post the new version here, update the "Last updated" date, and notify PurposeMint users and CCSP participants by email or in the app at least 30 days before the change takes effect from October 2026. We will not use information we already have in a materially different way without your consent.