Privacy notice

What we hold about you, who else sees it, and what you can do about it. No legal padding — if something is not here, we do not do it.

Last updated 27 September 2026

1. The short version

Breadfund is a product of Agynex Limited. Agynex Limited decides what is held about you and why, so where this notice says we, us or our, it means them.

We hold what you give us to run a fund or to donate: your name, your email address, your phone number, your date of birth, and what you write on your fund.

Your card details never reach us. Your bank account number is stored encrypted and is never shown to anyone.

We do not sell your information. We do not run advertising.

A fund is public by design — that is the point of it. Everything else is not.

2. What is public, and what is not

This is the part worth reading twice, because it is the part people are surprised by.

A published fund is a public web page. Its title, story, photos, goal, total raised and updates can be read by anyone and found by search engines. Do not put anything on it you would not put on a poster.

2.1. Public: Your fund’s page and everything on it. Your name and profile photo. The donations to a fund, shown as a first name and a surname initial — “Shola M.” — with the amount, the message and when it was given.
2.2. Not public: Your email address, your phone number, your date of birth, your bank details, your password, and anything on a profile you have set to private. None of these appear on any page anyone else can load.
2.3. Anonymous gifts: Give anonymously and your name is hidden from everyone — including the organiser’s own dashboard, which shows “Anonymous” like everybody else sees. Your message still reaches them; who sent it does not. Anonymous gifts are also left out of your own profile activity.

3. What we hold

Only what the service needs. Each of these is here because something on the site cannot work without it.

3.1. Your account: Name, email address, phone number, date of birth, password (stored hashed, never readable), and a photo if you add one. Date of birth is there because you must be 18 to raise money.
3.2. Your profile: Anything you choose to add — a short introduction, the causes you care about, links to your own pages, a cover photo. All optional, and yours to make private.
3.3. Your fund: The story, photos, goal, country, updates, and who it is for. All public once you publish it.
3.4. Your donations: The amount, the currency, your name and email address, your message if you leave one, and whether you asked to be anonymous.
3.5. Your bank details: The account name, bank and account number you add to be paid. The account number is encrypted in our database, and the rest is held by Flutterwave, who actually move the money.
3.6. Security: Sign-in sessions, two-step login details if you turn them on, and passkeys if you use one.
3.7. The ordinary web things: Your IP address and browser reach our server as they reach every website, and our server keeps error logs. We do not build a profile of you from them.

4. What we do with it

Run the service: show your fund, take donations, pay you, and let you sign in.

Write to you: confirm your email address, tell you a donation arrived, tell a donor their monthly gift has stopped. You can turn off the ones that are not essential in your settings.

Keep the place honest: check funds, look into reports, and stop fraud.

That is the list. We do not sell it, rent it, or hand it to advertisers.

5. Who else sees it

Three kinds of company touch your information, and only for the job named.

5.1. Flutterwave: Our payment provider. They take the card payment and move money to your bank account, so they hold the card and bank details — we never see a card number at all. They have their own privacy policy.
5.2. OpenAI: Every fund is read by an automated check when it is published. The fund’s own words and pictures — which are public anyway — are sent to OpenAI for that check. Nothing private goes with them: not your email address, not your phone number, not your bank details.
5.3. Email and hosting: The companies that send our emails and run our servers handle your information only to do that, on our instructions.
5.4. The law: We will hand over information where a court or the law properly requires it, or where somebody is in danger.
5.5. Organisers and donors: If you donate, the organiser sees your name (unless you gave anonymously), your message and the amount, so they can thank you. What they then do with it is theirs to answer for, not ours.

6. Cookies

Two are necessary and cannot be turned off: one keeps you signed in, and one stops another site submitting forms as you.

We may also use cookies to measure how the site is used, so we can see what is working and fix what is not. Where your consent is needed for those, we will ask before setting them, and saying no will not stop you using the site.

7. How long we keep it

Your account and its funds stay while your account does.

Donation records stay after that. They are money that moved, they are part of somebody else’s fund, and we are required to be able to account for them.

Close your account and we delete or anonymise what we can, and keep only what the law and those records require.

8. What you can do

Most of it you can do yourself, in settings.

8.1. See and change it: Your name, email address, phone number, photo and profile are all editable. Change one and it changes everywhere.
8.2. Make your profile private: One switch. A private profile shows only your name and photo — what somebody needs to recognise you beside a gift you already made in public.
8.3. Give anonymously: Chosen per donation, at the moment you give.
8.4. Stop the emails: Turn off anything that is not essential. We will still email you about your own account and your own money.
8.5. Delete your account: Ask us and we will. See “How long we keep it” for what has to stay.

9. Children

Breadfund is for people 18 and over, and the sign-up form checks. A fund can be raised FOR a child by an adult, but the account behind it belongs to the adult.

If you think a child has given us their details, write to us and we will remove them.

10. Keeping it safe

Passwords are hashed, bank account numbers are encrypted, and the whole site runs over HTTPS. You can turn on two-step sign-in or use a passkey.

No site can promise perfect security. What we can promise is that we do not hold more than we need, which is the only protection that never fails.

If something happens to your information, we will tell you.

11. Changes, and how to reach us

If we change this notice in a way that matters, we will say so on the site before it takes effect.

Questions, or want your information deleted? Write to hello@breadfund.me and a person will answer. Letters for Agynex Limited can go to the same address.