Who we are
Seed is published by Aura Laboratories LLC and operated by its wholly owned subsidiary, Swyft Payments LLC (“Seed”, “we”). Seed is a for-profit platform, not a charity. Contact us at team@spareseeds.com.
What we collect in the app
- Name and email address, from you or from Sign in with Apple or Google if you choose them. Used for your account and sign-in.
- Account identifiers that we create to run your account.
- Linked account details: bank name, account type and last four digits, from Stripe Financial Connections with your permission. Used to show which accounts you linked.
- Transactions from the accounts you choose to track: amount, date, merchant description and status, from Stripe Financial Connections. Used to calculate round-ups.
- Funding bank for payments. Stripe holds the full account and routing numbers; we do not.
- Your bank debit authorization: the version you accepted, when, and the IP address and device details at that moment. Payment rules require this record.
- Donation records: amounts, dates, organization, Seed’s fee and payment references. Used for your history, receipts, accounting and legal obligations.
- Your choices: organization, optional monthly limit, paused state and notification preferences.
- A device push token, only if you turn on notifications.
- Messages you send us, to answer you.
We do not collect your location, contacts, photos, files or health data. The app has no advertising or analytics tools. We do not track you across other companies’ apps or websites, and we do not sell or share personal information for advertising.
Investing (not available yet)
Seed investing is not available yet. When it is, and only if you choose to use it, Seed also collects:
- Linked account details and transactions from Plaid, for the accounts you link for investing round-ups: account name, type and last four digits, and each purchase’s amount, date, merchant description and status. Used to calculate investment round-ups. Plaid handles your bank sign-in under its own privacy policy.
- Brokerage account information from Alpaca, after you connect your own Alpaca account: your Alpaca account identifier and status, cash available, the investments you hold, and the orders Seed placed with their results. Used to place the purchases you set up, show your investments and check that Seed’s records match Alpaca’s.
- Your investing choices: the investments you pick, their target percentages, your investing authorization and its history, and paused state.
- A connection credential that Alpaca issues when you connect. It is encrypted before we store it, never shown in the app, and deleted when you disconnect or when Alpaca reports that access was removed. Seed never receives your Alpaca or bank password.
Investment round-ups and donation round-ups are kept apart: a purchase counts toward one or the other, never both.
Service providers
- Stripe: bank linking (Financial Connections), bank debits and transfers to organizations. Stripe handles bank sign-in and full account numbers under its own privacy policy.
- Plaid: bank linking and transaction data for investing, when investing is available.
- Alpaca Securities LLC: your brokerage account, which you hold directly with Alpaca under Alpaca’s terms and privacy policy. Seed sends Alpaca only the orders you set up.
- Supabase: database, sign-in and server functions.
- Expo: app updates, and delivery of notifications you turn on.
- Apple and Google: sign-in if you choose it, app distribution, and notification delivery (Apple Push Notification service, Firebase Cloud Messaging) if you turn notifications on.
- Cloudflare: hosting for spareseeds.com.
- Esri: address suggestions while an organization types its mailing address in the application.
- Resend: delivery of Seed’s emails to organizations, referrers and the Seed team.
Each processes information only to provide its service to Seed. Our servers and these providers also receive ordinary request data such as IP addresses to deliver and protect the service.
Organizations you give to
The organization sees donation amounts, dates and payment status. It does not receive your name or email from Seed.
Your choices
- Bank and card access: turn tracking off for any account, or disconnect it, in Settings › Accounts. Turning tracking off stops new transactions from being read.
- Giving: pause giving or withdraw your authorization at any time.
- Investing, when available: pause, change your choices, or disconnect your Alpaca account in Seed, or remove Seed’s access in your Alpaca account.
- Notifications: off unless you turn them on.
- Delete your account in Settings › Delete account, or request it on our account deletion page.
Deleting your account
We delete your account, sign-in identities, profile, choices, linked-account details and transactions that are not part of a donation. We disconnect your bank connections at Stripe and revoke Seed’s Sign in with Apple access. Payments already processing finish; settled donations are not refunded.
Records of donations that were prepared or made (amounts, dates, organization, fee, authorization and payment references) are kept privately for accounting, tax, dispute and legal obligations for seven years, then deleted. They are not used for anything else and are not visible in the app. Stripe may keep its own payment records under its policy.
When investing is available: disconnecting your Alpaca account deletes Seed’s connection credential, and Seed stops placing purchases. Disconnecting a Plaid-linked account stops Seed reading it; transactions already received are deleted when you delete your Seed account. Records of investment orders Seed placed are kept privately for accounting, dispute and legal obligations, and not used for anything else. Your account and investments stay with Alpaca.
Website and organization accounts
When you join the waitlist, we store your email address and sign-up time to send Seed updates. Organization workspaces store the account identity and contact email, organization and representative details, application drafts, review records, team invitations and support messages, visible to that organization’s team members and Seed administrators according to their roles. For verified organizations, Stripe supplies account status and payment records; Stripe’s embedded components handle bank and identity details directly. Contact forms open your email app and send only when you send the email. Short-lived, hashed request counters limit abuse.
Security
Data is encrypted in transit. Bank and brokerage passwords never reach Seed, and connection credentials are encrypted before they are stored. Access to personal data is limited to the systems and people that need it to run the service.
Eligibility
Seed is for people who have reached the age of majority where they live (18 in most U.S. states; 19 in Alabama and Nebraska; 21 in Mississippi). We do not knowingly collect information from minors. If we learn an account belongs to a minor, we close it.
Your rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information. Email team@spareseeds.com. We respond within 30 days.
Changes
We post changes here. For material changes, we tell you in the app before they take effect.