Skip to main content

LEGAL

Impact.appPrivacy Policy

Last updated: August 19, 2026

WHO WE ARE

Impact.app is a community engagement platform operated by Kairos Holdings LLC d/b/a Impact Infinity LLC, a Georgia limited liability company with its principal place of business at 11877 Douglas Road, Suite 102-200, Johns Creek, Georgia 30005. In this policy, "Impact.app", "we", "our" and "us" mean Kairos Holdings LLC d/b/a Impact Infinity LLC. This policy explains how we handle personal information in connection with our website at www.impact.app and the Impact.app platform.

OUR ROLE DEPENDS ON HOW YOU REACH US

Impact.app is used in two different ways, and our responsibilities differ in each.

When you visit our website, request a demo, or contact us directly, we decide how your information is used. In data protection terms, we are the controller.

When you use Impact.app because your church, nonprofit, or employer deployed it, that organization decides what is collected and why. They are the controller and we act on their instructions as a processor. Your rights in that data are exercised through them, and we will support them in honoring your request. If you are not sure which applies to you, ask the organization that invited you, or contact us and we will tell you. If you are a member of an organization that uses Impact.app, our Member Privacy page explains all of this in plain language, written for you.

INFORMATION WE COLLECT

  • Identifiers, such as name, email address, postal address, and telephone number.
  • Demographic information, such as birth date and household or family relationships, where an organization chooses to collect it.
  • Assessment results, including personality, strengths, skills, interests, passions, and spiritual gifts.
  • Profile content you provide, such as your story, your stated purpose, and your availability to serve.
  • Usage and device information, such as IP address, browser and operating system type, referring website, pages visited, and time spent.
  • Payment information, processed by our payment provider. We do not store full card numbers.
  • Communications you send us, including form submissions and support requests.

SENSITIVE INFORMATION, STATED PLAINLY

Some of what Impact.app handles is treated as sensitive or special category information under laws including the EU and UK GDPR and the California Consumer Privacy Act as amended.

This includes spiritual gifts assessments and any other information that reveals religious belief, and it may include health, family circumstance, or similar information where an organization chooses to collect it or where a member volunteers it.

We handle this information only to provide the platform to the organization that collected it. We do not sell it. We do not use it for advertising. We do not use it to train any general purpose artificial intelligence model.

Where an organization collects this information from its members, that organization is responsible for obtaining any consent the law where it operates requires.

HOW THE AI USES INFORMATION

Impact.app includes artificial intelligence features. The following describes how they work.

  • The AI serves administrators and leaders of an organization. There is no member-facing chatbot.
  • The AI operates only on that organization's own data, inside an isolated tenant, and does not draw on the open internet.
  • We do not use one organization's data to train models for another organization, and we do not use customer data to train general purpose models.
  • The AI proposes. Decisions belong to the managing leaders the organization authorizes. Recommendations are presented with reasoning for a human to accept or reject.
  • Outputs may contain errors. They are not professional, legal, medical, or financial advice, and should be verified before being acted on.

The platform's AI features run on Microsoft Azure AI services inside our own environment, so Microsoft acts as our hosting and processing provider. That processing is subject to Microsoft's Responsible AI Standard and the Microsoft Privacy Statement in addition to this policy, and your information is not used by Microsoft to train its models. The full set of commitments is published on our AI and Assessments page.

HOW WE USE INFORMATION

  • To provide, operate, secure, and improve the platform and the website.
  • To respond to your requests, register you for services you asked for, and provide support.
  • To generate matches, suggested next steps, and insights for the leaders of your organization.
  • To meet legal, regulatory, security, and accounting obligations.
  • With your consent, or at the direction of the organization that deployed the platform.

DISCLOSURE AND SHARING

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We share information with service providers and subcontractors who help us operate the platform, including Microsoft, which hosts the platform on Azure, Stripe, which processes payments, and providers of communications delivery, and the website analytics providers described in the cookies section below. They are bound by contract to use information only to provide those services to us.

We share information with the organization that deployed the platform to you.

We may disclose information where required by law, to protect the safety of people, or in connection with a corporate transaction.

SECURITY

The platform runs on Microsoft Azure with isolated tenants for each organization, 256-bit encryption, encryption in transit and at rest, keys held in Azure Key Vault, role-based access control with two-factor authentication, a web application firewall, and continuous monitoring. Payments are PCI compliant. No system is perfectly secure, and we cannot guarantee that transmissions to us cannot be intercepted.

HOW LONG WE KEEP INFORMATION

We keep information for as long as an organization's subscription is active, and afterwards only as long as we need it to meet legal, accounting, and security obligations. An organization can export its information while its agreement is in force. When an organization ends its subscription, we work with it to return or remove its information.

YOUR RIGHTS

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to limit the use of sensitive information. You will not be treated differently for exercising these rights.

If your information sits inside an organization's platform, contact that organization first. If you contact us, we will pass your request to them and support them in answering it.

CHILDREN AND STUDENTS

Impact.app is sold to organizations that may run student and youth programs. We do not knowingly collect information directly from children under 13 through our website. Where an organization uses the platform with minors, that organization is responsible for obtaining any consent its own laws require. If we learn that we hold personal information from a child under 13 collected without the consent the law requires, we will delete it promptly. If you believe a child's information has reached us, or has reached an organization's platform without proper consent, tell us through the contact form on this website and we will work with that organization to investigate and remove it.

INTERNATIONAL TRANSFERS

Kairos Holdings LLC d/b/a Impact Infinity LLC is based in the United States and information is processed there. The platform runs in multiple languages and serves organizations outside the United States.

COOKIES, ANALYTICS, AND SESSION REPLAY

This section describes our marketing website at www.impact.app.

We use cookies and similar technologies to keep the website working, remember preferences, and understand how the site is used. The tools that do this are provided by:

  • HubSpot, which provides our contact form and marketing analytics. It identifies your browser across visits so that a form you submit can be connected to your earlier activity on this site.
  • Google, which provides our tag management and our site analytics through Google Tag Manager and Google Analytics. We do not run advertising cookies on this website.
  • Microsoft, through the Clarity product, which records session replays and aggregate heatmaps so we can see where visitors struggle with the site. We use the recordings to improve the site, and for nothing else.
  • Cloudflare, which hosts and delivers this website and protects it from attack.

If you subscribe, checkout happens on a payment page operated by Stripe, which sets its own cookies for security and fraud prevention.

We do not currently show a cookie banner, and these technologies load when you arrive. We are working to add a consent mechanism. In the meantime you can block or delete cookies in your browser settings, and blocking them does not affect your ability to use this site or to contact us.

CHANGES TO THIS POLICY

We will post any changes here with a revised date. Where a change materially affects your rights, we will give at least 14 days notice before it takes effect, unless a change must take effect sooner to address a legal or security requirement.

CONTACT US

Questions, requests, or complaints can be sent through the contact form on this website.