Short version: we minimize data, verify what matters, and protect anonymity by design.
We do not publish user-written stories or bios. The product is designed around verified signals.
Fellows are presented anonymously to donors through a generated scorecard.
We only use verification providers (Plaid, Stripe, ID.me, OTP auth) to establish integrity. Keys and provider wiring are configured via environment variables.