open-aid-ledger

Beneficiary Privacy Policy

Principle

Transparency must not expose vulnerable people to harm.

Beneficiary identity should be protected by default.

Do not publish

Do not publish:

• full legal names;
• home addresses;
• phone numbers;
• identity cards;
• passports;
• unredacted hospital documents;
• child photos without explicit guardian consent;
• exact school/home location;
• screenshots containing private messages;
• wallet screenshots containing secrets.

Beneficiary code

Use codes such as:

CHD-2026-001
FAM-2026-001
HOM-2026-001
TRD-HARD-2026-001
OSS-2026-001

Evidence levels

Recommended privacy levels:

Level	Meaning
PUBLIC	Safe public proof with consent
REDACTED	Public proof with personal data removed
PRIVATE_REVIEW	Evidence reviewed by maintainers but not published
PARTNER_CONFIRMED	Trusted partner confirms support
ATTESTED	Maintainer attestation only

Children and vulnerable people

For children, homeless people, abuse survivors, and medical hardship cases, use REDACTED, PRIVATE_REVIEW, or PARTNER_CONFIRMED unless explicit consent exists.

Takedown

If a beneficiary asks for public evidence to be removed, maintainers should remove or redact it unless there is a legal reason not to.

This site is open source. Improve this page.