Privacy Policy

1. What this covers

This policy explains what personal information the service collects, why, who can see it and what you can do about it. It applies to visitors as well as account holders.

2. Religious information — please read this one

The intentions you write, the communities you join and the prayers you mark are, by their nature, information about your religious beliefs and practice. Many laws treat that as a special, sensitive category. We treat it the same way: it is stored under row-level access rules that allow only you, the people you shared it with, and — where the law or safety requires — a named administrator to read it.

Because it is sensitive, please share only what you are comfortable having read by the audience you selected, and avoid identifying other people (names, diagnoses, addresses) in a public intention.

3. What we collect

If you only read and pray: no account is created and no profile is built. Your theme and similar preferences stay in your own browser. We do not create an anonymous server session for you.

If you create an account: your email address, an optional display name, handle and avatar, the record that you confirmed being 18 or older, the date and version of the terms you accepted, and the content you create — intentions, group memberships, prayer interactions.

If you request one-on-one prayer: your first name, the text of your request and the contact details you choose to give. Those contact details are stored separately from the request itself and are readable only by the superadministrator and by the system that sends you the emails; the intercessor praying for you never sees them.

If you donate or subscribe: a record of the payment. Card details are handled by the payment provider and never reach us.

Operational records: important actions are written to an audit log (who, what, when, outcome) so that abuse can be investigated. The log deliberately holds no sensitive content.

4. Why we may use it

To run the service you asked for; to keep it safe (rate limiting, content review, abuse investigation); to send you the transactional emails a feature requires; to meet legal obligations. We do not sell personal information and we do not share it with advertisers.

5. Who processes data for us

Hosting and database, transactional email delivery, payment processing, automated content review, and anti-bot verification are provided by third parties acting on our instructions. The current list is available on request and will be published here before launch.

6. Your rights (including CCPA/CPRA)

You may ask us to: confirm what we hold about you and give you a copy (access); export your data in a portable format (export); correct it; and delete your account and its content (delete). We do not sell or share personal information, so there is nothing to opt out of — and we will never treat you differently for exercising any of these rights.

Deletion removes your account and detaches your content from you. Records we are required to keep (for example payment records) and entries in the security audit log are retained for as long as the law requires.

7. Retention

Account data is kept while the account exists. Deleted content is marked as deleted immediately and removed from backups within the normal backup rotation. Rate-limiting records expire within hours.

8. Children

The service is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has an account, contact us and we will delete it.

9. Contact

To exercise any right above, or to ask a question about this policy, write to the contact address published on the site. The English version of this document prevails over any translation.