Privacy Policy

Data controller

The data controller for Prayerfully is KP Business Development Ltd, a company registered in England and Wales under company number 15120399, with its registered office at 23 Pennine Way, Farnborough, England, GU14 9HT.

Your privacy matters to us

Prayerfully is built on the belief that your prayer life is sacred and private. We collect only what is needed to run the app and to give you a personalised prayer experience. We never sell your personal data, and we never share it for anyone else's advertising. We do pass some of it to the service providers listed further down this page, who process it on our instructions so that Prayerfully can work at all.

What we collect

• Account information: Your email address and display name, used to identify your account.
• Christian tradition or denomination: Optional. If you choose to tell us, we use it to shape the prayers and scripture you are given. Under UK GDPR this is special category data about religious belief, so we process it only on the basis of your explicit consent, given by that choice. You can leave it blank, or change or clear it later, in your account settings.
• Prayer preferences: Your spiritual level and session preferences, used to personalise your experience.
• Prayer intentions: Intentions you choose to share, stored securely and visible only to you, or to the members of a prayer group you have joined.
• Session data: Records of your prayer sessions and reflections, used to provide continuity and track your prayer streak.
• Timezone: Read from your device, so that daily reminders and streaks follow your local day rather than ours.
• Device type: A single bucket of mobile, tablet or desktop, recorded at sign-up and on later visits. We do not record a device fingerprint.
• How you first found us: If you arrive from a link or an advert, we store the marketing parameters on that link once: the UTM values, a Meta ad click id, the referring site and the page you landed on. This is written only on your first visit and tells us which campaigns bring people to Prayerfully.
• Push notification tokens: If you turn on reminders in the app, we store the notification token your device issues, so we can send that reminder to it.
• Usage events: A record of key actions inside the app, such as starting a session or reaching the upgrade screen, so we can see which parts of Prayerfully help and which get in the way.
• A hashed IP address: The free prayer you can try without an account is rate limited. To do that we store a one-way hash of your IP address, never the address itself, and we use it for nothing else.
• Avatar photo: Optional. If you upload one it is stored at a public link, which means anyone who has that link can view the image. Please do not upload anything you would rather keep private.
• Messages you send us: The name, email address and message you submit through the contact form, kept so we can reply and keep a record of the correspondence.
• Purchase and subscription status: Whether your account is free or premium, when a subscription renews or ends, and the customer reference held by the payment provider. Card details never reach us.

Who processes your data for us

These are the providers we rely on. Each one only receives what it needs to do its job.

• Supabase: Our database and sign-in, hosted in the EU. This is where your account and prayer data live.
• Anthropic: Generates the written prayers and reflections. It receives the prayer content and your first name so the prayer can be written for you. It does not receive your email address or your account id.
• Google Cloud Text-to-Speech: Reads scripture and prayers aloud. It receives the text being spoken.
• Google Firebase Cloud Messaging: Delivers push notifications to your device.
• Stripe: Takes payments made on the website and holds the card details, which we never see.
• Apple and Google: Take payments for purchases made through the App Store or Google Play, and tell us whether your subscription is active.
• Resend: Sends our email, both the account email you need and the occasional email about Prayerfully. Every email of the second kind has an unsubscribe link.
• Vercel: Hosts the website and the app content, and provides our page view analytics.
• Meta and Google Ads: Measure our advertising. These run on the website only, as described below.

Cookies, analytics and advertising

On the website we set only the cookies needed for sign-in and session management. We also run two advertising measurement tags there, the Google Ads conversion tag and the Meta Pixel, so that we can tell which of our ad campaigns led to a sign-up. Both are provided by advertising networks and both set their own cookies.

Inside the iOS and Android app, neither tag loads at all. The app does no tracking, shares nothing with an advertising network, and so never asks you for tracking permission.

We also use Vercel Analytics, on the website and in the app, to count page views. It is cookieless and does not build a profile of you.

How we protect your data

• All data is encrypted at rest using industry-standard encryption.
• AI-powered reflection uses the Anthropic Claude API with zero data retention: your conversations are not stored or used for training by the AI provider.
• Row-level security ensures you can only access your own data.

Your rights

Under GDPR and applicable data protection laws, you have the right to:

• Access all personal data we hold about you.
• Correct any inaccurate data.
• Delete your account and your data, as described below.
• Receive a copy of your data in a portable format. We have no self-service download yet, so email hello@prayerfully.app and we will send you a copy within one month.
• Withdraw your consent to us holding your Christian tradition or denomination, by clearing that field in your account settings.
• Stop receiving email about Prayerfully, using the unsubscribe link in any of those emails.

Deleting your account

You can delete your account yourself. Open Account and choose Delete account, then confirm. This removes your sign-in and your Prayerfully data: your profile and preferences, your prayer sessions and reflections, your intentions and saved scripture, your group memberships, your notification tokens, your email records and your purchase records. It cannot be undone.

Two things are not removed automatically. Any message you have sent us through the contact form is kept as part of our correspondence, and an avatar image you have already uploaded stays in storage. Email us and we will delete either or both. If you have a paid subscription, please cancel it before you delete your account, or ask us and we will cancel it for you.

Contact

If you have any questions about this privacy policy, please contact us at hello@prayerfully.app.