Legal
Privacy Policy
Last updated:
Prayed is a prayer journal. What you pray about is some of the most personal information you have, so we built Prayed to keep your prayers on your iPhone, not on our servers. This policy says exactly what stays on your iPhone, what we receive and when, why, who helps us, how long it’s kept, and how you can see, change or delete it.
Who we are
Prayed is made by PixelPaw SRL, a company registered in Romania (CUI RO47434294, Trade Register no. J22/83/2023, EUID ROONRC.J22/83/2023), with its registered office at Str. Canta 39, Bl. 508, Sc. B, Et. 4, Ap. 15, Iași, Iași County, Romania. PixelPaw SRL is the controller of your personal data.
For anything about your data, write to contact@getprayed.com. We answer within 30 days, usually much sooner.
The short version
- Your recordings never reach our servers. They’re kept on your iPhone, with the waveforms drawn from them, and in its own backup, in iCloud or on your computer. They’re never listened to, analysed or used to train anything.
- The words in your recordings never leave your iPhone. Their transcripts stay on it, out of its backup too.
- Your goals, prayers, check-ins and streak are kept on your iPhone, not on our servers.
- With Personalise my verse on, certain details are sent to our server and to Claude, Anthropic’s AI model, for each request, and they aren’t kept, except each day’s reflection, for a week. Turn it off and nothing you write reaches our servers or any AI.
- We don’t sell your data, and we don’t show ads.
- You can delete everything from the app, in Settings → Account → Delete my account.
What stays on your iPhone
These are kept on your iPhone, not on our servers:
- your goals and their words;
- your prayers and their details: when you prayed, for how long and for which goal;
- your recordings, the waveforms drawn from them, and their transcripts;
- your check-ins;
- the note you write as a goal ends. Only you see it;
- Clover’s name and wool;
- your reminders and quiet hours;
- your onboarding answers, your first name among them;
- the verses you’ve been shown;
- what the app has judged about each goal, including whether it seems a crisis.
With Personalise my verse on, some of these are sent to write your reflection or to judge a goal, as the next section says, and they aren’t kept.
Your iPhone’s own backup, in iCloud or on your computer, keeps your goals, prayers and recordings, but not the transcripts. Without a backup, deleting Prayed or losing your phone loses everything here, and we can’t bring it back. To keep a copy of your own, use Settings → Your prayers → Export everything.
Your account doesn’t carry them to another iPhone. Signing in on a new phone brings back your purchase, not your prayers.
What we receive, and when
When you sign in with Apple
Sign in with Apple gives us only a private identifier for your Apple Account. We never ask Apple for your name or email. For your account we keep:
- an account number of our own;
- Apple’s identifier for you;
- an encrypted Apple token, so that deleting your account can revoke Sign in with Apple;
- when the account was made, and the last day it was used;
- for each phone signed in, a hash of its session key, until that phone signs out or the account is deleted.
When you turn Personalise my verse on or off
We keep whether you turned Personalise my verse on or off, and when, since the law asks us to keep a record of your consent.
With Personalise my verse on, a day before each verse
To write tomorrow’s reflection, the app sends our server, and our server sends Claude:
- your first name;
- the title and description of the goal the verse is for;
- how long you’ve been asking (its days asking), and whether it has felt lighter or heavier lately (its burden trend);
- its tone, how soon you hope for it, and how sensitive it is, including whether it seems painful or a crisis, as the app has judged them;
- the life season you chose;
- the verse, its reference and its translation;
- your language and the date.
With Personalise my verse on, when you add or change a goal
The goal’s title and description are sent, with your life season, what you want more of and your language, so that its topic, tone, how soon you hope for it and how sensitive it is can be judged. A goal about something painful is sent like any other. Nothing you wrote is kept: the judgement goes back to your iPhone and stays there. We count how many goals each account sends in a day, to limit abuse, and start the count again each day.
When you buy
Your purchase is made through Apple, and we learn its status through RevenueCat: your plan, whether it’s active, its history and the store’s transaction numbers, your storefront’s country and currency, and the app and device details RevenueCat’s software sends. RevenueCat knows you by our account number. We never see your card or payment details. Refunds are Apple’s to give, at reportaproblem.apple.com.
As you use the app
We learn how the app is used, through PostHog in the EU: which screens are seen and what’s done, such as a prayer kept, a check-in answered or a help card shown, with how long things took only roughly. With them come the app and iOS versions, your language, whether your purchase is active, how many days since you installed Prayed, and the device details PostHog’s software adds. Before you sign in they’re anonymous; after, they carry our account number. Never your words, your name or your recordings. PostHog discards your IP address.
Our server also tells PostHog when it couldn’t write your reflection and used one written in advance, and why.
If you’ve chosen in your iPhone’s settings to share analytics with app developers, Apple passes us crash reports.
When you write to us
We receive your email address and the name your email shows, what you write and anything you send with it. You may choose to tell us about your faith or health; we use it only to answer you.
Our legal bases
- Contract, for your account, signing you in and your purchase.
- Explicit consent, for everything Personalise my verse sends, your first name included. That’s what makes it lawful for us to handle what you pray about, which is special category data (below).
- Consent, for analytics on our website, which run only if you agree.
- Legal obligation, for keeping the record of your consent and the records the law requires, and for answering requests about your rights.
- Legitimate interests, for usage analytics in the app, answering support emails, and the logs that keep our server running and secure. Our interest is in improving a paid app and helping you, and the analytics are designed to hold nothing you write. You can object, as below.
Prayer, faith and health: special category data
What you pray about can reveal your religious beliefs, and sometimes your health. The law calls this special category data, and we handle it only with your explicit consent.
You give it in onboarding, or in Settings → Verse, by turning on Personalise my verse. You can withdraw it whenever you like by switching Personalise my verse off, or by deleting your account. Withdrawing doesn’t affect what was done before.
When you write a goal, Prayed checks its words on your iPhone for signs that you may be in crisis, and if it finds them, it shows you a help card with a helpline for your region. That check stays on your iPhone. With Personalise my verse on, the AI’s reading of a goal can also show the help card. You can also find a helpline at findahelpline.com.
A goal about something painful is sent like any other when you personalise, and its reflection is written for more gently. Analytics learn that a help card was shown, never why. We never contact anyone.
How the daily reflection works, and the AI behind it
Your daily verse is chosen on your iPhone, never by our servers.
With Personalise my verse on, the app asks our server for a reflection a day ahead, with the details listed above, and our server asks Claude, by Anthropic, to write it. Our server keeps each day’s reflection for a week after its day, then deletes it, and keeps nothing else you wrote.
Anthropic may handle the request outside the EU, in the United States or elsewhere. It never uses it to train its AI, and it deletes it within 30 days, unless it’s flagged for trust and safety review, which can keep it for up to 2 years.
You can turn this off in Settings → Verse → Personalise my verse. Then nothing you write reaches our servers or any AI. You’ll still get a verse every day, with a reflection written in advance. It just won’t know what you’re praying for.
Choosing a verse and writing a reflection is personalisation. It has no legal or similarly significant effect on you.
Who helps us run Prayed
A small number of providers help us. Each handles your data only on our instructions, under a data processing agreement with us, except Apple, which decides for itself how it handles what it does for you.
| Provider | What they do | Where |
|---|---|---|
| Supabase (Supabase Pte. Ltd.) | Hosts our database | Frankfurt, Germany |
| Fly.io (Fly.io, Inc.) | Runs our servers | Frankfurt, Germany |
| Anthropic (Anthropic Ireland, Limited) | Classifies goals and writes reflections, with Claude | United States or elsewhere |
| RevenueCat (RevenueCat, Inc.) | Keeps your purchase status | United States |
| PostHog (PostHog, Inc.) | App and website analytics | PostHog EU Cloud, in Frankfurt, Germany |
| Cloudflare (Cloudflare, Inc.) | Hosts this website and routes our email | Its global network |
| Apple (Apple Distribution International Ltd, in the EU) | An independent controller for Sign in with Apple, payments and refunds, the crash reports you choose to share, and iCloud Backup | See Apple’s privacy policy |
We’ll update this list if it changes. We don’t sell or rent personal data, and we don’t share it with advertisers or data brokers.
International transfers
Supabase and Fly.io store and process our data in Frankfurt, but both are companies based outside the EU, and Supabase’s support may reach it from Singapore or the United States. Anthropic handles requests in the United States or elsewhere, RevenueCat in the United States, and Cloudflare across its global network.
These transfers are protected by the European Commission’s Standard Contractual Clauses (Supabase, Anthropic and RevenueCat), or by the provider’s certification under the EU-US Data Privacy Framework (Fly.io, PostHog and Cloudflare), with the Standard Contractual Clauses as a fallback.
How long we keep your data
| What | How long |
|---|---|
| Your account | Until you delete it, however long it goes unused |
| Each phone’s session | Until that phone signs out, or the account is deleted |
| The record of your Personalise my verse choices | Until the account is deleted |
| What Personalise my verse sends | Not kept: it’s used for the request, then discarded |
| Reflections our server writes | A week after the day they’re for |
| Your purchase history at RevenueCat | Until the account is deleted |
| Logs of the AI’s work, with none of your words | 90 days, even after the account is deleted |
| Server request logs, with no words and only a hash of your account number | 7 days |
| Analytics events | 12 months |
| Support emails | Up to 2 years after the conversation ends |
| Records the law requires us to keep | As long as Romanian law requires |
Deleting your account
Delete your account in Settings → Account → Delete my account, or from “Welcome back” if your subscription has ended.
- On your iPhone, your goals, prayers and recordings are erased.
- On our server, everything kept for your account is deleted straight away. RevenueCat and PostHog delete what they hold for you, at our request, and we revoke Sign in with Apple.
- Our logs of the AI’s work, which hold none of your words, stay for up to 90 days. Copies in our database backups roll off within 30 days.
- Older backups of your iPhone may still hold your recordings, until they’re replaced.
- Deleting your account doesn’t cancel a subscription. Apple keeps billing it until you cancel it.
Your rights
You have the right to:
- access your data and get a copy of it;
- correct data that’s wrong;
- delete your data;
- restrict or object to how we use it;
- take your data with you in a portable format;
- withdraw your consent at any time, without affecting what was done before.
Most of your data is on your iPhone, where you can see it, export it with Settings → Your prayers → Export everything, and delete it yourself. For what we hold, switch off Personalise my verse, delete your account in the app, or write to contact@getprayed.com. We never learn your name or email, so an email alone can’t tell us which account is yours. We may ask you to confirm it’s you.
If you think we’ve handled your data wrongly, please tell us first so we can put it right. You can also complain to the Romanian data protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, www.dataprotection.ro), or to the authority where you live or work.
Security
- Everything travels over encrypted connections, and our hosts encrypt what they store.
- Apple’s tokens are encrypted with a key only our server holds. Session keys are kept on our server only as hashes, and on your iPhone in its Keychain, for that device only.
- Our logs hold a hash of your account number, never what you sent.
- Only our own team can reach our hosts, and only to run Prayed.
- On your iPhone, recordings are protected while it’s locked, and they’re included in its backup. Transcripts are kept out of it.
Children
Prayed is not for children. You must be at least 16 to use it in the European Economic Area and the United Kingdom, and at least 13 elsewhere. If you believe a child has given us data, write to us and we’ll delete it.
Our website and cookies
Cloudflare hosts this website and, like any web host, sees your IP address to deliver its pages.
We use PostHog to understand how visitors find Prayed, but only if you agree in the cookie banner. Until you agree, nothing is counted and no cookie is set, except the one that remembers your choice once you’ve made it. If you agree, PostHog counts the pages you visit, the Store buttons you tap and the questions you open, with your browser and device details, but never learns who you are, and it discards your IP address. You can change your mind at any time from Cookie settings at the foot of every page.
The website collects no other personal data.
| Cookie | What it’s for | Lasts |
|---|---|---|
ph_phc_CGJEEua6nPFS5z8QT9Uec7RyZiWG4V8KBjL2cMEUtY89_posthog, and a localStorage entry of the same name |
Analytics, only with your consent | 1 year |
A few sessionStorage entries whose names start ph_phc_CGJEEua6nPFS5z8QT9Uec7RyZiWG4V8KBjL2cMEUtY89_ |
Analytics, only with your consent | Until you close the tab |
prayed_consent |
Remembers your cookie choice | 1 year |
Changes to this policy
We’ll post any change here, with a new date at the top, before it takes effect. If a change matters, we’ll also say so in the app’s update notes.
Contact
PixelPaw SRL
Str. Canta 39, Bl. 508, Sc. B, Et. 4, Ap. 15, Iași, Iași County, Romania
contact@getprayed.com