Privacy Policy

• Account data: name, email address, and password credentials.
• Purchase data: subscription plan, purchase history, and billing status. Card details are collected and processed directly by Stripe — we never receive your full card number or CVC.
• Content you create: journal entries, prayer notes, favorites, and progress.
• Usage and device data: app interactions, crash logs, device type, and general region, used to keep the apps stable.
• Support messages: what you send us by email.

We use personal data to provide and maintain the Services, authenticate you, process payments and subscriptions, respond to support requests, improve reliability and content, and comply with legal obligations. We do not sell your personal data, and we do not use your journal content for advertising.

Where applicable law requires a legal basis (for example the LGPD or GDPR), we rely on: performance of a contract (providing the Services), legal obligation (tax and accounting records), legitimate interests (security, fraud prevention, service improvement), and consent (optional communications), which you may withdraw at any time.

Payments on our website are processed by Stripe, Inc., acting as an independent controller of the payment data it collects and as our processor for the transaction. Stripe handles cardholder data under PCI-DSS standards and applies its own privacy policy and fraud-prevention measures. Purchases made inside mobile apps may be processed by Apple or Google under their respective policies.

We share data only with providers that help us operate the Services, under contractual confidentiality and security obligations. These currently include payment processing (Stripe), cloud hosting and database infrastructure, email delivery for transactional messages, and error/crash monitoring. We may also disclose data when legally required or to protect our rights and users' safety.

Our providers may process data in countries other than yours. When data leaves your region, we rely on lawful transfer mechanisms such as standard contractual clauses or equivalent safeguards offered by those providers.

We keep account and content data while your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except records we must retain for tax, accounting, fraud-prevention, or legal purposes. To request deletion, email sacredprayersuport@gmail.com from your account address.

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent. Send requests to sacredprayersuport@gmail.com; we may need to verify your identity before acting, and we aim to respond within the period required by applicable law.

We use encryption in transit, access controls, and least-privilege practices to protect your data. No online service can guarantee absolute security, but if we become aware of a breach affecting your personal data, we will notify you and the competent authorities where required by law. To report a security concern, email sacredprayersuport@gmail.com.

Our website uses cookies and similar technologies that are necessary to run the site, keep you signed in, and understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may break parts of the site.

The Services are not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child provided us data, contact sacredprayersuport@gmail.com and we will delete it.

We may update this Policy. We will change the "Last updated" date above and, for material changes, provide additional notice through the app or by email.