Privacy Policy — My Prayer List

My Prayer List respects user privacy. This policy explains what information is processed, why it is needed, where it is stored, and what choices you have for managing or deleting it.

Personal prayers, notes, categories, people you pray for, and local prayer history are stored on your device in a local database. That personal content is not automatically uploaded to the collection used for shared group prayers. Local prayer data is meant to remain available offline.

Personal prayers stay on the device where you entered them. The app does not currently copy them automatically to another phone.

The release is intended to leave personal prayer data out of Android automatic backup and out of Android device transfer. Do not count on those Android features to keep a copy. If you uninstall the app, reset the phone, or lose the device, prayers stored only on that device can be lost.

You may sign in with Google Sign-In. The app uses Firebase Authentication to authenticate the account.

Depending on what the sign-in provider and the app provide, account information can include an identifier, a display name, an email address, and a profile image.

Where the app supports it, you can use the core local prayer features without signing in.

If you join or create a prayer group, the relevant group information is stored with Google Cloud Firestore. Shared prayer requests, group membership, invitations, display names, and related activity may be visible to members who are allowed to see that group.

Shared prayers are separate from the private prayers stored locally on your device. Group information is not available to every person who uses the app. Access is limited to that group’s authorized members.

Group content is protected by sign-in and database access rules. This policy does not describe it as end-to-end encrypted.

When you report a prayer or a member, we process the information needed to review the report: the group and reported content or account identifiers, the reporting and reported account identifiers, selected reason, optional explanation, and submission time. We do not copy prayer text into the report; an authorized administrator may inspect it in its source group when needed for review. Ordinary members and the reported person cannot access reports or their details.

To enforce a block, we retain the account identifiers involved and the display name needed to identify the person in the blocked-users list. In a shared group, content from the two accounts is hidden from each other, and invitations and user-directed notifications are filtered where the feature supports it. Blocking does not delete shared prayers or change group membership.

Only administrators authorized and verified by the server may review reports and take action on shared content, including removing a group prayer or restricting future group-content publication. These actions do not delete an account or automatically remove a person from a group.

How long moderation information is kept, and what happens to reports, blocks, and publishing restrictions when an account is deleted, is described under Retention and deletion.

Prayer reminders can be scheduled locally on the device. You choose whether to turn reminders on and whether to allow notifications. Android may delay a reminder to save battery. A reminder is not promised to arrive at an exact second.

Firebase Cloud Messaging may be used for group notifications. To deliver those messages, the app may store a device messaging token and your notification preferences.

You can turn notifications off in Android settings. Where the app offers them, notification privacy controls are available in the app as well.

Daily Bible references and text may be loaded through the YouVersion API, under YouVersion’s applicable licensing terms.

Daily reflections are produced by a backend service that uses Google Gemini, then published to the app as that day’s shared devotional. They are shared daily content. They are not produced by sending your personal prayer journal to Gemini. This policy does not say that personal prayers you keep on the device are sent to Gemini.

The app uses the services below for the roles described here. This is not a complete register of every later recipient, and it does not list the countries where each provider processes data.

• Google Firebase Authentication — signs you in and manages the authentication account.
• Google Cloud Firestore — stores shared group data for authorized members.
• Firebase Cloud Messaging — delivers group notifications to devices that have allowed them.
• Google Cloud Functions — hosts backend services used by the app, including the service that publishes the daily reflection.
• Google Gemini API — generates the daily reflection text on the server before it is published. On the terms of this policy, it is not used to read the private prayer journal stored on your device.
• YouVersion Bible API — supplies Bible references and passage text for the daily Scripture feature, under YouVersion’s terms.

Information is used for the following purposes:

• Account authentication
• Prayer group functionality
• Reviewing reports, blocks, and moderation of shared group content
• Delivery of notifications you have allowed
• Personalization of the app on your device
• Daily Bible text and the published devotional
• Security and technical troubleshooting

Reasonable measures for this app include:

• Access restrictions through authentication and Firestore security rules
• Authorization of group membership before group content is shown
• Device-local storage of private prayers, separate from the shared group collection
• Restricted access to backend services
• Limiting reports and their details to authorized administrators

These measures reduce risk. They are not a promise of perfect security, of zero risk, of end-to-end encryption, or of a certification that is not documented here.

You can delete individual prayers in the app. Locally stored data is controlled through the app and the device. Removing the app or clearing its storage removes that local data from the device you still have. A remote request cannot wipe the local database on a phone that is off, uninstalled, or otherwise out of reach.

Signed-in users can request account deletion. Associated cloud data is removed or anonymized according to the account-deletion process and any legal duty that requires something to be kept. That backend process is still being finalized. This policy does not promise a fixed number of days, the deletion of every shared group record, or the restoration of deleted data.

Some information inside a shared group may need to be kept, edited, or detached from your identity so that other members’ prayers and membership records remain usable. You can start a request from the account deletion page even if the app is no longer installed.

We retain moderation data only as needed to review and document service safety and to meet applicable obligations, then delete or anonymize it. When an account is deleted, the reporter and/or reported account identifier is replaced with an anonymous identifier; free-text explanation is removed when the deleted account was the reporter. Block records and a publishing restriction associated with the deleted account are removed.

You can email hello@catatomus.dev to ask for information about your data, for a correction, for deletion, or to exercise other privacy rights that apply to you.

If you are in Romania or the European Economic Area, a request can include the access, correction, erasure, restriction, portability, and objection rights that apply under data-protection law, and you may lodge a complaint with a supervisory authority. This page explains how to reach us. It is not a statement that every legal obligation has been independently certified.

My Prayer List is for a general audience that wants a personal prayer practice. It is not made specifically for children. This policy does not state a minimum age, and it does not describe the app as checking a person’s age.

This policy may be updated when features, providers, or legal requirements change. The date at the top of this page is the date of the current version.

My Prayer List. Developer: Cata Tomus. Email: hello@catatomus.dev. Website: https://catatomus.dev.