PrayPass Privacy Policy

Effective date: September 25, 2026
Operator: Marcos David Saavedra Cruz, operating PrayPass in the United States
Privacy contact: [email protected]
Website: praypass.app

PrayPass helps you organize prayer petitions, generate personalized prayers, and use Apple's Screen Time controls to pause before opening selected apps. This policy describes how the current iOS app and our website handle information. The prayer text you enter can be personal or sensitive. Read the AI-processing section before using AI features.

1. Information stored on your device

The app stores your petition text, petition IDs and creation dates, up to three recent AI-generated prayers for each petition, prayer streak and completion dates, petition-rotation information, and settings such as unlock sounds and haptics in local app storage on your device. The current app has no PrayPass user account and, based on its audited code, does not upload those stored records to a PrayPass petitions database.

If you authorize Apple's Screen Time / Family Controls feature, your chosen apps or categories and related protection settings—including prayer frequency, grace periods and shield state—are saved locally using an iOS App Group. The audited app does not send the selected-app list to a PrayPass server or include petition text in shield-handoff notifications. Apple may handle Screen Time data under Apple's privacy policy.

Your device's backup and operating-system settings may create or preserve additional copies of locally stored information. Anyone who can access your unlocked device may be able to see petition text within PrayPass.

2. AI features: when information leaves your device

When you request an AI-generated prayer, the app sends your current petition (up to 200 characters) and up to three recent generated prayers for that petition to a Supabase Edge Function, which sends relevant text to OpenAI's API to produce the prayer. When you request AI polishing, the app sends the petition text you provided to a Supabase Edge Function and OpenAI. Generated results return to your device.

The app and its deployed Edge Functions do not write petitions to a PrayPass-hosted petitions database. Supabase records operational information about function invocations. In a limited test, the invocation details and function logs displayed technical information rather than the test petition text; that test does not prove that Supabase or other infrastructure never retains request content. Supabase may retain operational, security, or diagnostic information under its applicable policies.

For OpenAI API requests, we have disabled voluntary sharing of API inputs and outputs with OpenAI for model improvement. The deployed prayer-generation and petition-polishing functions also send store: false to OpenAI's Responses API, disabling normal persistent response storage for those requests. This is not zero data retention: under OpenAI's standard API controls, separate abuse-monitoring logs may contain prompts or responses and may be retained for up to 30 days, or longer when legally required. Provider settings, legal obligations, and technical practices may change. See Supabase's privacy policy and OpenAI's API data controls.

Do not include passwords, financial details, medical records or other sensitive information, including private information about another person, unless you are comfortable with that text being processed by these external services. Avoid using AI features if you do not want petition text transmitted off-device.

3. Purchases and subscriptions

Apple processes App Store payments and your payment method. PrayPass uses RevenueCat to retrieve subscription offerings, check subscription status, and process purchase and restore events. RevenueCat assigns an anonymous App User ID because PrayPass currently does not create end-user accounts. Apple and RevenueCat may receive subscription identifiers, transaction history and subscription status, along with associated technical data under their own policies. We do not receive your complete card number from Apple, and the current app does not send your petitions, generated prayers or Screen Time selections to RevenueCat.

See Apple's privacy policy and RevenueCat's privacy policy.

4. Website and technical information

Our public website is hosted using Cloudflare Pages. When you visit it, Cloudflare and network providers may process your IP address, request details, and security or diagnostic information to deliver and protect the pages. We use the website primarily to provide information and our legal documents. The reviewed website does not include a separate advertising or behavior-tracking script.

If you email our support address, Cloudflare Email Routing forwards your message to our Google Gmail mailbox. We receive the sender address, message contents, and associated email information so we can respond, address support and privacy inquiries, and maintain records when needed. Cloudflare and Google may process this correspondence under their applicable policies.

The audited mobile app does not include a dedicated third-party advertising, general-purpose analytics or crash-reporting SDK. This does not rule out operational logs created by our service providers, Apple's operating system, or app-distribution services.

5. How we use and share information

We process information to save your prayer-related settings on your device, produce AI responses when you request them, operate the Screen Time functionality you authorize, verify or restore subscription purchases, respond to support and privacy requests, maintain service security, and meet applicable legal obligations.

We share relevant information with Supabase and OpenAI for requested AI features, Apple and RevenueCat for subscriptions, Cloudflare for website delivery and email forwarding, and Google for our support mailbox. Providers may process information outside your country. PrayPass does not use your petitions for targeted advertising or sell petition text in the audited version of the service. Additional providers or new uses will require an update to this notice when introduced.

6. Retention, deletion and your choices

Locally stored petitions, recent prayers, streaks and app preferences remain on your device until you remove them using available app or device controls, reset app data, or uninstall the app; device backups may retain copies. The current app has no central petitions account database that we can access to remotely delete your local data. Messages you send to our support email may remain in our mailbox for as long as reasonably needed to respond, maintain necessary records, or comply with law. Service providers may retain additional information according to their own policies.

You can choose not to use AI features and thereby avoid new AI transmissions, and you can manage Screen Time authorization through the applicable iOS controls. Apple Account settings govern App Store subscriptions. External providers may retain operational, purchase or request records under their own policies and applicable legal requirements; uninstalling PrayPass does not automatically delete those records or cancel an Apple subscription.

For privacy inquiries or requests concerning information we control, email [email protected]. Describe your request without including additional sensitive petition content. We may need to verify that a request concerns you and may direct you to Apple or another provider for records held solely by them. We will respond as required by applicable law.

7. Information security

We use the device's storage and established external services to deliver PrayPass. No storage or transmission method is guaranteed to be completely secure. Keep your device protected and avoid entering information you do not want an AI provider to process.

8. Children and families

PrayPass is intended for people aged 13 and older and is not directed to children under 13. We do not knowingly invite children under 13 to submit petitions for AI processing. If you are younger than the age of legal majority where you live, you should have permission from a parent or legal guardian to use PrayPass, and any purchase must be approved by the Apple Account holder or through applicable parental purchase controls.

The current app does not have an age-verification or verifiable parental-consent system for children under 13. If you believe a child under 13 has provided personal information through our services, please email [email protected] so we can review the concern and take appropriate action under applicable law.

9. Updates to this policy

We may revise this policy as PrayPass changes or to reflect new service providers or legal requirements. When we publish a revised version, we will update its effective date and provide any additional notice required by law.

10. Contact

PrayPass — operated by Marcos David Saavedra Cruz, United States
Email: [email protected]
Website: praypass.app