Privacy Policy

Last updated: July 23, 2026

This Privacy Policy describes how PrayerWorks (“PrayerWorks,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with the PrayerWorks website, applications, and related services (the “Service”). PrayerWorks is the controller of the personal information processed through the Service. We adhere to a principle of data minimization and collect only what is necessary to provide the Service.

1. Information We Collect

• Account information: your name, email address, and a cryptographically hashed password.
• Prayer content: the prayer requests and related information you create and, at your election, share with groups or your church.
• Journal content: stored end-to-end encrypted and inaccessible to us in decrypted form.
• Church data: for church accounts, the church profile, prayer lists, guides, resources, and prayer-team roster, including roster data imported from a connected third-party service where authorized.
• Technical information: a session cookie strictly necessary to keep you signed in, and limited server logs (such as IP address and request metadata) used to operate, secure, and troubleshoot the Service.

Prayer requests may, at your discretion, contain sensitive information, including information concerning health or religious belief. Where you choose to provide such information, you consent to our processing of it for the purpose of operating the Service as described herein.

2. How We Use Information

We process personal information to authenticate you and secure your account; to display your prayer content and your church’s content to you and to those with whom you share it; to deliver notifications you have enabled; to operate, maintain, and improve the Service; and to comply with legal obligations. Where required by applicable law, our lawful bases for processing are the performance of our contract with you (these Terms), your consent (for optional features such as notifications and for sensitive information you choose to submit), and our legitimate interests in operating and securing the Service.

3. What We Do Not Do

• We do not sell or rent your personal information.
• We do not serve third-party advertising or share your data for advertising purposes.
• We do not access the decrypted contents of your end-to-end encrypted journal.
• We do not disclose your prayer requests beyond the people and groups you select.

4. How We Share Information

• With people you choose:members of your groups and, if you join a church, that church’s prayer team receive the content you elect to share with them.
• With service providers (sub-processors): our hosting provider and, where enabled, our email and notification providers process personal information solely to provide their services to us and under obligations of confidentiality.
• With connected integrations: Planning Center Online data is accessed only where your church connects it and only to the extent your church configures.
• For legal reasons: we may disclose information where required by law or valid legal process, or to protect the rights, safety, and security of our users or the public.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we permanently erase your associated data, subject to removal from routine encrypted backups within [30] days and to any retention required by law. Limited security logs are retained for a short period and then deleted.

6. Security

We implement reasonable technical and organizational measures to protect personal information, including hashing of passwords, secure session cookies, encryption at rest of third-party integration tokens, and end-to-end encryption of journal content. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You may exercise many of these rights directly in the Service: you can edit or delete your prayer requests, enable or disable notifications, and permanently delete your account (and, for church owners, the church account) from Settings. To make any other request, contact us using the details below. If you are in the European Economic Area, the United Kingdom, or California, you may also have the right to lodge a complaint with your local supervisory authority.

8. International Transfers

The Service is operated from [the United States]. If you access it from outside that jurisdiction, you understand that your information may be transferred to, stored in, and processed in [the United States], where data-protection laws may differ from those of your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

9. Children

The Service is not directed to children under thirteen (13), and we do not knowingly collect personal information from them. If you believe a child under thirteen has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide notice within the Service.

11. Contact

For privacy inquiries or to exercise your rights, contact us at privacy@the-prayer-app.com.