Draft for the private beta
Privacy Policy
This is a beta draft, pending legal review. It describes how the Prayloom private beta works today. We'll update this page, and tell you in the app, before anything here changes.
The short version
- Your journal lives on your iPhone, in encrypted storage.
- Nothing is backed up to our servers unless you sign in and say yes to backup.
- If you back up, your prayers, titles and names are encrypted on our servers.
- No ads, no third-party analytics, and we never sell your data.
- Your prayers are not used to train AI. Voice recordings are never stored.
- You can export everything, or delete it, at any time.
On your iPhone
Everything you write in Prayloom (prayers, prayer requests, the names of people you pray for, updates and reminders) is stored in an encrypted database on your device. Search happens on your device. Reminders are local notifications scheduled by your phone; they say only that it's time to follow up, never the prayer or the name.
Voice. When you pray out loud, speech is turned into text by Apple's on-device speech recognition. The audio is never stored and never sent to us.
Using Prayloom without an account
You can use Prayloom without signing in. Your journal then stays on this device only and is never backed up. To use guided prayer, the app gets an anonymous guest token from our server, which holds no name, email or device identifier. Guest tokens expire automatically. If you delete the app without an account or an export, your journal can't be recovered.
Signing in and backup
Accounts use Sign in with Apple only. We don't ask Apple for your name or email; we receive only the anonymous identifier Apple creates for Prayloom.
Signing in does not upload your journal. Backup starts only after you explicitly turn it on, and we record that choice (what you agreed to, which version, and when). When backup is on, your prayers, titles, names, updates and reminders are encrypted on our servers with a key unique to your account, which is itself protected by a key held in our server's secret store. This is not end-to-end encryption: our server can decrypt your data in order to sync it to your devices. We don't read it, and our support tools can't show it.
Backups are stored with Cloudflare (D1 database, United States). You can turn backup off in Settings.
Guided prayer (AI)
Guided prayer is optional. When you tap Help me pray, the text you just wrote is sent to our server and processed by Cloudflare Workers AI to check it for safety and prepare a reflection, a Scripture reference and a suggested prayer. We don't store your text or the AI's reply. The AI never receives your saved prayers or history. Your words are not used to train AI. More detail is inHow Prayloom uses AI.
To keep the free daily limit fair, we count how many guided prayers each account or guest token uses per day. We count uses, not content.
Prayloom Plus
Subscriptions are sold and billed by Apple. We never see your payment details. We store your subscription status (plan, trial and renewal dates) linked to your account, and confirm it directly with Apple. Before a free trial ends, the app reminds you with a local notification.
What our servers log
For reliability and security, our server keeps short operational logs: the route called, the response status, how long it took, error types, and counts of safety categories. Logs never include the text of your prayers, titles, names, or request bodies. Your IP address is used briefly to limit abuse (for example, too many guest tokens) and isn't stored in our logs.
This website uses no cookies, no trackers and no third-party analytics. If we add visitor counts, we'll use Cloudflare Web Analytics, which is cookieless, and update this page.
People you pray for
You may write about other people, including their names and things like health or family situations. Please do so with care. That information is treated exactly like your own prayers: kept on your device, encrypted if backed up, never shared, and never shown in notifications.
What we never do
- We don't sell or rent your data, or share it with advertisers or data brokers.
- We don't show ads or include ad or analytics SDKs in the app.
- We don't use your prayers to train AI.
- We don't put prayer content in notifications, logs, analytics or crash reports.
Service providers
- Apple: Sign in with Apple, on-device speech recognition, App Store billing.
- Cloudflare: hosting for our server and website, the encrypted backup database, and the AI models used for guided prayer.
We may disclose information if the law requires it. Backed-up content is encrypted, and we'll push back on requests that aren't valid.
Export and delete
- Export my data (Settings) saves your whole journal to a file you control, with or without an account.
- Delete my account (Settings) destroys your encryption key and deletes your backed-up journal right away; the remaining account record is removed shortly after. Copies in our database's automatic recovery backups expire on their own within 30 days.
- Deleting the app removes the journal stored on that device.
Adults only
Prayloom is for adults 18 and older. We don't knowingly collect information from children.
Contact
Questions or requests about your privacy: support@prayloom.com. Please don't include the text of your prayers.