Prayway ("we," "us," or "our") operates the Prayway mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. Please read this policy carefully. By using the App, you consent to the practices described herein.
1. Information We Collect
a. Account Information
- Username and email address
- Password (stored only as a secure hash; we never store or access your plain-text password)
b. Sensitive Personal Information
During onboarding, we ask you to select your religious or faith tradition (e.g., Christianity, Islam, Judaism, Hinduism, Buddhism, etc.) or "Prefer not to say." This information is classified as sensitive personal data under applicable privacy laws. We collect it solely to personalize your experience, including religion-specific prayer times and daily quotes. You may choose "Prefer not to say" to decline providing this information.
c. Prayer and Activity Data
- Prayer logs, streaks, and calendar history
- Prayer notes and written reflections
- Prayer reflection photos you choose to upload
- Prayer likes and interactions
d. Social and Community Data
- Follow and follower relationships
- Group memberships and group activity
- Public profile information (username, avatar, prayer streaks)
e. Photos and Media
If you grant permission, we access your camera or photo library to let you take or select profile photos and prayer reflection images. These photos are uploaded to and stored on our secure servers (Supabase Storage). We do not access your camera or photo library without your explicit permission.
f. Location Data
If you grant permission, we access your device's location to calculate religion-specific prayer times and to power the prayer direction compass. Your location coordinates are processed entirely on your device using a local calculation library and are NOT transmitted to our servers or any third party. We do not store, log, or track your location.
g. Device and Technical Information
- Push notification tokens (Expo push tokens) stored to deliver notifications
- Device type and operating system (for notification delivery)
- Notification preferences and settings
h. Subscription and Purchase Data
We store your subscription status (free, active, canceled, or expired) and expiration dates. All payment processing is handled entirely by Apple (App Store) or Google (Play Store). We do not collect, process, or store your credit card numbers, bank account details, or any other payment instrument information.
2. How We Use Your Information
- Provide, operate, and maintain the Prayway service
- Personalize your experience with religion-specific prayer times, compass direction, and daily quotes
- Track your prayer streaks, calendar, and progress
- Enable social features including following, groups, leaderboards, and notifications
- Send daily prayer reminders and other notifications you have enabled
- Process and manage your subscription status
- Improve, troubleshoot, and optimize the App
- Comply with legal obligations and enforce our Terms of Service
3. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:
- Consent — for sensitive data such as religious affiliation, and for push notifications. You may withdraw consent at any time.
- Performance of a Contract — to provide the App's core features as described in our Terms of Service.
- Legitimate Interests — to improve the App, prevent fraud, and ensure security, where these interests are not overridden by your rights.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to any third party. We share data only as follows:
- With other users: Your public profile (username, avatar, streak count) is visible to other users. Prayer activity visibility depends on your privacy settings (public or followers-only). Your email address is never shown to other users.
- With service providers: We share data with the third-party services listed in Section 8 solely to operate the App.
- For legal reasons: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Prayway, our users, or the public.
5. Your Rights and Controls
Regardless of where you are located, you have the right to:
- Access your personal data within the App
- Edit your username, avatar, email, password, and privacy settings
- Toggle notification preferences on or off (daily reminders, follower notifications, prayer activity notifications)
- Control who can see your prayer activity (public or followers-only)
- Delete your account and all associated data at any time through Settings
- Request a copy of your data by contacting us at [email protected]
6. Data Security
We implement industry-standard security measures to protect your information:
- All data is encrypted in transit (TLS/SSL) and at rest
- Passwords are cryptographically hashed and never stored in plain text
- Authentication is managed through Supabase Auth with secure token-based sessions
- Row Level Security (RLS) policies ensure users can only access their own data
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Children's Privacy
Prayway is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has created an account or provided us with personal data, please contact us immediately at [email protected].
8. Data Retention
- Account data is retained while your account is active
- Upon account deletion, all personal data (profile, prayer logs, photos, notes, social connections, and subscription records) is permanently deleted within 30 days
- Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics purposes
- If required by law, we may retain certain data beyond the deletion period
9. Third-Party Services
We use the following third-party services to operate the App. Each has its own privacy policy governing how it handles your data:
- Supabase — Database hosting, user authentication, and file storage (supabase.com/privacy)
- Expo / Expo Application Services — Push notification delivery via Expo's push notification service (expo.dev/privacy)
- Apple — App distribution via the App Store and subscription payment processing. Apple processes payments; we never receive your payment details (apple.com/privacy)
- Google — App distribution via Google Play and subscription payment processing. Google processes payments; we never receive your payment details (policies.google.com/privacy)
We do not use any third-party analytics, advertising, or tracking SDKs.
10. International Data Transfers
Your data may be stored and processed on servers located in the United States or other countries where our service providers operate. If you are accessing the App from outside the United States, please be aware that your data may be transferred to, stored, and processed in a jurisdiction with different data protection laws than your own. By using the App, you consent to such transfers.
11. California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of your personal information. You can do this directly in the App via Settings or by contacting us.
- Right to Opt-Out of Sale: We do not sell your personal information to third parties. We have not sold personal information in the preceding 12 months.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise these rights, contact us at [email protected]. We will verify your identity before fulfilling any request.
12. EEA, UK, and Swiss Residents (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (you can also do this directly in the App).
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent (e.g., religious affiliation), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
To exercise these rights, contact us at [email protected].
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting a notice in the App, updating the "Last updated" date at the top of this policy, or sending an email to the address associated with your account. Your continued use of the App after the effective date of any changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
By creating an account or using Prayway, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.