Privacy Policy
This policy explains what Pray Online collects, why, who it is shared with and what you can ask us to do about it. It covers the mobile application and the service behind it.
The application is operated by URUS - FZCO, Dubai, United Arab Emirates. For anything in this policy, write to support@shmedia.cloud.
What we collect
| Your account | Your email address and your name. Both come from Apple or Google when you sign in; we never see or store a password. If you sign in with Apple and choose to hide your address, we receive Apple's relay address and nothing else. |
|---|---|
| What you write | The text of your prayer requests and of your messages to a pastor, with the first name shown alongside them. People write about illness, family, bereavement and money here, so we treat this as the most sensitive thing we hold. |
| Your choices | The language you picked and the candles you have lit. |
| Payments | Whether a subscription or a purchase is active, when it began and when it ends, and the transaction identifier Apple gives us. Card details never reach us — Apple takes the payment and tells us only that it happened. |
| Technical | Sign-in tokens that keep you signed in, an identifier for your device if you turn notifications on, and ordinary web server logs, which include your IP address. |
What stays on your phone. The confession room never leaves it. What you choose to confess, the steps you have walked and the ones you have finished are written to your phone's own storage and are never sent to us. We do not know what anyone has confessed, and a new phone starts with an empty room.
Why we hold it
- To run the service. To sign you in, to carry a prayer request or a message to a pastor and an answer back to you, to light a candle and to know when it goes out.
- To honour what you paid for. To know whether a subscription is active and until when.
- To reach you. If you allow notifications, to tell you that an answer has arrived.
- To keep it standing. Server logs, for security and for finding faults.
We do not sell anything to anyone. We do not advertise in the application and we do not profile you. We use one attribution service, AppsFlyer, to see where installs come from and which purchases follow them. The first time you open the app, iOS asks whether you allow tracking. If you say yes, your device’s advertising identifier is part of this; if you say no, it is not, and nothing else about the app changes either way.
Who else sees it
Only those who have to, and only what they need:
- Apple and Google — when you sign in, and Apple again for every payment. They each have their own privacy policy, which governs what they do with what passes through them.
- Our hosting provider — the service runs on servers we rent in the United States.
- AppsFlyer — our attribution service. It is told that the application was installed, which advertisement you came from, and that a subscription or a candle was bought, with the amount. It is not told your name, your e-mail address, what you write to a pastor or what you confess.
- Service providers that help us operate the application. This includes providers who process the text of your messages so that a reply can be prepared, and who deliver notifications to your phone. They act on our instructions, may not use your text for their own purposes, and some of them operate outside the European Economic Area. Where that is so, the transfer rests on the European Commission's standard contractual clauses.
- Anyone the law obliges us to tell, and only to the extent it obliges us.
Your prayer request is visible to the pastors of the community who answer requests. Nobody else using the application can read what you wrote, and nothing you write is published.
How long we keep it
- Your account, and what you have written, for as long as the account exists.
- Records of payments for as long as accounting and tax law requires us to keep them, which is longer than the account may last.
- Server logs for a short period, normally no more than thirty days.
- When you ask us to delete your account, we delete it and what you wrote, except the payment records above.
What you can ask for
Wherever you live, you can ask us to show you what we hold about you, to correct it, to delete it, or to send it to you in a form you can take elsewhere. You can withdraw a consent you gave, and you can object to what we do with your data.
If you are in the European Union or the United Kingdom, these are your rights under the GDPR, and you may also complain to your national data protection authority. Our lawful bases are the performance of our contract with you for everything needed to run the service, your consent for notifications, and our legitimate interest in keeping the service secure.
Write to support@shmedia.cloud and we will answer within one month.
Deleting your account
You can ask for your account to be deleted from inside the application, or by writing to support@shmedia.cloud. Deleting the application from your phone does not delete your account — but it does erase the confession room, which was only ever on the phone.
Children
Pray Online is not intended for children under 13, and we do not knowingly collect anything from them. If you believe a child has given us their details, write to us and we will remove them.
Security
Everything travels between your phone and us over an encrypted connection. Access to the servers is limited to the people who maintain them. No service can promise perfect security, and we do not; what we can say is that we hold as little as the application needs in order to work.
Changes
If this policy changes in a way that matters, we will say so in the application before the change takes effect. The date at the top is always the date of the version you are reading.