Privacy Policy

What we collect

• Account info: email address, hashed password, and (if you opt into SMS) your phone number.
• Prayer requests you log: titles, descriptions, subject names, cadence and commitment length, prayer notes, and timestamps of when you mark prayers as offered.
• Technical data: your timezone, whether your phone is verified, and basic request logs for debugging.

What we don’t collect

• We don't track you across other sites.
• We don't sell or rent your data to advertisers.
• We don't use third-party analytics or ad SDKs.

SMS / mobile information

If you opt into SMS reminders, we collect your phone number and your consent record solely to deliver the reminders you scheduled and to satisfy carrier compliance requirements. We do not share your mobile information or SMS consent with third parties or affiliates for marketing or promotional purposes. Your phone number is shared only with our SMS provider (Twilio) for the sole purpose of sending the reminders you requested. You can opt out at any time by replying STOP to any message; reply HELP for help.

How we use it

• To send the prayer reminders you've scheduled, via email (Resend) or SMS (Twilio).
• To pair your request with a fitting scripture passage in the Bible translation you chose. We send the title, optional subject, and description to OpenAI's API for this purpose and discard the response once we've stored the scripture reference.
• To show you your own list, streaks, and faithfulness percentage.
• To keep the service running and debug errors.

Services we rely on

We use vetted infrastructure providers. Each sees only the minimum data it needs:

• Convex — database and server functions; stores your account and prayer data.
• Vercel — hosts the web app.
• Resend — sends email reminders and account emails.
• Twilio — sends SMS reminders and verifies phone numbers, only if you opt in.
• OpenAI — generates the scripture pairing; receives request text but not your identity.

Sharing

You can choose to share a specific prayer request via a public link. When you do:

• The title is always visible to anyone with the link. The subject name and description are visible only if you toggle “Show details publicly” on.
• Your name, email, phone number, and prayer log are never shown.
• Share links are cryptographically random (128 bits of entropy) and aren't guessable, but anyone with the exact link can open it. Treat it like a password you're pasting into a group chat.
• Share links expire 90 days after you turn sharing on, unless you pick “Never expire.” You can revoke any time by toggling share off.
• When you share the link on social media, the title appears in the preview card (Open Graph / Twitter card). Plan accordingly if the title itself is sensitive.

Error reporting

We use Sentry to capture application errors so we can fix bugs. Our Sentry integration is configured to strip any field that could contain prayer content (title, description, notes, testimony, subject name) before the event is sent, and to redact share tokens from URLs in breadcrumbs. Sentry stores stack traces, request paths, and technical metadata only.

Your rights

• Access and correction: email us at the address below.
• Deletion: email us to delete your account. We remove your data within 30 days, except where retention is required by law.
• Export:we'll send you a JSON export of your account data on request.

Cookies

We use session cookies to keep you signed in. We don't use advertising or tracking cookies.

Children

I'll Pray For You is not directed at children under 13. If you believe a child has signed up, contact us and we'll remove the account.

Changes

If we change this policy materially, we'll update the effective date at the top and notify active users by email. Small clarifications may happen without notice.

Contact

Questions? Email jedaws@gmail.com.