Skip to main content
Back to Home

Effective Date: January 27, 2026
Last Updated: January 27, 2026

1. Introduction

Welcome to PrayerConnect ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

By accessing or using PrayerConnect, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide, including:

  • Account Information: Name, email address, password, phone number, and profile photo
  • Church Information: Church name, address, denomination, website, and branding assets
  • Prayer Requests: Content of prayer requests, updates, and related communications
  • Payment Information: Billing address and payment details (processed securely via Stripe)
  • Communications: Messages, feedback, and support inquiries you send to us

2.2 Information Collected Automatically

When you use our services, we automatically collect:

  • Usage Data: Pages viewed, features used, time spent, and interaction patterns
  • Device Information: Browser type, operating system, device identifiers, and screen resolution
  • Log Data: IP addresses, access times, referring URLs, and error logs
  • Cookies and Similar Technologies: See our Cookie Policy for details

2.3 Information from Third Parties

We may receive information from third-party services you connect to your account, such as authentication providers or analytics services.

3. How We Collect Information

We collect information through:

  • Direct Interactions: Registration forms, profile updates, prayer request submissions, and support communications
  • Automated Technologies: Cookies, web beacons, and analytics tools
  • Third-Party Services: Payment processors (Stripe), email services (Resend), and analytics platforms

4. How We Use Your Information

We use your information to:

  • Provide Services: Create and manage accounts, process prayer requests, and facilitate community features
  • Process Transactions: Handle payments, subscriptions, and billing
  • Communicate: Send notifications, prayer updates, newsletters, and support responses
  • Improve Services: Analyze usage patterns, troubleshoot issues, and develop new features
  • Ensure Security: Detect fraud, enforce policies, and protect users
  • Comply with Law: Meet legal obligations and respond to lawful requests
  • Personalize Experience: Customize content and recommendations based on preferences

5. Data Storage and Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure authentication mechanisms including multi-factor authentication options
  • Regular security audits and vulnerability assessments
  • Access controls limiting data access to authorized personnel
  • Secure cloud infrastructure with reputable providers

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any breaches as required by law.

6. Third-Party Services

We use trusted third-party services:

  • Stripe: Secure payment processing
  • Resend: Email delivery services
  • Cloud Hosting: Secure data storage and application hosting
  • Analytics: Usage analysis to improve our services

These providers have their own privacy policies and are bound by data protection agreements.

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Portability: Receive your data in a structured, machine-readable format
  • Opt-Out: Unsubscribe from marketing communications
  • Restriction: Limit how we process your data in certain circumstances

To exercise these rights, contact us or use the settings in your account dashboard.

8. Data Retention

We retain your information for as long as necessary to provide services and fulfill legal obligations:

  • Account Data: Retained while your account is active, plus 30 days after deletion
  • Prayer Requests: Retained according to church admin settings; archived requests retained for 1 year
  • Billing Records: Retained for 7 years for tax and legal compliance
  • Usage Logs: Retained for up to 90 days for security and troubleshooting

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

10a. Special-Category Data in Prayer Requests

Prayer requests routinely contain information that qualifies as "special category" personal data under the EU GDPR and UK GDPR (for example: health, mental health, family, sexuality, addiction, immigration, or religious belief). Under Australian law this is "sensitive information". PrayerConnect processes such data on behalf of the church that operates the workspace, which is the Data Controller and is responsible for the lawful basis to collect and share it (typically explicit consent from the requester). See the DPA for the full controller / processor arrangement.

10b. Retention Periods

  • Prayer requests and updates: retained for the life of the church workspace unless deleted by the requester or an admin.
  • Account & profile data: retained while your account is active; deleted or anonymised within 90 days of account deletion.
  • Audit and security logs: retained for up to 90 days.
  • Billing records: retained for up to 7 years to meet tax and accounting obligations.
  • Email delivery logs: retained for up to 12 months for deliverability and abuse investigation.
  • Backups: rolling backups are retained for up to 30 days and then overwritten.

10c. Data-Subject Requests

To exercise your rights (access, rectification, erasure, portability, restriction, objection), first contact your church administrator, who has direct tools to search, export, correct, and delete your data. If your church is not responsive, or if you are a PrayerConnect account holder (rather than a church member), submit a privacy request through our contact form and we will respond within 30 days. The contact form is our designated privacy contact point; we do not operate public mailboxes.

10d. Platform-Administrator Access

A small number of PrayerConnect staff ("platform administrators") can access church workspaces to provide support, investigate abuse, or resolve billing and security issues. Every impersonation action is logged with a timestamp, actor, and target. Support access is only used with a documented reason, and never to read prayer content except as strictly necessary to respond to a support request from the church admin.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and, where appropriate, via email. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or concerns, please contact us:

Related Policies