Encryption in transit & at rest
All data is encrypted using TLS in transit and AES-256 when stored.
Security
When members share their deepest concerns, trust is everything. Here's how we protect what matters most.
How we protect your data
Secure cloud infrastructure
Enterprise-grade hosting with automated backups and redundancy built in.
Secure authentication
Industry-standard auth with secure password hashing (bcrypt) and session management.
Privacy controls
Members control who sees their requests — public, members-only, or private.
Row-level security
Database-level access controls ensure users only see data they're authorized to.
GDPR ready
Built with data protection principles. Request export or deletion any time.
Practices
We follow established practices to keep your data safe.
- All data encrypted in transit and at rest
- Regular dependency updates and security patches
- Principle of least privilege for data access
- Secure session management and logout
- Input validation and sanitization
- Protection against common web vulnerabilities
PrayerConnect runs on enterprise-grade cloud infrastructure with built-in security features, automated backups, and continuous monitoring.
Data control
Data ownership
Your church owns its data. We don't sell or share your information.
Data portability
Export your data in standard formats. We believe in giving you control.
Data deletion
Request complete data deletion at any time. We'll process promptly.
Transparency
Our privacy policy clearly explains what we collect, why, and how we use it.
Found a potential security issue? We appreciate responsible disclosure. Contact us and we'll investigate promptly.
Privacy in practice
Real prayer requests, encrypted in transit and at rest — visible only to the people your church chooses.