Privacy Policy

• We do not require an account, email address, phone number, or name.
• We do not use analytics SDKs, cross-app tracking, or the Advertising Identifier (IDFA).
• We do not sell data to anyone. Ever.
• We do not display advertising.
• We do not collect health or biometric data from your device.
• We do not collect contacts, photos, or location.

The only identifier we use is an anonymous device hash: a one-way SHA-256 of your device's vendor ID plus a fixed salt. This hash cannot be reversed to identify you. It is stored in your device Keychain and resets if you uninstall the app.

Every request to the server includes this hash so we can rate-limit abuse, enforce ownership of your own posts, and let you delete what you've shared. Nothing else is attached to it.

• Your prayer requests.Bodies, generated verses, and prayers you've received are stored locally using Apple's SwiftData framework.
• Saved items. Anything you save stays on your device.
• Received verses. Verses strangers have sent while praying for your shared requests are cached locally for offline viewing.
• Preferences. Translation, tradition, and notification toggles are kept in UserDefaults (and optionally mirrored to the server, see below, so another install on the same device starts configured the same way).

Only data you choose to share is sent to our server. Specifically:

• Community requests you opt in to share. Sharing is per-request and off by default. When you toggle share on, the body of that request, its category, and your anonymous device hash are stored so strangers can pray for you. You can delete any shared request at any time from inside the app.
• Engagement you create.Tapping "I prayed", sending a curated verse, or reporting content creates an event keyed by your anonymous device hash. Used for counts and abuse protection.
• Settings (optional). Your translation/tradition preferences so they can survive a reinstall.

Private requests you don't share never leave your device.

When you submit a prayer request, your request text is sent to our server, which calls a large-language-model provider (OpenAI GPT-5.4-nano with Anthropic Claude as fallback) to generate a relevant Bible verse and a short personal prayer. The request text is transmitted only to generate the response and is subject to each provider's standard data policy — neither is used to train models on your content.

The request body you shared is also automatically moderated by the same model before publishing to the community feed. Moderation blocks personally-identifying information, spam, threats, and content that isn't a prayer request.

If the model detects signals of active crisis — self-harm, suicidal ideation, abuse in progress, or immediate danger — we never publish that request to the community feed, regardless of whether sharing was toggled on. The app shows you region-appropriate crisis resources immediately (988 in the US, Samaritans in the UK, Lifeline in Australia, and so on).

Prayer Request is a one-time, non-consumable in-app purchase processed by Apple through the App Store. We never see your payment details. Purchase entitlement is validated on your device through Apple's StoreKit framework.

Prayer Request is rated 13+ and is not directed at children under 13. We do not knowingly collect information from anyone under 13.

Because we collect no personally-identifying information, a traditional access/export request isn't meaningful — we literally have no name, email, or account tied to you. You can delete any community request you've shared from within the app at any time. Uninstalling the app rotates your device hash and effectively disassociates your on-device history from anything on the server.

If this policy materially changes we'll update the "Last updated" date above. We'll keep it short and honest.

Questions: hello@stackcurious.com