Privacy Policy

Privacy Policy

Last updated: May 23, 2026

📋 What Changed: May 2026

  • ✦Strengthened AI data handling language. Anthropic is now explicitly prohibited from retaining or training on your prayer content.
  • ✦Added a clear ban on sharing your data with faith-based organizations or ministries for marketing purposes.
  • ✦Community post anonymity is now explicitly guaranteed. Your identity is not stored even internally against your posts.
  • ✦Account deletion commitment strengthened: all data, including backups, is removed within 30 days, no exceptions.

1. Introduction

HolyPrompt ('we', 'us', or 'our') operates the HolyPrompt application (the 'Service'). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By using HolyPrompt, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

We collect the following categories of information: • Account Information: your name and email address when you register. • Prayer Content: the text you enter to generate prayers and the prayers saved to your library. This content is stored securely and is never sold, shared with third parties, or used to train AI models. • Usage Data: metadata about your activity (e.g., number of prayers generated per month) used solely to operate the Service and enforce plan limits. • Payment Information: billing details are processed entirely by Stripe. We do not store card numbers or full payment credentials on our servers. • Device & Log Data: IP address, browser type, and operating system, collected automatically to maintain security and diagnose technical issues. If the app hits an error, this technical data plus an anonymous device identifier, never your identity or your prayer content, is sent to our error-monitoring provider (see Analytics and Tracking below).

3. How We Use Your Information

We use your information only to: • Provide, maintain, and improve the HolyPrompt Service. • Enforce subscription plan limits and process payments via Stripe. • Send optional daily prayer reminders you configure in your settings. • Respond to support requests and communicate service updates. • Detect and prevent fraudulent or unauthorized use. We do not use your information for advertising, and we do not sell your data to any third party.

4. AI-Generated Content

Prayer generation is powered by third-party AI (currently Anthropic's Claude). Your prayer prompt and the generated prayer are transmitted to Anthropic solely to fulfill your request. Under Anthropic's commercial terms, your content is not used to train their models. Anthropic automatically deletes API inputs and outputs within 30 days, and retains them longer only where the law requires it or where their automated safety systems flag a request. Generated prayers are stored in your account, encrypted in transit and at rest, and are never accessible to any other user. Administrative access to the underlying database is limited to the founder, and is used only to provide support you have asked for, to investigate abuse or a security incident, or where the law requires it. It is never used for marketing, and your prayers are never sold or used to train AI.

5. Data Sharing & Disclosure

We do not sell, rent, trade, or share your personal information with advertisers, data brokers, faith-based organizations, ministries, or any third-party marketers, ever. We may share your information only: • With service providers (Stripe for payments, Anthropic for AI generation, and an error-monitoring provider for anonymous crash diagnostics) who are contractually obligated to protect your data and use it only for the specified purpose. • If required by law, court order, or government authority, in which case we will notify you to the extent permitted by law. • In the event of a merger or acquisition, in which case you will be notified in advance and given the opportunity to delete your account before the transfer takes effect.

6. Community Prayer Requests

If you choose to share a prayer request to the Community board, only the brief summary you explicitly compose for sharing is made visible to other users. Your full prayer text is never shared. Your identity is not attached to your community post, even internally. You may post anonymously or under your first name; this is your choice at time of posting.

7. Data Retention & Deletion

We retain your account data for as long as your account is active. You may delete your account at any time via Profile → Account → Delete My Account. Upon deletion, all associated data, including your prayer library, community posts, and personal information, is permanently and irreversibly deleted from our servers within 30 days. We do not retain backups of deleted accounts beyond that window.

8. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encrypted data storage, secure HTTPS transmission, and access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to: • Access a copy of the personal data we hold about you. • Correct inaccurate data. • Request deletion of your data (available directly via Profile → Delete Account). • Object to or restrict certain processing. • Data portability (export your prayer data from your Profile page). GDPR (EEA residents): If you are located in the European Economic Area, you have rights under the General Data Protection Regulation, including the right to lodge a complaint with your local supervisory authority. CCPA (California residents): If you are a California resident, you have rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise any of these rights, contact us at privacy@holyprompt.app.

10. Children's Privacy

HolyPrompt is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

11. Analytics & Tracking

We use first-party analytics to understand how the app is used (for example, which features are most popular and where users encounter friction). This data is anonymized and not linked to your identity for advertising purposes. We do not use third-party advertising trackers, pixels, or behavioral profiling tools. We do not use cookies for tracking. Session data is used solely to operate and improve the Service. Crash and error reporting: when something breaks, we send a diagnostic report to a third-party error-monitoring provider so we can find and fix it. Those reports contain the error message and technical stack trace, your browser and operating system, and an anonymous random identifier stored on your device. They do NOT contain your email address, your name, or any prayer content, prayer request, or journal entry, and typed input and request bodies are stripped before anything is sent. The anonymous identifier only lets us tell that the same person hit the same fault twice; it is not linked to your account and cannot be used to identify you.

12. Sensitive Personal Information (California)

Your prayer content can reveal religious or philosophical beliefs. Under the California Consumer Privacy Act, as amended, that is treated as 'sensitive personal information' (Cal. Civ. Code § 1798.140(ae)). We collect it for one purpose: to generate, save, and organize the prayers you ask for, and to power the features you choose to use, such as sending a prayer to someone or posting an anonymous request to the community board. We do not sell it. We do not share it for cross-context behavioral advertising. We do not use it to infer characteristics about you, and we do not use it for any purpose beyond operating HolyPrompt for you. Because our use stays within what you have asked us to do, we do not use or disclose sensitive personal information for purposes that would give you a right to limit that use. You can delete any prayer, or your entire account and everything in it, at any time from Profile, then Delete Account.

13. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy with an updated date and, where required, by sending an email notification. Continued use of the Service after changes constitutes your acceptance of the revised policy.

15. Contact Us

For any privacy questions, data access requests, or concerns, please contact: HolyPrompt Privacy Team privacy@holyprompt.app