PRIVACY

Privacy

Effective July 25, 2026

Who we are

Prayer Altar is provided by Absalom Inc. This policy explains how Prayer Altar processes information when you use the iPhone app, Widget, Apple Watch experience, website, shared prayer-request pages, and support channels.

Information we process

• Account information: name, email address, authentication provider, provider account identifier, and optional profile details and profile photo.
• Private prayer information: Prayer Altar items, plans, session history, private notes, Testimonies, Vision Board content, photographs, reminders, and preferences you choose to create.
• Shared prayer requests: when someone submits through a link you created, we process the sender name, optional email address, prayer request, link identifier, and a salted, one-way abuse-prevention fingerprint derived from the request address and link. The raw network address is not stored by Prayer Altar in that fingerprint. Fingerprint rows are pruned during requests and by a daily scheduled cleanup once they were last updated more than seven days earlier.
• Purchase information: Apple supplies product and entitlement status needed to unlock Prayer Altar Plus. Prayer Altar does not receive full payment-card details.
• Music and device services: Apple Music authorization and playback state when you choose MusicKit features, plus notification and device settings needed for requested reminders, Widget, and Watch experiences.
• Support information: correspondence and information you voluntarily include in a support or TestFlight report. Please do not send prayer content, passwords, or authentication tokens.

How we use information

We use information to authenticate your account; provide, synchronize, recover, and secure your private content; deliver requested reminders; process shared prayer requests; determine Plus access; prevent abuse; complete account deletion; respond to support; and maintain service reliability. We do not sell prayer content, use it for targeted advertising, or make a user's private altar visible to other users.

Where information is stored

Prayer Altar is local-first. SwiftData on your device is the operational copy, and signed-in accounts use private Supabase database and Storage services for synchronization and recovery. Widget and Watch data is a limited, account-scoped snapshot. Apple processes StoreKit, MusicKit, notification, and platform information under its own terms. The public website is hosted through Vercel. Google or Apple processes authentication information when you choose those sign-in methods.

Service providers may process information in countries other than your own. We use access controls, encrypted transport, private Storage, owner-scoped database policies, and processor safeguards appropriate to the service.

Sharing

We share information only with service providers acting for Prayer Altar, when you deliberately use a sharing feature, when required by law, or to protect users and the service. A prayer-request link can be used by anyone who receives it until it expires or is disabled; share links only with people you trust.

Retention and deletion

Private account content is retained while your account remains active. The authenticated in-app deletion flow removes private database records, private media, authentication access, local account data, and Widget snapshots. A replacement snapshot is sent to a paired Watch and takes effect when that Watch reconnects; Prayer Altar cannot remotely wipe a disconnected Watch immediately. Prayer Altar retains a pseudonymous deletion audit containing a one-way HMAC value, status, timestamps, and a bounded error code so deletion completion can be proven and safely resumed; it contains no raw account identifier or prayer content. Limited copies may remain temporarily in service-provider backups until those backups are overwritten.

A local-device-only export is a protected JSON file created on your device. It is not a complete cloud export. Once you share or save that file outside Prayer Altar, you control and must delete those copies yourself.

Your choices and rights

You can edit private content, control reminders, revoke Music or notification access in device settings, disable shared links, create a local-device-only export, and delete your account in the app. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing. We will verify requests before acting on account information.

Children

Prayer Altar is not directed to children under 13, or the minimum digital-consent age required where they live. We do not knowingly create accounts for children who cannot legally consent. Contact us if you believe a child provided account information without appropriate authorization.

Security and changes

No service can guarantee absolute security. We limit access, isolate records by owner, protect private media, and use resumable deletion and synchronization controls. We may update this policy when services or laws change. Material changes will be identified by a new effective date and, when appropriate, communicated in the app.

Contact

For privacy questions or rights requests, email privacy@prayeraltar.co. For product support, email support@prayeraltar.co.