Privacy Policy

Last updated: August 31, 2026

PrayMyJourney (“we”, “us”) helps people invite others to pray with them through their journeys. We collect only what we need to run the service, we don’t sell your data, and we don’t show ads. This page explains, in plain language, what we store and why.

Information we collect

Account information. Your name, email address, and password (stored as a secure hash — we can’t read it). Content you create. Journeys, prayer requests, schedules, group messages, announcements, and responses you write on the site. This content is visible only to the people you share it with (for example, your prayer team or small group members) — it is not public, with one exception you control: announcements a group leader publishes to their group’s public announcements page (see “Public announcement pages” below). Email delivery records. When the site sends email on your behalf (prayer updates, invitations), we keep delivery status so we can show you what was sent and handle bounces.

Public announcement pages

A leader of an announcement group can turn on a public announcements page for that group, reachable by link, QR code, or group code. Everything the leader publishes there (announcement titles, text, photos, and the group’s name and logo) is visible to anyone on the internet with the link — that is the feature’s purpose, and it applies only to announcement groups, never to small groups, community groups, prayer ministries, prayer requests, or chat. If you follow an announcement group, that group’s leaders can see your name and email address (the follow page says so before you tap Follow); you can unfollow or mute its notifications at any time, which removes you from their list. Unfollowing deletes your follower record. Anyone can report a public page from the link at the bottom of the page, and our team reviews every report.

Zoom and Google Meet connections

Group leaders can optionally connect their own Zoom account (and in the future, Google account) so meetings can be started with one click. When you connect an account we store: your account’s email and display name (so you can see which account is connected), and the OAuth tokens the provider issues — encrypted at rest, readable only by our server, never by your browser or other users. We use these tokens solely to create and look up the video meetings you ask us to create for your group. We never see or store your Zoom or Google password, we don’t access meeting recordings, transcripts, chats, or audio/video content, and we don’t read your calendar or email. Disconnecting (one click in the Video Conferencing tab) deletes the stored tokens immediately. You can also revoke access anytime from your provider’s side (Zoom App Marketplace → Manage → Added Apps).

The mobile app and push notifications

Our iPhone app shows you the same PrayMyJourney site, with one thing added: push notifications. If you allow notifications when the app asks, we store a device token — an anonymous identifier that Apple issues to this app on this device. It is not your phone number, your Apple ID, or an advertising identifier, and it cannot be used to identify you outside this app. Alongside it we keep the platform (iOS), the app and operating-system version, and the times the device was first and last seen, so we can tell a live device from one that has been wiped or handed on.

Apple sees the notifications we send you. That is unavoidable — Apple’s Push Notification service is the only way to deliver a notification to an iPhone, so the text of each notification passes through Apple in order to reach your lock screen. That is one reason discreet mode is on by default: notifications say something general like “someone prayed for a request” rather than naming people or quoting what was written. You can turn discreet mode off in Settings if you would rather see the details.

Your notification choices are stored with your account — which categories you want, quiet hours, and discreet mode — so the app and the website agree. We also keep a short delivery log of each notification attempt: whether it succeeded and the reason code Apple returned. The log records the outcome, not the contents of your prayer requests. It exists so a notification that silently fails can be diagnosed, and it can be purged at any time.

Turning it off. Signing out of the app removes that device’s token, so a phone you hand on stops receiving your notifications. Turning notifications off for PrayMyJourney in your iPhone’s own Settings also stops delivery. Tokens that Apple tells us are dead are disabled automatically. The app contains no advertising, no analytics SDKs, and no third-party trackers; it does not use the device’s advertising identifier, and it does not read your contacts, photos, location, calendar, or microphone.

How we use information

To operate the service: showing your journeys and groups to the right people, sending the emails you schedule, sending the notifications you asked for, and starting the video meetings you request. That’s it. We do not sell or rent personal information, we don’t use your content for advertising, and we only share data with the service providers below, strictly so the site can function.

Service providers we rely on

Our infrastructure: Vercel (website hosting), Supabase (database, in the United States), Resend (email delivery), Cloudflare (domain and DNS), Apple (push notification delivery to iPhones, and app distribution through the App Store), and — only when a leader connects one — Zoom (video meetings). Each receives only the data needed for its job (for example, Resend sees the emails you send; Apple sees the notifications sent to your device; Zoom sees the meetings you create).

Cookies

We use only the cookies needed to keep you signed in. No advertising or cross-site tracking cookies.

Data retention and deletion

Your data stays as long as your account does. Delete something (a prayer request, a group, a video link, a connected account) and it’s removed from the live database. Device tokens are removed when you sign out of the app.

Deleting your whole account. You can do this yourself, at any time, without asking us: go to Settings and choose Delete my account at the bottom of the page. You’ll see exactly what will be removed before you confirm. It is permanent — your journeys, prayer requests, prayer team, responses, updates, messages, group memberships, connected accounts and devices all go, and we can’t restore them afterwards. If you lead a group, the group itself is not deleted out from under the other members: leadership passes to a co-leader, or to the longest-standing member. A group with no other members is deleted along with your account. If you’d rather we did it for you, contact us at the address below.

Children

PrayMyJourney is not directed at children under 13, and we don’t knowingly collect their information.

Changes and contact

If this policy changes, we’ll update this page and the date above. Questions or requests: support@praymyjourney.com, or see our Support page.