Privacy Policy

1. Scope

This Privacy Policy applies to Praylight’s mobile applications, website, related features, customer support, and other services that link to this policy (collectively, the “Services”). The Services are provided by Daily Bread Studio, Inc. (“Daily Bread Studio,” “we,” “us,” or “our”).

Praylight is a Scripture, reflection, and prayer product. It is not a healthcare provider, a mental-health provider, or a service covered by HIPAA. Please do not use Praylight to store information you do not want processed as described in this policy.

2. Information we collect

Information you provide

• Account and contact information: name, email address, account identifier, password in protected form, sign-in provider, and communications with our team.
• Profile and personalization information: display name, denomination or faith background, Bible version, goals, prayer preferences, life context, challenges, age range, and onboarding answers you choose to provide.
• User content: Bible chat prompts and responses, journal entries, prayer reflections, Bible notes, highlights, bookmarks, favorites, message feedback, and photos you attach to a chat.
• Support information: the content of requests, feedback, and other correspondence you send us.

Information generated when you use Praylight

• Activity and progress: prayer completions, streaks, journey progress, feature interactions, chat limits, reading activity, and saved preferences.
• Device and technical information: IP address, device and operating-system information, app version, identifiers, timestamps, crash or error details, and network or server logs.
• Analytics information: screens viewed, buttons used, feature events, subscription or paywall interactions, and performance measurements. After sign-in, analytics may be associated with your account identifier, name, or email.
• Subscription information: subscription status, product, trial, purchase, and renewal events received from Apple and our subscription service provider. We do not receive your full payment-card number.

Information from device features and other services

If you choose to use photo attachments, notifications, Sign in with Apple, Google sign-in, or Screen Time features, we receive or process the information needed to provide that feature. Your Prayer Lock app and category selections are represented by Apple-provided tokens and stored on your device using Apple’s Family Controls frameworks. We may record counts such as the number of apps or categories selected, but we do not receive a readable list of the app names you select through those tokens.

You can decline optional device permissions in iOS Settings. Some features will not work without the permission they require.

3. How we use information

We use information to:

• create and secure accounts, authenticate users, and provide the Services;
• save and sync chats, journals, prayer activity, reader annotations, favorites, settings, and progress;
• personalize daily journeys, Bible chat, reminders, and other content;
• process images and prompts, generate AI responses, enforce usage limits, and detect misuse;
• manage subscriptions, trials, purchases, entitlements, and paywalls;
• send account, security, support, and service communications, and deliver notifications you request;
• understand feature use, troubleshoot problems, improve reliability, and develop the Services;
• protect users, our rights, and the integrity of the Services; and
• comply with law, enforce our Terms of Service, and resolve disputes.

Where required, we rely on your consent. In other cases, we process information to perform our contract with you, pursue legitimate interests such as securing and improving the Services, or comply with legal obligations. We do not use sensitive personal information to infer characteristics about you for advertising.

4. AI features

When you use Bible chat or an AI-generated daily journey, we may send your prompt, attached images, relevant conversation history, selected preferences, and relevant profile or onboarding information to OpenAI through our secure server-side service. OpenAI processes that information to generate a response. We then return the response to you and, for saved chats and journeys, may store it with your account.

Do not include another person’s confidential information or image unless you have permission. AI output can be incorrect, incomplete, or inappropriate. It should not be treated as professional, medical, mental-health, legal, financial, pastoral, or emergency advice.

5. How we share information

We disclose information only as described below:

• Infrastructure and storage: Supabase hosts authentication, databases, files, and server-side functions used by Praylight.
• AI processing: OpenAI processes prompts, images, relevant context, and instructions needed to generate AI responses.
• Analytics: Mixpanel processes product-usage events and user attributes so we can understand and improve the Services.
• Subscriptions and payments: Superwall helps manage paywalls and subscription status. Apple processes App Store purchases and billing.
• Sign-in providers: Apple and Google process information when you choose their sign-in options.
• Professional advisers and vendors: we may use hosting, security, support, legal, and other providers that process information for us under appropriate obligations.
• Legal and safety reasons: we may disclose information if we reasonably believe it is necessary to comply with law, legal process, or valid government requests; protect rights, safety, and security; investigate fraud or abuse; or enforce our agreements.
• Business transactions: information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.
• At your direction: we may disclose information when you ask us to or give consent.

We require service providers that receive personal information from us to protect it and process it only for contracted purposes. We do not sell personal information for money or share personal information for cross-context behavioral advertising.

6. Retention and deletion

We retain account information and saved user content while your account is active and as needed to provide the Services. Retention periods vary by the type of information and our operational, security, fraud-prevention, and legal needs. For example, support records, transaction records, analytics, and security logs may be retained for a reasonable period after an account is closed. Information may remain temporarily in encrypted backups until those backups are overwritten in the ordinary course.

You can permanently delete your account from the profile area in the app. Account deletion removes the account and associated server-side data that we are not legally required to retain. You can also delete individual chat threads and other content where the app provides that control. Deleting the app from your device does not delete your account.

Deleting your account does not automatically cancel an App Store subscription. Manage or cancel subscriptions separately in your Apple account settings. If you cannot access the in-app deletion control, email team@prayerlight.com.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal our response to a request. You will not receive discriminatory treatment for exercising a privacy right.

• Account and content: use in-app settings to update profile information, delete chats, sign out, or delete your account.
• Notifications and device permissions: change them in the app or iOS Settings.
• Marketing: use an unsubscribe control in the message or contact us. Service and security messages may still be sent.
• Privacy request: email team@prayerlight.com and describe your request.

We may need to verify your identity before completing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authority and direct identity verification. If we deny a request, you may appeal by replying to our decision and writing “Privacy Appeal” in the subject line. You may also contact your local privacy or data-protection authority.

8. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it. Users who are under the age of legal majority where they live should use the Services only with permission from a parent or legal guardian.

9. Security and international transfers

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access and account-scoped database controls. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Protect your credentials and contact us if you suspect unauthorized account access.

We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we use recognized legal safeguards for international transfers.

10. California notice at collection

The categories of personal information we may collect are identifiers; customer records; commercial and subscription information; internet or electronic activity; device information; approximate location derived from IP address; audio, visual, and similar information such as photos you attach; inferences and preferences; and sensitive information you choose to include, such as religious beliefs, account credentials, or life and health context. We collect and use these categories for the purposes described in Sections 2 and 3 and retain them as described in Section 6.

We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not knowingly sell or share personal information of consumers under 16. To make a California privacy request, use the contact details in Section 12.

11. Changes to this policy

We may update this policy as the Services or law changes. We will post the updated policy here and change the “Last updated” date. If a change materially affects your rights, we will provide additional notice where required, such as through the app or by email.

12. Contact us

Questions, requests, and complaints may be sent to: