Privacy policy

Privacy Policy

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service, and tells you about your privacy rights and how the law protects you, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Legal Basis for Processing:

We process your personal data on the following legal bases:

  • Contract: necessary for performance of a contract
  • Consent: clear consent given
  • Legal Obligation: compliance with a legal obligation
  • Legitimate Interests: necessary for legitimate interests

Data Controller:

PrayTogether, is the data controller for the personal data we collect and process. For any questions regarding data protection, please contact our support at: Email: support@praytogether.xyz

Types of Data Collected:

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address: Required for account creation and authentication. Used to send notifications and updates.
  • Display name (first name and last name): Used to personalize your experience and for identification within the app.
  • Authentication information: Used for secure login and account management. (when using Google Sign-In or Apple Sign-In)
Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as:

  • Authentication provider information: Used to manage user authentication and access. (Google, Apple, or Email)
  • Subscription status and payment information: Processed through RevenueCat for managing subscriptions and payments

Data Processing and Storage

Data Processing Locations

Your data is processed in the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place through:

  • Standard Contractual Clauses
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules
Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including:

  • Account data: Until account deletion
  • Payment information: As required by financial regulations
  • Usage data: Until account deletion unless required for legal compliance.

Data Protection Measures

We implement appropriate technical and organisational measures to ensure data security, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Regular backups
  • Staff training on data protection

Third-Party Processors

We use the following third-party processors who have been carefully selected and are GDPR compliant:

Firebase Authentication
  • Purpose: User authentication
  • Data processed: Email, authentication tokens
  • Location: EU/US (with appropriate safeguards)
Google Sign-In
  • Purpose: User authentication
  • Data processed: Email, name
  • Location: EU/US (with appropriate safeguards)
Apple Sign-In
  • Purpose: User authentication
  • Data processed: Email, name
  • Location: EU/US (with appropriate safeguards)
Revenue Cat
  • Purpose: Subscription management
  • Data processed: Payment information, subscription status
  • Location: EU/US (with appropriate safeguards)

Data Breach Notification

In case of a data breach, we will:

  • Notify the relevant supervisory authority
  • Inform affected users without undue delay
  • Document all breaches and our response

International Data Transfers

When we transfer data outside the EEA, we ensure appropriate safeguards are in place through:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Binding Corporate Rules

Automated Decision Making

We do not use automated decision-making or profiling that would have legal or significant effects on you.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification for significant changes

Contact Us

For any questions about this Privacy Policy or to exercise your GDPR rights, please contact us:

  • By email: support@praytogether.xyz