Privacy Policy

PrayOne (listed as “Pray One” on the App Store) is published by GLOBAL IMPACT, INC. II NFP. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit prayone.com or use the PrayOne app. Part II is our Children’s Privacy Policy, prepared in compliance with Google Play Families Policies, COPPA, GDPR, and applicable Indian law.

1. Information We Collect

We are committed to protecting your privacy. We may collect information about you in the following ways:

• Personal data — your name, email address and phone number when you register or make a donation through our payment provider.
• Payment information — the card or account details required to process a donation. Payment data is handled directly by our payment provider and is not stored on our servers.
• Usage data — information about how you use the site and the app, including pages visited, time spent, and interactions.
• Device and technical data — IP address, browser type, operating system and device identifiers when you access the site or app.
• Communications — prayer requests, feedback or support inquiries you submit through the site or app.
• Cookie data — information from cookies and similar technologies used to analyse trends and administer the site.

2. How We Use Your Information

We may use the information we collect to:

• Process donations and event registrations.
• Send you newsletters, updates and other ministry communications.
• Improve our website, app and services.
• Respond to your inquiries and provide support.
• Maintain the security and integrity of the service.
• Measure which of our own ads on Facebook and Instagram lead to app installs and app opens (see Section 3).
• Comply with applicable legal obligations.

Apart from measuring our own ads as described in Section 3, we do not use your information for third-party commercial advertising, and we do not sell your data to any party.

3. Disclosure of Your Information

We do not sell or rent your personal information. We share it only in these limited circumstances:

• Service providers — trusted third parties who help us operate the service, such as payment processing, hosting and email delivery. They are bound by confidentiality obligations and may not use your data for their own purposes.
• Legal requirements — where required by law, court order or a government authority.
• Safety — to protect the rights, safety or property of GLOBAL IMPACT, INC. II NFP, our users, or the public in emergency circumstances.
• Meta — app measurement data sent by the Facebook SDK, as described below.

Meta (Facebook SDK — App Events)

The PrayOne app for iOS and Android includes the Facebook SDK from Meta Platforms, used only for “App Events”. We do not use Facebook Login or Facebook sharing. App Events measure the effectiveness of our ads on Facebook and Instagram — which ads lead to app installs and app opens — and give us aggregated app analytics.

The SDK automatically sends Meta:

• App install and app open events, with timestamps
• Device information — device model, operating system and version, app version, language, time zone, screen size and mobile carrier
• Your IP address
• An app-specific anonymous identifier
• Android only: the Android Advertising ID, which you can reset or delete in your Android settings

On iOS we do not request App Tracking Transparency permission and do not access the iOS advertising identifier (IDFA).

We do not send Meta your name, email address, prayer content, messages, posts or any other account data, and we do not sell personal data.

Meta processes this data under its own Privacy Policy. It may be transferred to and processed in the United States and other countries where Meta operates.

Legal basis. Where the law requires consent for this kind of measurement — including in the European Economic Area, the United Kingdom and Switzerland — we rely on your consent, the SDK sends nothing to Meta until you give it, and you can withdraw it at any time. Elsewhere we rely on our legitimate interest in knowing which of our ads bring people to PrayOne; you can object to this as described in Section 8.

How to limit it:

• On Android, reset or delete your Advertising ID in your device settings.
• Adjust your ad preferences in your Facebook or Instagram account settings.
• Contact hello@prayone.com to request access to, or deletion of, this data.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to analyse trends, administer the site and understand how the service is used. You can control cookie preferences in your browser; disabling cookies may affect some features.

We do not use tracking technologies for cross-site behavioural advertising or to build commercial user profiles. In the app, the Facebook SDK is used only to measure our own ads, as described in Section 3.

5. Security of Your Information

We use administrative, technical and physical safeguards to protect your personal information, including TLS/HTTPS encryption for all data in transit, access controls limited to authorised personnel, and regular security reviews of the service and its third-party integrations.

No electronic transmission over the internet is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the service. Financial transaction records may be retained longer where applicable tax and accounting law requires it. Upon account deletion or withdrawal of consent, we delete or anonymise your personal data within 30 days, except where retention is legally required. Residual copies inside encrypted backups are overwritten on the normal backup cycle, within 90 days.

7. Deleting Your Account or Your Data

8. Your Rights

Depending on where you live, you may have the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data.
• Restriction — request that we limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw consent at any time where processing is consent-based.

To exercise any right, contact hello@prayone.com. We respond within 30 days.

9. Links to Third-Party Sites

The site and app may link to third-party platforms, such as YouTube for sermon content. This Privacy Policy does not apply to those external services; we encourage you to review their own privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or in applicable law. When we make material changes we update the effective date above and notify registered users by email or in-app notification where required.

11. Contact Us

12. Scope and Who Is a Child

For the purposes of this Children’s Privacy Policy, a “child” is any user under 13 years of age in the United States (per COPPA), under 16 years of age in applicable EU member states, or under the applicable age of digital consent in any other jurisdiction. Where local law provides greater protection, we apply the higher standard.

PrayOne is a church community platform for a general audience. Features involving tithes, offerings and financial transactions are restricted to adult users only.

13. Information We Collect from Children

What we do not collect

When a user is identified as a child, we do not collect, request or store:

• Full name, home address, email address or phone number without prior verifiable parental consent
• Precise geolocation data
• Android Advertising Identifier (AAID), IMEI, IMSI, MAC address, SIM Serial, Build Serial, BSSID or SSID
• Biometric data of any kind
• Device phone number via the Android TelephonyManager API
• Financial or payment information

What may be collected with parental consent

• A child-safe username or display name (a real name is not required)
• General country or region (not precise location)
• Anonymised crash and error logs for app stability

Children’s data is never used for commercial profiling, interest-based advertising or remarketing.

Android identifier controls

For child users the AAID is not transmitted; the app targets API level 33+ and does not declare the AD_ID permission for child sessions; device identifiers including IMEI, IMSI, MAC, SSID, BSSID, SIM Serial and Build Serial are not transmitted.

14. How We Use Children’s Information

Any information collected from child users is used solely to provide access to age-appropriate content, maintain app security, respond to support requests (with parental involvement) and comply with legal obligations. We do not use children’s information for advertising, profiling or any commercial purpose.

15. Parental Consent and Parental Rights

Verifiable parental consent

Before collecting any personal information from a child, we require verifiable parental consent through email verification sent to the parent’s registered email, a signed consent form, or another method that reasonably verifies the consenting party is the child’s parent or legal guardian.

What parents can do

• Review any personal information we have collected from their child
• Request correction or deletion of their child’s personal information
• Withdraw consent at any time, resulting in deletion of the child’s data and closure of the account
• Refuse further collection or use of information from their child

To exercise any of these rights, email hello@prayone.com with the subject Children’s Privacy — Parental Request. We respond within 30 calendar days.

16. Advertising and SDK Compliance

PrayOne does not display third-party advertising to child users. If advertising is ever introduced, we will use only Google Play Families Self-Certified Ads SDKs and ensure no interest-based or behavioural advertising is served to children.

All third-party SDKs and APIs integrated into the app have been reviewed to confirm they are approved for use in child-directed or mixed-audience services. We do not implement any SDK that collects persistent identifiers from child users or is prohibited for child-directed services under its own terms. The Facebook SDK described in Section 3 is not active for child users, and no data from a child’s session is sent to Meta.

17. Social and Community Features

Where the app offers social or communication features, the following safeguards apply to child users:

• An in-app safety reminder is shown before accessing any social or communication feature
• Adult action (PIN, password or email verification) is required before a child can share personal information
• Parents and guardians can enable, disable or restrict social features for their child’s account
• Freeform communication with unknown individuals is not permitted for child users

18. App Content Appropriateness

Content accessible to child users is reviewed for general family appropriateness. The app does not knowingly make available to child users any content involving violence or gore, sexual or mature themes, gambling, alcohol or controlled substances, or adult dating or relationship services.

19. Legal Compliance

The app, including all APIs and SDKs it uses, is designed to comply with:

• U.S. Children’s Online Privacy Protection Act (COPPA)
• EU General Data Protection Regulation (GDPR) and applicable national implementations
• Google Play Families Policies
• Information Technology Act, 2000 and IT (Amendment) Act, 2008 (India)
• Digital Personal Data Protection Act, 2023 (India)

20. Children’s Privacy Contact

We respond to all parental inquiries within 30 calendar days.