Pray Shield Privacy Policy
Last updated: August 15, 2026
This notice covers the Pray Shield app and the website at prayshield.app. Pray Shield is designed to keep prayer content private and to collect only what is needed for the feature or service you choose.
Controller and contact
The controller is Damian Witkowski, Rüttenscheider Str. 323, 45131 Essen, Germany. Email: d.witko@icloud.com.
Information processed in the app
- Prayer history, mood check-ins, relationship check-ins, reminders, goals, and favorites are stored locally on your device.
- Screen Time and Family Controls permissions are used only to let you choose apps to pause until you pray. Pray Shield does not receive your full device activity history.
- Subscription status and purchase events are processed through Apple and RevenueCat to unlock paid features and restore purchases.
- Limited product analytics may be processed to understand reliability and feature usage. Prayer text, private reflections, prayer requests, selected app names, Screen Time tokens, contact details, and precise location are not sent to analytics.
Website delivery and security
When you visit the website, hosting and content-delivery providers process technical request data needed to deliver and secure the site. This can include the IP address, requested URL, date and time, browser and device information, and security signals. This processing is necessary to provide a secure website and is based on our legitimate interest in reliable and secure delivery under Article 6(1)(f) GDPR.
Optional website analytics
With your explicit permission, prayshield.app uses Google Analytics 4, provided in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The website does not load the Google Analytics script before permission is given.
Analytics can process page title and URL, site language, approximate location derived by Google, browser and device information, and interactions such as opening an App Store link. Prayer text, personal notes, prayer requests, selected apps, Screen Time information, and precise location are not sent from the website to Google Analytics. Google Signals, advertising storage, ad personalization, and ad-user-data signals are disabled.
The legal basis is consent under Article 6(1)(a) GDPR and the applicable rules for storage or access on a device. You can refuse without losing access to the website. You can change your choice at any time through the small “Analytics settings” control. Withdrawal does not affect processing that occurred before withdrawal.
Your choice, the policy revision, and the date of the choice are stored locally in your browser for up to 180 days. This record is strictly necessary to remember your choice. If Global Privacy Control or the browser Do Not Track signal is enabled, optional analytics is kept off. Google may process data outside the European Economic Area subject to its applicable transfer safeguards. See Google’s privacy policy.
How information is used
- To provide Pray Shield, guided prayers, Bible references, streaks, reminders, and purchase access.
- To restore subscriptions and prevent duplicate purchase issues.
- To improve app reliability and website usefulness without using prayer content or selected-app data for analytics.
Service providers
Depending on the feature used, service providers can include Apple for StoreKit, Screen Time and App Store services; RevenueCat for subscription status; Mixpanel for limited app product analytics; Google for consent-based website analytics; and the website hosting and content-delivery providers. Each provider receives only the data needed for its role and is subject to its own legal and privacy obligations.
Retention and deletion
On-device app data remains until you delete it in the app or remove the app, subject to iOS behavior. Purchase records are retained by Apple and RevenueCat as required to provide and document purchases. Website analytics data is retained according to the configured Google Analytics retention controls and is reviewed with data minimization in mind. Consent records in your browser expire after 180 days or are replaced when you change your choice.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and you may withdraw consent at any time. You may also complain to a competent supervisory authority. In North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. To exercise a right, email d.witko@icloud.com.
Children
The app and website are not directed to children under 13. We do not knowingly request personal information from children through the website.
Changes
We may update this notice when the product, providers, or legal requirements change. The current version and date are shown on this page. A material analytics change also increases the consent revision so visitors are asked again.