Pray Shield Privacy Policy
Last updated: October 11, 2026
This notice covers the Pray Shield app and the website at prayshield.app. Pray Shield is designed to keep prayer content private and to collect only what is needed for the feature or service you choose.
Controller and contact
The controller is Damian Witkowski, Rüttenscheider Str. 323, 45131 Essen, Germany. Email: d.witko@icloud.com.
Information processed in the app
- Prayer history, mood check-ins, relationship check-ins, reminders, goals, and favorites are stored locally on your device.
- Screen Time and Family Controls permissions are used only to let you choose apps to pause until you pray. Pray Shield does not receive your full device activity history.
- Subscription status and purchase events are processed through Apple and RevenueCat to unlock paid features and restore purchases. RevenueCat uses an automatically generated anonymous app user identifier. Purchase history is used for app functionality and analytics without linking it to your identity.
- Anonymous usage statistics: to understand which features are used and where the app needs to work more reliably, the app sends a small number of content-free usage events (for example “prayer hour completed” or “Bible opened”) to Mixpanel, our analytics provider, on servers in the EU. These events are tied to a persistent random identifier that the app creates on your device; it is not your name, email, Apple Account, advertising identifier (IDFA) or any account ID. IP-based geolocation and Mixpanel’s automatic events are switched off, and the data is not used for advertising or tracking across other companies’ apps or websites. Statistics are on by default. You can turn them off at any time in the app under Me › Settings › Data & Privacy › “Anonymous usage statistics”; after that, the app sends no further analytics events. The legal basis is our legitimate interest in a reliable, well-made app under Article 6(1)(f) GDPR.
- Private prayer content stays on your device. Prayer text, private reflections, prayer requests, mood and relationship values, selected app names, Screen Time tokens, contact details, and precise location are not sent to analytics. Bible passages read, Bible notes, and religious content are not sent; generic navigation may be recorded only in coarsened product interaction categories.
Website delivery and security
When you visit the website, hosting and content-delivery providers process technical request data needed to deliver and secure the site. This can include the IP address, requested URL, date and time, browser and device information, and security signals. This processing is necessary to provide a secure website and is based on our legitimate interest in reliable and secure delivery under Article 6(1)(f) GDPR.
Optional website analytics
With your explicit permission, prayshield.app uses Google Analytics 4, provided in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The website does not load the Google Analytics script before permission is given.
Analytics can process page title and URL, site language, approximate location derived by Google, browser and device information, and interactions such as opening an App Store link. Prayer text, personal notes, prayer requests, selected apps, Screen Time information, and precise location are not sent from the website to Google Analytics. Google Signals, advertising storage, ad personalization, and ad-user-data signals are disabled.
The legal basis is consent under Article 6(1)(a) GDPR and the applicable rules for storage or access on a device. You can refuse without losing access to the website. You can change your choice at any time through the small “Analytics settings” control. Withdrawal does not affect processing that occurred before withdrawal.
Your choice, the policy revision, and the date of the choice are stored locally in your browser for up to 180 days. This record is strictly necessary to remember your choice. If Global Privacy Control or the browser Do Not Track signal is enabled, optional analytics is kept off. Google may process data outside the European Economic Area subject to its applicable transfer safeguards. See Google’s privacy policy.
How information is used
- To provide Pray Shield, guided prayers, Bible references, reminders, and purchase access.
- To restore subscriptions and prevent duplicate purchase issues.
- To improve app reliability and website usefulness without using prayer content or selected-app data for analytics.
Service providers
Depending on the feature used, service providers can include Apple for StoreKit, Screen Time and App Store services; RevenueCat for subscription status; Mixpanel for limited app product analytics; Google for consent-based website analytics; and the website hosting and content-delivery providers. Each provider receives only the data needed for its role and is subject to its own legal and privacy obligations.
Retention and deletion
On-device app data remains until you delete it in the app or remove the app, subject to iOS behavior. Purchase records are retained by Apple and RevenueCat as required to provide and document purchases. Website analytics data is retained according to the configured Google Analytics retention controls and is reviewed with data minimization in mind. Consent records in your browser expire after 180 days or are replaced when you change your choice.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and you may withdraw consent at any time. You may also complain to a competent supervisory authority. In North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. To exercise a right, email d.witko@icloud.com.
Children
The app and website are not directed to children under 13. We do not knowingly request personal information from children through the website.
Changes
We may update this notice when the product, providers, or legal requirements change. The current version and date are shown on this page. A material analytics change also increases the consent revision so visitors are asked again.