Privacy Policy

1. Our Commitment to Privacy

We believe prayer is sacred. Your prayer requests, responses, and personal data are treated with the highest level of care and confidentiality. We never share, sell, or expose your private prayer content to anyone.

2. What We Collect

• Account information (email address, display name)
• Prayer requests and responses (text and voice)
• Pair relationship data
• Streak and activity data
• Push notification tokens
• Anonymous analytics events (via PostHog)

3. How We Use Your Data

• To facilitate prayer exchanges between you and your partner
• To track streaks and prayer history
• To send notifications about prayer activity
• To improve the app experience through anonymous analytics

4. Data Storage and Security

All data is stored securely on Supabase infrastructure (hosted in the United States). Voice recordings are stored in private storage buckets accessible only to authenticated pair members. We use Row Level Security (RLS) to ensure data isolation between users. All data in transit is encrypted via HTTPS/TLS.

5. What We Never Do

• Never share your prayer content with third parties
• Never use your data for advertising
• Never expose your prayer requests publicly
• Never sell or trade your personal information
• Never access your content except for technical maintenance

6. Your Rights

You have the right to:

• Access your personal data at any time through the app
• Export your data from Settings → Export Your Data
• Delete your account by visiting held.app/delete-account or by emailing support@held.app
• Opt out of analytics tracking in Settings → Notifications
• Contact us with any privacy concerns

7. Children's Privacy

Our app is not intended for children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes through the app or via email at least 30 days before changes take effect.