1. Who this policy covers
This policy covers Prayer Stories and its website features. It does not control independent websites, churches, organizations, payment providers, or other members' actions outside the service. For questions about this policy or the people operating Prayer Stories, contact support using the details below.
Prayer Stories is intended for adults 18 and older. Please do not submit information for a child to create an account, or share another person's sensitive information without appropriate permission.
2. Information you provide
Prayer content can reveal religious beliefs, health concerns, family circumstances, or other sensitive information. Share only what is necessary for your chosen audience. Do not include passwords, government identifiers, precise addresses, payment credentials, or details that identify a child or vulnerable person.
- Account information, including email, sign-in provider information, verification status, and account identifiers. Firebase Authentication handles password-based credentials; passwords are not displayed to other members.
- Profile information such as username, display name, optional biography, broad location, and profile photo, together with visibility and appearance choices.
- Content you choose to submit: prayer requests, backstories, updates, testimonies, photos, encouragement, messages, circle information, gathering details, and resource or organization submissions.
- Interactions and preferences, including I Prayed acknowledgments, saved or followed requests, memberships, invitations, RSVPs, support permissions, notification settings, and blocks.
- Optional external financial profile identifiers and publication choices. The application does not collect payment-card or bank credentials to process transactions.
- Support inquiries, reports, appeals, account restrictions, source-review information, and privacy requests needed to operate account and safety procedures.
3. Technical and security information
Operating the website involves request and security information such as IP addresses, device and browser details, request times, errors, and authentication activity. Hosting and infrastructure providers may process technical logs. Application throttling uses hashed identifiers derived from network or email information to reduce abuse; a hash does not make information anonymous in every circumstance.
If you enable browser notifications, we store the browser push subscription endpoint and related delivery information. Notification processing also uses channel preferences, time zones, schedules, delivery status, and related account information.
4. How information is used
The application does not include targeted advertising, tracking pixels, or a feature that sells member information. Any future material change in information practices requires an appropriate policy update and any notice or consent required by applicable law.
- Create and secure accounts, maintain sessions, verify membership, and apply current access permissions.
- Display your content to the audience you select and support prayers, journeys, circles, gatherings, messaging, and other requested features.
- Apply notification choices, deliver optional messages where configured, and manage browser subscriptions and unsubscribe requests.
- Review directory submissions, reports and appeals; prevent abuse; enforce restrictions; and maintain relevant safety and audit records.
- Answer support requests, process authorized privacy requests, troubleshoot failures, and meet applicable legal obligations.
5. Visibility and audiences
- Private requests are owner-only in ordinary member views. Authorized service operations may access information as necessary for security, support, lawful requests, and approved privacy procedures.
- Community-public prayer requests are available to eligible verified, onboarded members. Non-anonymous requests can show a name and photo even when the separate profile is private.
- Anonymous posting hides account identity in the member-facing prayer view. Ownership remains recorded for service operations, and details in the content may still identify you.
- Circle content, invitations, meeting details, support inquiries, and messages follow their own membership and permission rules. They are not automatically made public by a public profile or circle preview.
- Optional financial identifiers remain subject to their separate settings. Only selected links explicitly enabled for an eligible community profile are shown there; they are not added to prayer stories or public web previews.
6. Internet sharing and search
Eligible circle, gathering, resource, organization, and testimony previews require explicit web-sharing permission and current eligibility. Directory entries also require publication review. These internet pages can be viewed without signing in and may be indexed by search engines or accessed by search and answer-engine crawlers under the site's crawler permissions.
Public previews omit restricted meeting details, account identities from anonymous testimonies, and the underlying private data. Sources are checked when public previews and source sitemaps are requested. If you revoke sharing or content becomes ineligible, the service removes the eligible preview on subsequent access, but cannot guarantee that outside copies, screenshots, search results, or caches disappear.
7. Messages, reports, and staff access
Messages have account, conversation, consent, and blocking controls. Do not treat them as end-to-end encrypted communications or as an appropriate place to share highly sensitive credentials. A recipient may copy or report a message.
Authorized staff may review relevant reported material and safety evidence through applicable review procedures. Account support, restrictions, appeals, privacy processing, and service administration also involve authorized access. We do not promise that information is inaccessible to every operator or provider.
8. Service providers and other disclosures
The service uses Google Firebase for authentication, database, and file storage, and Vercel for website hosting. Optional notification delivery uses Resend for email and the browser's push service for Web Push where those channels are configured and enabled. These providers process information needed for their services under their own applicable agreements and policies.
We may disclose information to comply with applicable law or a valid legal request, respond to a security incident, protect people and the service, or carry out an authorized account or privacy operation. Disclosure should be limited to the relevant purpose. An outside website or payment link has its own privacy practices, and visiting it may share technical information with that provider.
10. Retention and deletion
Information is retained for the purposes described here, including ongoing account features, security, moderation, legal obligations, and handling disputes or appeals. The operator must approve and maintain the applicable retention schedule; this policy does not promise an unconfigured automatic deletion period.
Deletion requests enter authorized review and do not immediately erase an account. Processing may remove, anonymize, or restrict records. Limited safety evidence, audit records, legal holds, independent contributions by other people, and provider backups can remain where justified. Deletion does not recall messages or public material already copied by others. Ask support about a particular category of information rather than assuming all records disappear at once.
11. Your choices and privacy requests
Use account and content settings to edit profile information, select visibility, manage notification channels, control supported contact permissions, block members, and change eligible web-sharing choices. Private profile settings do not automatically change existing prayer visibility. Unsubscribe links control the email categories described by those links; account and security notices may be treated differently.
Request an export, correction, deletion, or other privacy help through Account Support, available settings, or the contact details below. We may need to verify that the request concerns your account. Do not email your password or authentication codes.
Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of information, object to or restrict certain processing, withdraw consent where consent applies, or raise a concern with an appropriate regulator. Any applicable rights and legal deadlines govern; this page does not replace them or promise that every right applies in every location.
12. Children and underage accounts
Prayer Stories does not permit members under 18. This policy rule does not represent that the service independently verifies every member's age. If you believe an underage person has created an account or submitted personal information, contact support so it can be reviewed and addressed.
When asking for prayer about a child, avoid names, photos, school details, precise locations, diagnoses, and other identifying information. Seek appropriate permission and use a general description instead.
13. Security and processing locations
The service uses authentication, access controls, protected server operations, and other safeguards. No system can promise absolute security, and members should use strong credentials and avoid unnecessary disclosure. Infrastructure providers may process information in countries other than your own; legal protections and hosting arrangements can differ. No specific data-residency or regulatory certification is promised here.
14. Updates and contact
We may update this policy when features, providers, or practices change. The date on this page identifies the revision. Where required, we will provide additional notice or obtain consent before applying a material change. Contact support with privacy questions, an underage-account concern, or a request concerning your information.
Contact and related policies
Contact Prayer Stories at support@prayerstories.com or use our contact form. For a privacy request, choose Privacy request on the form. Do not send passwords, authentication codes, payment credentials, or unnecessary sensitive information. This inbox is not an emergency service.