PrayerGateBack to home

Privacy Policy

Effective: June 21, 2026. Last updated: June 26, 2026.

This Privacy Policy explains how Wandering Castle LLC (a Wyoming single-member limited liability company in the United States) handles personal data through the PrayerGate mobile application and the website at getprayergate.com. The English text is the authoritative version; localized summaries in Spanish (es) and Brazilian Portuguese (pt-BR) may be provided, and the English text governs, except where local consumer-protection law requires the local-language version to prevail.

1. Who we are

PrayerGate is operated by Wandering Castle LLC, registered as a limited liability company with the Wyoming Secretary of State, United States, with a mailing address at 30 N Gould St, Ste N, Sheridan, WY 82801, USA. We are the data controller (and, under US state laws, the "business") responsible for personal data processed through PrayerGate. You can reach our privacy contact at support@getprayergate.com.

PrayerGate is offered in the United States and Latin America; it is not directed to the EU/EEA or UK. If that changes we will appoint an Article 27 representative and name them here. PrayerGate is offered in the United States and Latin America; it is not directed to the EU/EEA or UK. If that changes we will appoint a UK Article 27 representative and name them here. If the EU General Data Protection Regulation (GDPR) or UK GDPR nonetheless applies to a given user, Wandering Castle LLC acts as controller and honors the GDPR rights described below as a courtesy. For Canadian (including Quebec) and Singapore users, our Privacy Officer / Data Protection Officer is reachable at the same address.

2. The short version

We built PrayerGate so the most personal things you tell it never leave your phone, and so we collect as little as possible.

  • The free text you may write (the "hardest thing you're carrying" and the name of someone you're praying for) is used only on your device and is never sent to our servers. It is gone when you finish setup or close the app.
  • Prayers are curated content shipped inside the app. We do not send your inputs to any AI service to generate them.
  • We do not sell or share your personal data, we run no advertising, and we use no third-party trackers.
  • You can use the app anonymously, without giving us a name, email, or account.
  • If you choose to, you can give us your email to receive gentle reminders and your daily verse and to help you come back to the app. This is optional, off by default, you can unsubscribe at any time, and we never sell or share it. You can also optionally tell us your age range (a broad bracket, never your birthdate).
  • You can export or delete your data from inside the app at any time.

The sections below are the full, precise version. If the short version and a detailed section conflict, the detailed section governs.

3. What data we process, and why

"On your device" means the data is processed on your phone and is not transmitted to or stored by us. "Our server" means stored in our database, which is hosted in the European Union (Frankfurt region).

  • Religious belief / denomination (e.g. broad-Christian or Catholic mode) — stored on our server as a preference to route the right verses, prayers, and translation. This reveals religious belief and is treated as sensitive data (see Section 4).
  • Mood selections (one of a small fixed set, e.g. grateful, anxious, peaceful) — used to choose a matching prayer. A mood may be recorded with your anonymous prayer record; it is treated as sensitive data.
  • Free text and the name of someone you pray for — on your device only, never transmitted to us, and discarded after onboarding. We never store it.
  • First name / display name (optional) — used to personalize your greeting. Stored as a preference if you provide it.
  • Language, Bible translation, reminder time, goals, and other content preferences — stored on our server to deliver your daily rhythm.
  • Subscription status (trial / active / lapsed) — held by us, Apple/Google, and RevenueCat to unlock paid features and honor your purchase. We never see or store your payment-card details; the app stores collect and process payment.
  • Anonymous user ID — a random identifier, with no email or real-world identity attached, used to tie your preferences and subscription to your install.
  • Email (optional, opt-in) — only if you provide it on the "stay connected" screen. We store it to send the reminder and daily-verse emails you asked for and to help you return to the app. We process it on the basis of your consent and never use it for tracking; you can withdraw consent at any time by unsubscribing, which removes you from our sending list.
  • Age range (optional) — a broad bracket (for example 25 to 34, never your birthdate), stored as a preference so we can understand who PrayerGate serves and where to improve and localize next. Skippable.
  • Usage events (streak progress, "prayer completed", screen views) — first-party, stored on our EU server to power your streak and improve the app. These never contain your free text and are not used for cross-app tracking or advertising.
  • Diagnostics — limited crash and error information to fix bugs.

What we do not collect: precise location, your contacts, browsing history outside the app, advertising identifiers (no IDFA), and payment-card details. The list of apps you choose to place behind the prayer gate is held only on your device (in an on-device app group) and is never sent to us.

4. Sensitive data and your explicit consent

Your religious belief / denomination and your mood are "special categories" of personal data under Article 9 GDPR, "sensitive data" under Brazil's LGPD (Art. 11) and Mexico's federal data law, and "sensitive personal information" under US state privacy laws. The law sets a higher bar for handling them, and so do we.

  • Our legal basis is your explicit, opt-in consent, given through a clear affirmative action in the app for the specific purposes of personalizing your content and prayers (GDPR Art. 9(2)(a) and Art. 6(1)(a); LGPD Art. 11(I); express consent under applicable Latin-American and US state law).
  • Consent is freely given: the most sensitive free text is optional and never leaves your device, and declining it does not lock you out of the app.
  • You can withdraw consent at any time in Settings. Withdrawal stops future sensitive-data processing and deletes the related stored preferences. It does not affect the lawfulness of processing before withdrawal.

5. How your most sensitive inputs are handled on your device

By design, the free text ("the hardest thing you're carrying") and the name of anyone you pray for are handled entirely on your device: they are never written to our database, never sent to our servers, and never sent to any third party or AI service. The prayers you see are curated, on-device content. This is the architecture behind our promise that your most personal words stay with you.

6. Where your data is stored, and who helps us run the service

Server-side data is hosted in the European Union (Frankfurt region) from day one, a deliberate privacy and trust choice. The only third parties that process personal data on our behalf or alongside us are:

  • Supabase — our database, anonymous authentication, and backend, hosted in the EU.
  • RevenueCat — subscription management (purchase events and subscription status tied to an anonymous app ID).
  • Apple and Google — the App Store and Google Play, which process your purchase, subscription, and any push token under their own terms, and act as merchant of record for your subscription.
  • Resend — sends the optional reminder and daily-verse emails, and only if you opted in. It processes your email address and the message content under a data-processing agreement.

We do not use a third-party advertising network, a cross-app tracking SDK, or an AI sub-processor for prayer generation. Where a provider processes data outside the EEA (for example Apple, Google, and RevenueCat in the United States), the transfer relies on appropriate safeguards such as Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, and, for sensitive data, your explicit consent.

7. How long we keep data

  • Preferences and account data: kept until you delete your data, then erased from our active systems within 30 days.
  • On-device free text: not stored by us, so there is nothing to retain.
  • Email (if you provide it): kept while your account is active and you remain subscribed to emails; unsubscribing or deleting your data removes it from our active systems within 30 days.
  • Subscription and billing records: retained as required by applicable tax and accounting law, then deleted.
  • Usage events: retained in a limited, first-party form to run streaks and improve the app, then deleted or anonymized.
  • Backups: residual copies in encrypted backups are purged on the normal backup rotation.

8. Security

We protect your data with anonymous authentication, row-level security so each user can read only their own records, encryption in transit (HTTPS/TLS) and at rest, and strict secrets handling (no service keys in the app). No system is perfectly secure, but if a personal-data breach is likely to put you at risk we will notify you and the relevant authority where the law requires, generally without undue delay and, under the GDPR, within 72 hours of becoming aware.

9. Children

PrayerGate is intended for adults and is not directed to anyone under 18, and we do not knowingly collect their personal data. The app presents an age check and is rated accordingly in the app stores. We do not profile minors or use their data for behavioral advertising (we do no behavioral advertising at all). If you believe someone under 18 has provided us personal data, contact support@getprayergate.com and we will delete it. This reflects the US Children's Online Privacy Protection Act (COPPA) and comparable minors' data rules elsewhere.

10. Your rights

Everyone who uses PrayerGate can, at any time, access the data we hold, correct it, delete it, export it, and withdraw consent to sensitive-data processing. Settings includes Export my data and Delete my data, or you can email support@getprayergate.com. Because the app uses anonymous authentication, please include your in-app anonymous ID so we can locate your records; if we cannot reasonably link a request to stored data, we may be unable to act on it and will tell you so.

European Economic Area and United Kingdom (GDPR / UK GDPR)

You have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), to object to processing based on legitimate interests (Art. 21), and to withdraw consent (Art. 7(3)). We respond within one month, extendable by two months for complex requests with notice to you. You may lodge a complaint with your local data-protection supervisory authority. Our EU and UK representatives, once appointed, will be named here; until then, contact us directly.

United States (California and other states)

Depending on your state, you may have the right to know and access the personal information we collect, to delete it, to correct it, to data portability, to opt out of the "sale" or "sharing" of personal information and of targeted advertising and profiling, and to limit the use of sensitive personal information. We do not sell or share your personal information, we do not use it for targeted advertising or profiling, and we do not run trackers, so there is nothing to opt out of; we honor a limit on sensitive-data use through the consent withdrawal above. We do not discriminate against you for exercising any right. California residents may also contact the California Privacy Protection Agency.

Canada (PIPEDA and Quebec Law 25)

You may access and correct your personal information and ask about our handling of it. Our named Privacy Officer is reachable at support@getprayergate.com. We obtain your consent for sensitive processing and do not use your data for purposes you have not been told about.

Brazil (LGPD)

You have the rights in Art. 18 LGPD: confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and to withdraw consent. The legal basis for processing your religious-conviction and mood data is your specific, highlighted consent under Art. 11(I). You may contact us at support@getprayergate.com, which also serves as our channel under the small-processing-agent rules, and you may petition the Autoridade Nacional de Proteção de Dados (ANPD).

Mexico (ARCO rights)

You may exercise your ARCO rights — Acceso, Rectificación, Cancelación, and Oposición — and limit the use or disclosure of your data, by contacting support@getprayergate.com. We obtain your express consent before processing sensitive data and before any international transfer of it. The competent authority is the federal data-protection authority within the Secretaría Anticorrupción y Buen Gobierno.

Other regions

Wherever you are, you can contact support@getprayergate.com to exercise the privacy rights available to you under your local law, and we will respond in good faith.

11. Markets we do not target

PrayerGate is operated from the United States and offered in English, Spanish, and Brazilian Portuguese. It is not offered in or directed to mainland China and is not localized for, or marketed to, markets we do not serve. Residents of regions we do not target may still contact us to exercise applicable rights.

12. Changes to this policy

If we change this policy we will update the "Last updated" date and, for material changes that affect sensitive-data processing, ask for fresh consent in the app. Continued use after a non-material update means the updated policy applies.

13. Contact

Questions, requests, or complaints about your privacy: support@getprayergate.com. We would always rather hear from you first.