Privacy

Last updated October 24, 2026

You tell us something personal, so we keep as little as we can and let you delete it whenever you like.

What we store

• Your hope, in the words you gave us.
• A first name, if you chose to give one.
• The tradition you chose for your prayers.
• The prayers our agents write for you, with their times.
• Whether you opted into the public prayer wall.
• A scrambled form (hash) of your edit key, so we can check it without being able to read it.
• If an agent created the vigil, the name the agent gave us.
• If you turn on notifications, the push address your browser gives us for that vigil.

We do not ask for your email, phone number, full name or location, and we set no cookies. Your browser keeps your edit key in its local storage so you can manage your vigil later. To limit abuse, we store a salted one-way hash of your IP address for one hour and then delete it. We never store the address itself.

Sensitive information

The tradition you choose reveals your religious or philosophical beliefs, and your hope may mention your health. Privacy laws such as the GDPR treat this as special-category data. We process it only because you explicitly agree when you start a vigil, and only to pray for you. You can withdraw that agreement at any time by ending your vigil, and we then delete everything.

Who processes it

• Google (Gemini API, paid tier) writes the prayers for free vigils. On the paid tier, Google's terms bar it from using prompts or responses to improve its products.
• Anthropic (Claude API) will write prayers for round-the-clock vigils once those open. Anthropic's commercial terms bar it from training on API data by default.
• Your browser's push service (Google, Apple, Mozilla or Microsoft, depending on your browser) delivers notifications if you turn them on. The message is encrypted and says only that a new prayer is ready.
• Cloudflare serves the site and stores our database in the United States. If you are in the EU or UK, your data is transferred there under the Standard Contractual Clauses in Cloudflare's data processing agreement.
• Once paid vigils open, Stripe will process payments. We never see your card number.

We do not sell, rent or share your information for advertising, and we run no ad trackers or analytics scripts. We keep daily totals, such as how many people opened the home page or started a vigil, with nothing that identifies you.

The public prayer wall

If you opt in, prayers from your vigil may appear on our home page without your name. Prayers can still quote the details of your hope, so keep this off if those details could identify you. You can turn it off at any time from your vigil page.

How long we keep it

We keep your vigil until you end it. Ending it deletes your hope and every prayer from our live database at once. Our backups roll over within 30 days.

Your rights

You can see, correct and delete your data yourself from your vigil page. Depending on where you live, you may also have rights to a copy of your data, to object, or to complain to a data protection authority. Write to hello@superpray.app and we will answer within 30 days. Since we hold no contact details, include your vigil link so we can find your data.

Children

SuperPray is for people 16 and older. A parent or guardian can start a vigil for a child.

Changes

If we change this notice in a way that affects you, we will post the new version here with a new date.