PrayOMT
Legal & Privacy
Legal Document

Privacy & Data
Policy

We believe privacy is a right, not a privilege. This document explains what we collect, why we collect it, and how you stay in control.

Effective date: April 10, 2026  ·  Version 2.1
01

Information We Collect

When you use PrayOMT, we collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

Category Examples Basis
Account Data Name, email address, profile photo, password (hashed) Contract
Usage Data App interactions, features used, session duration, crash reports Legitimate Interest
Device Data Device model, OS version, unique device ID, IP address Legitimate Interest
Location Data Approximate location (city-level) derived from IP Legitimate Interest
Payment Data Transaction ID, last 4 digits (full card data handled by Stripe) Contract
Communications Support messages, feedback submissions Legitimate Interest
Audio Recordings WAV audio files recorded during Bible translation sessions using your device microphone. Stored locally on your device and uploaded to our secure servers only when you choose to submit them. Consent
We do not collect precise GPS location, contact lists, or photos without explicit permission. Microphone access is used solely for the Bible translation recording feature — audio is never captured in the background and recording only occurs when you actively initiate it within the app.
02

How We Use Your Data

We use the information we collect for the following purposes:

  • Provide & maintain the app
  • Personalize your experience
  • Process transactions
  • Send service notifications
  • Analyze and improve features
  • Detect fraud & abuse
  • Comply with legal obligations
  • Respond to support requests
  • Store & manage Bible translation recordings

We will never use your data to build advertising profiles or sell it to data brokers.

Audio recordings you create are used exclusively to support Bible translation work within PrayOMT. They are never used for advertising, profiling, or shared with third parties outside of the secure storage infrastructure required to deliver the service.
03

Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

Service Providers. Trusted vendors who process data on our behalf (e.g., cloud hosting, analytics, payment processing) under strict data processing agreements.

Legal Requirements. When required by law, court order, or government authority, or to protect our rights and the safety of our users.

Business Transfers. In the event of a merger or acquisition, your data may transfer to the new entity, which will be bound by this policy.

Key partners: Amazon Web Services (hosting), Stripe (payments), Mixpanel (analytics). Each is contractually bound to process your data only as directed.
04

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods:

Data TypeRetention Period
Account dataUntil account deletion + 30 days
Usage logs13 months rolling
Support communications3 years
Payment records7 years (tax compliance)
Crash reports90 days
Audio recordingsUntil deleted by user or account deletion + 30 days

After these periods, data is securely deleted or anonymized.

05

Your Rights

Depending on your jurisdiction, you have the following rights over your personal data:

RightWhat it means
AccessRequest a copy of the data we hold about you
RectificationCorrect inaccurate or incomplete data
ErasureRequest deletion of your personal data
PortabilityReceive your data in a machine-readable format
RestrictionLimit how we process your data
ObjectionObject to processing based on legitimate interest
Opt-out (CCPA)California residents may opt out of data sales (we do not sell data)

To exercise any right, contact us at info@prayOMT.com. We will respond within 30 days.

06

Security

We implement industry-standard security measures to protect your information, including:

  • TLS 1.3 encryption in transit
  • AES-256 encryption at rest
  • Regular penetration testing
  • SOC 2 Type II compliant infrastructure
  • Role-based access controls
  • Two-factor authentication for staff
No method of transmission over the internet is 100% secure. If you discover a vulnerability, please report it to security@[appname].com.
07

Children's Privacy

Our app is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected data from a child without parental consent, we will take steps to delete that information promptly. Contact us at privacy@[appname].com if you believe we have done so.

08

Third-Party Links

Our app may contain links to third-party websites or services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you access through our app.

We are not responsible for the privacy practices or content of third-party sites.

09

Policy Changes

We may update this Privacy Policy periodically. When we make material changes, we will:

  • Notify you via in-app notification
  • Send an email to your registered address
  • Update the "Effective Date" at the top

Your continued use of the app after the effective date constitutes acceptance of the updated policy. If you disagree with changes, you may delete your account at any time.

10

Contact Us

For privacy-related inquiries, requests, or complaints:

PrayOMT Privacy Team

Email: info@prayomt.com

Response time: within 30 days of receipt

If you are in the EU/UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.