Prayer Sealed is operated by Paul Clark, an individual, doing business as PrayerWarriors (“we,” “us,” “our”). This Privacy Policy explains what information the app handles, what we can and cannot see, and what happens to your data.
Important notice. Prayer Sealed uses post-quantum end-to-end encryption. Your prayer content is encrypted on your device and can only be read by you and the people you choose to share it with — we cannot read it. However, anyone you share a prayer with can see its content, and information such as when you post and who you connect with (metadata) is not hidden from our servers. Use discretion when sharing highly sensitive personal details, especially in prayers shared with larger groups.
We do not collect an email address, a phone number, or a password.
Prayer Sealed uses anonymous authentication. There is no sign-up form asking who you are.
If you previously entered an email address, phone number, or location into your profile, that information is stored inside an encrypted envelope we cannot read, and is shared only with partners you chose. The app no longer collects those fields.
Prayer requests, journal entries, encouragements, comments, updates, and praise reports are stored on our servers in end-to-end encrypted form. We cannot read this content — it is encrypted on your device before it reaches us and can only be decrypted by you and your chosen recipients.
Because encrypted content still has to be routed and delivered, our servers necessarily see:
Each device you use publishes a verification record — public keys and an enrollment timestamp — so the people you share with can confirm that content genuinely came from you. Device labels are generic (“First device,” “Recovered device”) and never contain text you typed. Revoked devices are recorded on a permanent denylist so a removed device can never be reinstated.
No analytics. No crash reporting. No advertising identifiers. No third-party trackers or SDKs beyond the Google Firebase services described in Section 3.
We use what we hold only to:
We do not profile you, target advertising, or analyze your behavior.
Prayer sharing. Prayer requests are visible only to the prayer partners or groups you explicitly share them with. There is no public feed; nothing you write is visible to people you have not chosen.
We do not sell your personal information. Ever, to anyone, for any purpose.
Service providers. Prayer Sealed runs on Google Firebase — Cloud Firestore for storage, Firebase Authentication for anonymous accounts, Cloud Functions for server logic, Firebase Cloud Messaging for push notifications, and Firebase App Check (backed by Play Integrity on Android and App Attest on iOS) to verify that requests come from a genuine copy of the app. Google acts as our processor and its infrastructure may store data in data centers outside your country. Google cannot read your encrypted prayer content either.
We may also share information:
We protect your information with end-to-end encryption and modern security measures:
No system is perfectly secure, and metadata such as timing and participants is visible to our servers. Use discretion when sharing sensitive details.
We retain your information for as long as your account exists.
Deleting your account permanently removes your private content from our servers — prayers only you could see, your journal, your profile, and your account record. Prayers and praise reports you had already shared with a partner or a group are not removed: they remain readable to the people you shared them with, shown as coming from “[deleted account],” and we keep the public verification record for your devices so that content stays readable to them — because end-to-end encrypted content already delivered to someone else cannot be recalled. Encouragements and responses you left on other people's prayers also remain with that content.
Deletion is immediate. There is no grace period and no way to recover your account afterward.
If you are the only leader of a prayer group, you must close that group before you can delete your account. Closing a group removes it for everyone in it and cannot be undone; leadership cannot be transferred to another member.
Records of revoked devices are retained permanently, because removing them would allow a revoked device to be reinstated.
If you lose your recovery passphrase. Your account cannot be recovered, and we cannot delete it for you. Because authentication is anonymous and any contact details are encrypted, we have no way to determine which account belongs to a person who contacts us. Keep your 12-word passphrase somewhere safe.
Because your content is end-to-end encrypted, we cannot proactively review it.
When you report a prayer, encouragement, or comment inside a group, the report is sent to that group's leader — not to us — and it contains only a reference to the reported item, the reason you selected, and a timestamp. It does not include a copy of the content, because we cannot read it and neither can our servers. Reports are retained within the group.
Prayer Sealed is for users age 16 and older. Because of child privacy regulations such as COPPA, we are unable to collect the information needed to create accounts for users under 16. If you are under 16, please delete your account, or contact us and we will assist you.
If you use Prayer Sealed from outside the United States, your information may be transferred to and processed in the United States and other countries where Google Firebase operates. By using the service, you consent to this transfer.
Depending on where you live, you may have rights regarding your personal information, including access, correction, deletion, objection to processing, portability, and withdrawal of consent.
Most of these you can exercise directly in the app: your content is yours, editable and deletable by you, and account deletion removes what we hold. For anything else, contact us at the address below.
Note the practical limit created by the design: we cannot access, correct, or export your encrypted content, because we cannot read it.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy and updating the “Last updated” date. Continued use of the service after changes constitutes acceptance.
This Privacy Policy is governed by the laws of the State of Florida, United States, without regard to conflict of law provisions.
Questions or concerns about this Privacy Policy, or about how your data is handled:
Paul Clark
d/b/a PrayerWarriors
paul@systemslibrarian.dev
We recognize the sacred nature of prayer and the trust you place in us when sharing your heart. We are committed to honoring that trust through careful stewardship of your information.
“Guard the good deposit that was entrusted to you.” — 2 Timothy 1:14