Privacy Policy
Privacy is sacred. We collect the minimum we need to make PrayerMap work, and we don't sell, rent, or trade anything. Here is exactly what we do, in plain language.
The short version
- We collect only what you give us, plus minimal technical logs needed to run a website.
- We never sell your data, never run advertising, and never share with third-party marketers.
- Prayer text is public on the map by default — that's the point.
- Locations pin to a city, never to a street or device GPS.
- You can delete your account and personal data anytime from Settings.
1. What we collect
Information you give us
- Account info when you sign up: first and last name, username, email address, password (stored as a one-way hash), birthday (to verify age and parental consent), and a notification preference.
- Prayer contentyou submit: the prayer text, optional label, type (Personal, Intercession, Salvation), updates you add later, and the city / state / country you choose for the pin. You can submit anonymously — your name won't appear, but the text and city still will.
- Engagement signals: which prayers you've saved, tracked, or pinned in your journal; folders you create.
- Parent contact infoif you sign up as a minor: we collect a parent or guardian's email for the sole purpose of obtaining and recording verifiable consent.
Information collected automatically
- Technical logs: IP address, browser type, pages visited, and timestamps, kept by our hosting providers for security and abuse prevention. We do not build behavioral profiles from these logs.
- Session cookies to keep you signed in. No advertising cookies. No third-party analytics that build profiles across other sites.
What we never collect
- Device GPS / precise location.
- Contacts, microphone, or camera access.
- Payment information (giving will be processed by a vetted third party — and that page will have its own disclosures).
- Information about other people you have not invited to the site.
2. How we use what we collect
- To operate PrayerMap: display your prayers on the map, send sign-in links, deliver notifications you opted into.
- To geocode the city you choose into approximate lat/long for the map pin, using Mapbox's geocoding API.
- To prevent abuse (rate-limiting, spam detection, security monitoring).
- To respond when you contact us.
- For aggregate, anonymized counts shown on the landing page (e.g. “X prayers lifted, Y countries”).
- To comply with the law when we have to.
We never use your prayer content to train AI models or sell to data brokers.
3. Who we share with
We share data with three categories of partners, all under contract to handle it only for our benefit:
- Supabase — our database and authentication provider. They host your account record and prayer content.
- Vercel — our application host. They serve every page you load.
- Mapbox — geocodes the city you choose. They receive only the city/state/country string, never your account info or prayer text.
- Resend — sends transactional email (sign-in links, parental-consent emails, notification digests). They receive only the email address and message body needed for that delivery.
We will share information with law enforcement only when we receive valid legal process and only the specific data covered by that process. We will tell you about it unless we are legally prohibited.
4. Public vs. private fields
Public:Prayer text, label, type, update history, answered status, pinned city, and (if you didn't submit anonymously) the first name you provided. These appear on the map, in feeds, and on individual prayer pages.
Private: Email, password, birthday, last name, username, exact account ID, notification preferences, folder structure, tracking relationships, parental consent records.
Please do not include private information you wish to keep private inside a prayer's text — that's the public field.
5. Children
PrayerMap is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we learn we've collected such information, we delete it.
For users between 13 and 17, we collect a parent or guardian's email and require verifiable consent before the account becomes fully active. Parents can request review or deletion of the minor's data at any time by emailing hello@christianprayermap.com.
6. Your rights
Depending on where you live, you may have the right to:
- See what personal data we have about you.
- Correct it if it's wrong.
- Delete your account and personal data.
- Export your data (the dashboard offers a PDF export of your prayers).
- Object to certain processing.
- Withdraw consent.
Most of these you can do yourself from Settings. For anything else, email hello@christianprayermap.com with [PRIVACY]in the subject line and we'll respond within 30 days.
If you're in California, the EU, or the UK, you have additional rights under CCPA, GDPR, and UK GDPR. We honor those rights for everyone, regardless of where you live.
7. Retention
We keep your account and prayer content for as long as your account is active. When you delete your account:
- We remove your profile, sessions, folders, tracking, and notification preferences within 30 days.
- By default, your submitted prayers stay on the map under “Anonymous” so other people who've been praying with you still have access. You can request full deletion via email.
- Backups roll off within 90 days.
- Some technical logs are retained up to 12 months for security and legal compliance.
8. Security
We use HTTPS everywhere, hash passwords with bcrypt, send a fresh sign-in link each time you log in, and run row-level security on the database so users can only access their own private data. No system is perfectly secure — please don't share your sign-in link or password.
If we discover a breach affecting your data, we'll notify affected accounts within 72 hours and post a public notice on the site.
9. International users
PrayerMap is hosted in the United States. If you use the site from outside the U.S., your data will be transferred to and processed in the U.S. By using PrayerMap, you consent to this transfer.
10. Changes to this policy
We may update this policy when our practices change. We'll update the effective date at the top, and for significant changes we'll email registered members at least 14 days before the change takes effect.
11. Contact
Privacy questions? Email hello@christianprayermap.com with [PRIVACY] in the subject line.