Your privacy matters to us. Here's how we protect your data.
Introduction
Prava ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.
Information We Collect
Account Information
- Name and email address
- Password (securely encrypted with bcrypt)
- Profile photo (optional)
- Google account information if you choose to sign in with Google
Profile & Personalization
- Age range and gender (optional)
- Faith journey stage and serving experience
- Church attendance and affiliation
- Personal goals, life contexts, connection styles, and serving barriers
- Weekly activities and living environment (for personalized recommendations)
Activity Data
- Commitment completions (prayers, acts of service, scripture engagement)
- Journal entries and reflections
- Fasting practice check-ins (if applicable)
- Group memberships and event attendance
- App open events and usage patterns
Location Data
- Approximate location (latitude/longitude) if you grant permission, used only for nearby church discovery
- Location is never collected without your explicit consent
Device & Technical Information
- Device type and operating system
- Timezone for properly timed notifications
- Push notification tokens (if you enable notifications)
- IP address (used only for security rate limiting, not stored long-term)
How We Use Your Information
- To provide and personalize your Prava experience
- To suggest relevant daily commitments based on your preferences
- To generate personalized prayers and content using AI
- To send you reminders and encouragement (if you opt in)
- To connect you with groups and community features
- To improve our app through aggregated, anonymous analytics
- To communicate important updates about the service
- To protect your account through rate limiting and security measures
AI-Generated Content
Prava uses AI to generate personalized prayers and enhance commitment descriptions. When generating content, we send relevant context (such as your faith journey, goals, and preferences) to our AI provider. This data is used only to generate your content and is not used to train AI models.
Privacy Protections
Your public display name is automatically formatted as "FirstName L." to protect your full identity
You control whether to show your full name or display name when RSVPing to events
You can choose whether to share your church affiliation publicly
We focus on encouragement, not performance. Your data is used to provide a supportive experience, never to shame or pressure you
We do not use session recording or autocapture. Analytics are limited to specific events needed to improve the app
Data Security
We implement appropriate security measures to protect your personal information:
- Passwords are encrypted using industry-standard hashing (bcrypt)
- All data transmission is encrypted using HTTPS/TLS
- Account lockout protection after repeated failed login attempts
- Rate limiting on authentication and sensitive endpoints
- Time-limited, single-use tokens for email verification and password resets
- Access to personal data is restricted to authorized personnel only
Third-Party Services
We use trusted third-party services to operate Prava:
For optional sign-in authentication and church location search
For personalized prayers and content (see AI-Generated Content section above)
For privacy-focused product analytics (no session recording or autocapture)
For hosting, database storage, email delivery, file storage, and security
Each of these services maintains their own privacy policies. We select providers that meet high standards for data protection and security.
Push Notifications
Push notifications are entirely opt-in. If you enable them, we may send:
- Daily commitment reminders
- Event reminders for groups you belong to
- Fasting check-in reminders (when you have an active fast)
You can disable notifications at any time through your device settings or within the app.
If you turn on Sabbath mode, the apps you choose stay on your phone with Apple's Screen Time; Prava never sees which apps they are, only that the mode is on and how many you chose.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You can delete your account and all associated data at any time through your profile settings in the app. Upon deletion, your data is permanently removed from our systems.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Delete your account and data through profile settings
- Opt out of push notifications and reminders
- Revoke location permissions at any time
- Control your privacy settings (display name, church affiliation)
Children's Privacy
Prava is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app and updating the "Last updated" date above.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please reach out:
support@pravahq.com