Privacy policy
Your prayers are yours.
Covered is built so you can ask for prayer without anyone knowing it was you. This policy explains what we collect, why, and what we never do. It applies to the Covered iPhone app and to www.coveredprayer.com. Covered is a personal, non-commercial project run by the Covered team (“we”), based in Western Australia, Australia.
The short version
- You don’t need an account to post a request or to pray.
- Requests never show a name, a photo or an exact location. Your exact location never leaves your phone.
- Nobody sees who prayed. The only count anyone sees is how many people are praying for a request right now.
- Your prayer list is private to you.
- Requests are deleted a year after they’re posted. Accounts are deleted a year after their last visit.
- No ads, no analytics and no tracking. We don’t sell your data.
What we collect
Prayer requests. The text you write, the category you choose, the area it’s pinned to if any (its name, country and public map point), and when it was posted. Once someone reads it in another language, we also keep the language it was written in. Requests are public inside the app, without your name, so please don’t include details that identify you or other people. If you close a request from your account, we also keep the update you write.
Approximate location. If you allow it, the app reads your location only while it’s open. When you post, your phone turns your location into the name of a place with more than 20,000 people, such as a town, county, state or country, and only that name and the place’s public map point are sent. Your exact position never leaves the phone. You can pick a wider area, pick somewhere else, or post with no place at all.
Prayer activity. When you stay on a request for a few seconds, its total goes up by one. That total is used to sort the feed and is shown to nobody. We keep no record of who prayed for which request, or for how long.
While you pray. The app keeps a live connection to our server that names the request you’re on, so others can see how many people are praying for it right now. If the app has location permission, it also sends the country you’re in, so the globe can draw a faint line from that country to the request. All of this is held only while you’re praying, is never written to disk, and is dropped when you stop. Without location permission, the country isn’t sent.
IP address. When you post a request, our server keeps your IP address for up to two days to stop anyone posting too fast, then deletes it. It is not used for anything else.
Account (optional). An account lets you come back to your own requests and keep a prayer list. It has no name or picture, and nothing about it appears on the globe. We keep only what it needs to sign in:
- a passkey: a credential ID and a public key
- email: your email address and a scrambled (hashed) copy of your password
- Sign in with Apple or Google: the account ID that Apple or Google gives the app, and a public key from your phone. We don’t ask Apple or Google for your name or email address.
We also keep a sign-in token, the date the account was made, the date you last opened the app while signed in, the requests on your prayer list.
Weekly reminder (optional). If you turn it on, we keep a push token so Apple can deliver it, and the day and hour you chose, converted to UTC. That shows your time zone and nothing more precise.
Reports. If you report a request, we keep the request, the reason you write and the time. Nothing about you is sent with it.
Beta sign-up (optional). If you ask to join the beta on the website, we keep the email address you give us and, if you add one, the name of your church or group. FormSubmit, a form service, passes them on to us by email. We use them only to send your TestFlight invite and news about the beta, and we delete them when you ask, or once the beta is over.
Website. The website uses no cookies, no analytics and no third-party scripts, and its fonts are served from our own site. Cloudflare hosts it.
What we never collect
Your name, age, photo, contacts, exact location, or a record of who prayed for what. The app contains no advertising, analytics or crash-reporting code.
How we use it
- To show requests on the globe and in the feed, and to sort the feed.
- To translate requests so people can pray across languages.
- To keep Covered safe: reviewing reported requests and removing ones that break our terms.
- To run your optional account, prayer list and weekly reminder.
Translation
When a request is in another language, your phone translates it itself, using Apple’s on-device translation. Nothing is sent to a translation service. If your phone can’t translate a request, you see it in the words it was written in. You can turn translation off in Settings.
Who we share it with
We use a small number of service providers to run Covered. Each gets only what it needs:
- Cloudflare hosts our server, our database and the website.
- Apple delivers the weekly reminder and runs Sign in with Apple, passkeys, TestFlight and the App Store.
- Google runs Sign in with Google, if you use it.
- FormSubmit passes beta sign-ups from the website on to us by email.
Vigils, the events in the world shown on the globe, are found in public sources (GDACS, Wikipedia and a short list of news sites) and reworded with Anthropic’s Claude. No user data is sent to any of them. We don’t sell personal information, and we don’t share it with advertisers.
How long we keep it
Requests are deleted a year after they’re posted, and nothing resets that clock. Accounts are deleted a year after their last visit, along with their prayer list, reminder and any requests they own. IP addresses are deleted within two days. Live prayer data is never stored. A report is kept until we’ve reviewed it, even if the request it’s about has already been deleted, and then it’s deleted.
Your choices and rights
- Post and pray without an account.
- Say no to location. Your requests then have no place unless you pick one, and the app doesn’t send your country while you pray.
- Turn off translation or the weekly reminder in Settings.
- Close or delete a request you saved to your account. A request posted without an account belongs to no one, so it can’t be changed or deleted afterwards. Only we can remove it.
- Delete your account from the Account page. This deletes your prayer list, your reminder and every request you saved to it.
Depending on where you live, you may also have rights to access, correct or delete your information. Contact us at support@coveredprayer.com.
Children
Covered is for people aged 13 and over. The app doesn’t ask your age or your name. If you believe a child under 13 has posted a request, contact us and we’ll remove it.
Changes
If we change this policy, we’ll update the date above.
Contact
The Covered team, Western Australia, Australia. Email support@coveredprayer.com.