What the app stores
Everything you enter lives only on your phone, in the app’s private storage: your first name, prayer times, feelings, chosen life areas, subjects on your heart, answers to the app’s questions, streaks, medals and progress, your settings, and whether you have PRAY+. There is no account or sign-up, and we cannot see your data. If you report a prayer, the report is saved on your phone and is not sent anywhere automatically.
PRAY contains no advertising identifier, no analytics and no crash-reporting service.
What leaves your device
No prayer content is sent unless you have consented to AI personalisation and have PRAY+. The app asks for your consent before the first request, and you can withdraw it at any time in Settings → AI Personalization. If you decline, or withdraw, PRAY uses its library of written prayers and no prayer request is sent.
When AI personalisation is on, each prayer request goes from the app through Google Firebase AI Logic to the Gemini Developer API, under Belmia Studio’s Firebase project. There is no API key in the app. The request is built only from choices you have made in the app, never from anything you typed. It contains the day’s Bible verse and its reference, your language, the time of day, your feelings, the life area and subject you chose and how that subject sits with you, the labels of the options you tapped, a subject you told the app God had answered (if recent), themes drawn from your past answers, a rough journey stage based on how long you have used the app, and your preferred prayer length. Taken together this is religious and prayer-related content. Your name is never sent.
With each request, Google also sees your IP address and some device metadata.
To protect the AI service from abuse, the app uses Google’s App Check and Play Integrity, which use device attestation information generated by Google Play services (Play Integrity). This involves contacting Google and may happen when the app starts or before an AI request. It sends none of your prayer content. The integrity check tells Google which app and version is calling, whether it was installed from Google Play and whether the device passes Google’s integrity checks. See https://developer.android.com/google/play/integrity/terms#data-safety and https://firebase.google.com/support/privacy
PRAY+ is bought and managed through Google Play Billing. Google takes the payment, and neither the app nor Belmia Studio sees your card details. The app reads only your subscription status from Google Play and keeps it on your phone. Google Play’s own privacy policy applies to payments: https://policies.google.com/privacy
Links you tap (sources and subscription management) open in your browser and are governed by those sites’ policies.
How Google handles requests
We use Google’s paid Gemini API service. Under its terms Google does not use your requests or the prayers it writes to improve its products, and processes them under its Data Processing Addendum for Products Where Google is a Data Processor. Google may keep requests in a log for a limited period, solely to detect and prevent violations of its Prohibited Use Policy, to maintain safety and security, and to meet legal or regulatory disclosures. It does not state how long, and it may store or cache requests transiently in any country where it has facilities. See the Gemini API Additional Terms at https://ai.google.dev/gemini-api/terms and the Firebase data processing terms at https://firebase.google.com/terms/data-processing-terms
Belmia Studio does not store or log the content of prayer requests or the prayers that come back. Prompt monitoring is switched off, so the only figures we can see are aggregate ones, such as how many requests were made, how many failed and how long they took.
Who is responsible
The controller is Merdeka, a Finnish sole trader (toiminimi), trading as Belmia Studio. Business ID (Y-tunnus): 2856511-8. Contact: [email protected]
Because prayer content can reveal religious beliefs, we treat it as special-category data under the GDPR. Our legal basis is your explicit consent (Article 9(2)(a)). You can withdraw it at any time in Settings → AI Personalization, which stops any further requests to Gemini. Withdrawing does not affect requests already made.
Google may process requests outside the European Economic Area, including in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and Google’s data processing terms also provide for Standard Contractual Clauses.
Your rights
You have the right to access, rectify, erase, port or restrict your data, object, withdraw consent, and complain to a supervisory authority. Your data is on your phone, so you can see it in the app and remove it yourself. We hold none of it, so we cannot look it up or erase it for you. Requests held in Google’s log expire under Google’s terms. You can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi), https://tietosuoja.fi/en
Deleting your data
Uninstalling PRAY, or clearing its storage, permanently deletes everything it stored. Veil mode is drawn by the app itself, so it disappears with it. If backup is turned on for your Google account, Android may include PRAY’s data in your device backup. That backup is managed by Google, not by us.
Children
PRAY is not directed at children under 13.
Changes to this policy
If this policy changes, we will update this page and its date.
Contact
Contact
Belmia Studio
Data controller
Finland
[email protected]