Our privacy approach: prayer locations are deliberately reduced, exact location is not displayed to others, and we do not sell personal information or use prayer content for targeted advertising.
1. Scope and controller
Sawadee Thai LLC develops, powers, and operates Letters to God: Prayers and is responsible for the processing described here. This policy applies to the iOS app, Firebase backend, moderation systems, support interactions, and related services. Apple, Firebase/Google, MapKit, and other providers also operate under their own policies.
2. Account and profile information
Sign in with Apple may provide a unique account identifier, name, email address or private relay address, authentication metadata, and account-creation information. We never receive your Apple password. We store your display name, profile image, membership date, account status, and engagement totals. Public profile information may be visible to signed-in community members.
3. Location information
With When In Use permission, device location is processed to privately position you on the globe and derive a region. Before prayer or nearby-notification coordinates are uploaded, they are deliberately rounded to an approximate area. We store coarse coordinates and may store derived city, state or province, country, and general region. Exact device coordinates are not stored as profile data or displayed to other users. You may deny or change permission in iOS Settings.
4. Content and community activity
We process prayers, comments, blessings, timestamps, approximate regions, profile associations, expiration information, engagement totals, notification settings and device tokens, short-lived notifications, reports and their status, moderation actions, feature requests, and report evidence snapshots. Free-form text may contain sensitive information you voluntarily disclose. Do not submit information you do not want processed or made visible as described here.
5. Photos and purchases
When you select a profile photo, the app uses the selected image, crops it to a square, compresses it, and stores one current profile image in Firebase Storage. Optional tips are processed by Apple through StoreKit. The app processes the result needed to complete the purchase, but Sawadee Thai LLC does not receive or store full payment-card details.
6. How we use information
We use information to authenticate accounts; operate prayers, profiles, comments, blessings, maps, notifications, reports, feature requests, tips, and deletion; deliver selected alerts; calculate totals; protect sessions; reject links and reduce abuse; investigate reports; issue warnings or strikes; disable accounts; maintain security; troubleshoot; comply with law; and improve reliability and user experience.
7. Public visibility
Prayer and comment text, display name, profile image, general region, engagement totals, and a prayer’s approximate map position may be visible to other signed-in users. Your registered email, precise temporary device position, private account record, deletion request, feature requests, and moderation status are not intended for public display. Reports and feature requests are limited to the submitter and authorized reviewers as operationally necessary.
8. Providers and disclosure
We use Apple for authentication, StoreKit, device services, MapKit, and push delivery; Google Firebase for Authentication, Firestore, Storage, Cloud Functions, Cloud Messaging, and infrastructure; and vendors reasonably necessary to operate or secure the service. We may disclose information at your direction, to investigate abuse, protect a person, enforce rules, complete a safeguarded business reorganization, or respond to valid legal process. We do not sell personal information, share it for cross-context behavioral advertising, display third-party targeted ads, or use prayer content for advertising profiles.
9. Retention
Normal prayers and comments leave the active service after approximately 24 hours and are scheduled for deletion with related blessings within 72 additional hours. In-app notifications expire within 24 hours or sooner when related content expires. Device tokens are retained while registered and removed on sign-out, invalidation, or deletion. Feature requests may remain during evaluation and product planning. Protected report evidence, moderation records, strikes, security records, fraud-prevention records, legal records, and backups may be retained longer only as reasonably necessary.
10. Account deletion
When deletion is confirmed, the account is disabled and sessions are revoked. Associated prayers, comments, blessings, notifications, preferences, device tokens, reports, feature requests, profiles, profile image, status records, and Firebase Authentication record are scheduled for permanent deletion within 30 days. Limited information may remain longer only where required for law, safety, unresolved reports, fraud prevention, disputes, or backup lifecycle.
11. Security
We use authentication, owner-based database and storage rules, protected backend functions, restricted moderation writes, file validation, access separation, app attestation, and session revocation. No system is perfectly secure. Protect your device and Apple account and report suspected unauthorized access.
12. Your choices and rights
You may edit your name and profile photo; manage iOS location, photo, and notification permissions; choose notification categories and range; add or remove blessings; submit reports; sign out; and request deletion. Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object, withdraw consent, obtain portability, appeal, or complain to a regulator. Verification and lawful exceptions may apply.
13. Legal bases and regional rights
Where required, we process account and service data to perform our agreement; permission-based location, photo, and notification data with consent; security, moderation, integrity, and limited improvement data for legitimate interests; and data needed for law or vital interests. California, EEA, and UK residents may have additional rights. We do not discriminate for exercising an applicable privacy right.
14. Children
Letters to God is not directed to children under 13 or a higher minimum age where required. We do not knowingly permit prohibited underage accounts. If we learn that prohibited child data was collected, we may restrict the account and delete information while preserving or reporting suspected exploitation as legally required.
15. International processing
Information may be processed in the United States and other locations where Sawadee Thai LLC or its providers operate. Protections may differ from those in your residence. Where required, appropriate legal transfer mechanisms will be used.
16. Policy updates
We may revise this policy as the app, law, safety practices, and providers change. We will update the effective date and provide additional notice for material changes where appropriate. Updated processing remains subject to applicable consent requirements.
17. Contact
Send privacy questions, rights requests, or complaints to admin.letterstogod.club@gmail.com or use our contact page. We may verify your identity. You may also complain to the privacy or data-protection regulator available in your jurisdiction.