Privacy, with care.

When you join the early-access list, we process:

• your email address and preferred signup language;
• subscription information such as confirmation status, relevant timestamps, email delivery status, and the evidence needed to record your choice;
• limited technical and network information used to prevent automated abuse, secure the form, and deliver the confirmation email.

We do not ask for your name, religious affiliation, prayer intentions, or any other personal information as part of early-access signup.

We use your email and subscription information only to:

• manage and confirm your early-access registration;
• send limited news directly related to early access;
• invite you to the first shared prayers.

We use limited technical information to protect the form, prevent abuse, and keep the service reliable. We do not sell personal data, use it for advertising, or build marketing profiles.

We process your early-access registration with your consent. Joining the list requires both submitting the form and confirming your choice through the email we send. You can withdraw that consent at any time.

Interest in a prayer-related service may reveal or suggest information about religious or philosophical beliefs. Where that makes the registration special-category data under Article 9 of the GDPR, we rely on your explicit choice to join and confirm the early-access list, and we apply additional care through data minimisation and restricted use.

Processing strictly needed to secure the form and prevent abuse is based on our legitimate interest in operating a safe and reliable service.

• If you do not confirm, you are not added to the early-access list. The confirmation link expires after 30 days. Brevo keeps the related transactional logs for one month and may take up to 24 hours to complete their automatic deletion. We configure Brevo not to store email previews.
• If you confirm, we keep your contact until you unsubscribe, the early-access programme ends, or 24 months have passed since your confirmation — whichever comes first.
• After you unsubscribe, we may retain a minimal suppression record for up to three years solely to ensure that we do not contact you again by mistake or to establish compliance.

The application does not retain the short-lived Turnstile response after a signup request has been processed. Service providers may retain operational and security records under their own documented policies.

Access is limited to the project operator and providers needed to run early access:

• Brevo stores the contact record, manages double opt-in, and delivers email.
• Cloudflare hosts and protects the website. Its Turnstile service processes limited security signals to distinguish legitimate visitors from automated abuse; the email address is not sent to Turnstile for verification.

These providers act under contractual data-protection terms. They may use vetted subprocessors only as needed to provide their services.

Brevo and Cloudflare operate internationally. If personal data is transferred outside the European Economic Area, the transfer must rely on an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

Further details are available in Brevo’s terms and Cloudflare’s Data Processing Addendum.

The early-access page does not use advertising trackers or behavioural analytics. Turnstile is used only for security and abuse prevention.

We configure Brevo not to associate email opens or ordinary link clicks with early-access contacts who have not separately consented to that tracking. The confirmation link itself must be processed to record your double-opt-in choice.

Under the GDPR, you may ask us to:

• access or correct your personal data;
• delete it or restrict its processing;
• receive data you provided in a portable format, where applicable;
• object to processing based on legitimate interests;
• withdraw your consent at any time.

Every early-access update will include an unsubscribe link. You can also exercise your rights by writing to contact@pray-for.us. Withdrawing consent does not affect processing that took place before the withdrawal.

If you believe your rights have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL).