Privacy Policy
Last Updated: February 28, 2026 · Effective Date: February 28, 2026
1. Introduction
Welcome to Amenly ("we," "our," "us," or the "Company"). Amenly is a prayer companion application designed to help individuals deepen their relationship with God through guided prayer, prayer tracking, and spiritual growth tools.
We are committed to protecting your privacy and handling your personal data — including sensitive religious data — with the utmost care and respect. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website (the "Site"), use our mobile application (the "App"), or interact with our services (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your explicit consent before processing your data.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: name, email address, and password when you register or join our waitlist.
- Profile Information: display name, profile picture, language preference, and timezone.
- Prayer and Spiritual Data: prayer requests, prayer journal entries, prayer tracking history, answered prayers, spiritual growth milestones, and related notes. This is classified as sensitive religious data and is treated with heightened protection (see Section 5).
- Communications: messages you send to us through support channels, feedback forms, or email.
2.2 Information Collected Automatically
- Device Information: device type, operating system, unique device identifiers, browser type, and version.
- Usage Data: features accessed, time spent in the App, interaction patterns, session duration, and frequency of use.
- Log Data: IP address, access times, pages viewed, app crashes, and system activity.
- Location Data: general (city/country-level) location derived from your IP address. We do not collect precise GPS location unless you explicitly enable it.
2.3 Information from Cookies and Similar Technologies
We use cookies, pixels, and similar tracking technologies on our Site to:
- Remember your preferences and settings.
- Analyze traffic and usage patterns.
- Measure the effectiveness of our communications.
You can manage your cookie preferences through your browser settings or our cookie consent banner. For more details, see Section 9.
3. How We Use Your Information
We use your information for the following purposes:
- Providing Services: to create and manage your account, deliver prayer guidance, track your prayer journey, and personalize your experience.
- Communication: to send you service-related updates, respond to your inquiries, and — with your consent — send newsletters, prayer reminders, and spiritual resources.
- Improvement: to analyze usage trends, diagnose technical issues, and improve our Services.
- Safety and Security: to detect fraud, prevent abuse, and ensure the security of our Services.
- Legal Compliance: to comply with applicable laws, regulations, and legal processes.
4. Legal Basis for Processing (EEA/UK/Swiss Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Providing and managing your account | Performance of a contract |
| Sending service-related communications | Legitimate interest |
| Processing religious/spiritual data | Explicit consent (GDPR Article 9(2)(a)) |
| Sending marketing emails | Consent |
| Analytics and improvement | Legitimate interest |
| Legal compliance | Legal obligation |
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact us at the address in Section 14 or use the in-App settings.
5. Sensitive Religious Data — Special Protections
Your prayer data, spiritual journal entries, and related information constitute special category data under GDPR Article 9 and equivalent laws worldwide. We apply the following heightened protections:
- Explicit Consent: we collect and process religious data only after obtaining your clear, affirmative, and informed consent.
- Purpose Limitation: religious data is used solely to provide you with prayer tracking, spiritual guidance, and related features. It is never used for advertising, profiling, or marketing purposes.
- Encryption: all religious data is encrypted in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
- Access Restriction: access to religious data is limited to essential personnel under strict confidentiality obligations.
- No Sale: we will never sell your religious or spiritual data to any third party, under any circumstances.
- Right to Deletion: you may request the complete and permanent deletion of all your religious data at any time (see Section 8).
6. How We Share Your Information
We do not sell your personal data. We may share your information only in the following circumstances:
- Service Providers: trusted third parties who assist us in operating our Services (e.g., hosting, email delivery, analytics). These providers are contractually bound to protect your data and may only process it on our behalf.
- Legal Requirements: when required by law, regulation, legal process, or government request.
- Safety: to protect the rights, safety, or property of Amenly, our users, or the public.
- Business Transfers: in connection with a merger, acquisition, or sale of assets, in which case your data will remain subject to this Privacy Policy.
- With Your Consent: in any other case, only with your explicit permission.
Third-Party Service Providers
| Provider Category | Purpose | Data Shared |
|---|---|---|
| Cloud Hosting | Data storage and processing | Account and usage data |
| Email Service | Waitlist, newsletters, notifications | Email address, name |
| Analytics | Usage analysis and improvement | Anonymized/pseudonymized usage data |
| Payment Processing | Subscription management (if applicable) | Payment details (not stored by us) |
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.
- Account Data: retained for the duration of your account and up to 30 days after deletion request.
- Prayer and Religious Data: retained for the duration of your account and permanently deleted within 30 days of your deletion request.
- Waitlist/Email Data: retained until you unsubscribe or request deletion.
- Usage and Analytics Data: retained in anonymized/aggregated form for up to 24 months.
- Legal Obligations: certain data may be retained longer if required by applicable law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
8.1 Rights for All Users
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate or incomplete data.
- Deletion: request deletion of your personal data.
- Withdraw Consent: withdraw consent for processing at any time.
- Data Export: receive your data in a portable, machine-readable format.
8.2 Additional Rights — EEA/UK/Swiss Users (GDPR)
- Restriction: request restriction of processing in certain circumstances.
- Objection: object to processing based on legitimate interest.
- Lodge a Complaint: file a complaint with your local Data Protection Authority.
8.3 Additional Rights — California Residents (CCPA/CPRA)
- Right to Know: what personal information is collected, used, and shared.
- Right to Delete: request deletion of personal information.
- Right to Opt-Out: opt out of the sale or sharing of personal information (note: we do not sell personal data).
- Non-Discrimination: we will not discriminate against you for exercising your rights.
8.4 Additional Rights — Brazilian Users (LGPD)
- Confirmation: confirm whether your data is being processed.
- Anonymization: request anonymization, blocking, or deletion of unnecessary data.
- Portability: data portability to another service provider.
8.5 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
app.amenly.io@gmail.com
We will respond to your request within 30 days (or sooner if required by applicable law). We may need to verify your identity before processing your request.
9. Cookies and Tracking Technologies
Cookies We Use
| Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential Site functionality | Session |
| Functional | Remember your preferences | Up to 12 months |
| Analytics | Understand usage patterns | Up to 24 months |
| Marketing | Measure campaign effectiveness | Up to 12 months |
Managing Cookies
- Browser Settings: most browsers allow you to block or delete cookies.
- Consent Banner: on your first visit, you can choose which cookie categories to accept.
- Opt-Out Links: for specific analytics providers (e.g., Google Analytics opt-out browser add-on).
10. Data Security
We implement industry-standard technical and organizational measures to protect your personal data, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256).
- Regular security assessments and penetration testing.
- Access controls and role-based permissions.
- Secure development practices and code reviews.
- Incident response procedures.
While we strive to protect your data, no method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at app.amenly.io@gmail.com.
11. International Data Transfers
Amenly operates globally. Your data may be transferred to and processed in countries other than your own, including countries that may not provide the same level of data protection.
When transferring data internationally, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Adequacy decisions where applicable.
- Your explicit consent where required.
12. Children's Privacy
Our Services are not directed to children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at app.amenly.io@gmail.com, and we will promptly delete such data.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated Privacy Policy on our Site and in the App.
- Sending you an email notification (if you have provided your email address).
- Displaying a prominent notice within the App.
The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised. We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Amenly
Email: app.amenly.io@gmail.com
Website: https://amenly.app
For EEA/UK users, you also have the right to lodge a complaint with your local Data Protection Authority. A list of EU Data Protection Authorities can be found at: edpb.europa.eu
15. Language
This Privacy Policy is provided in English. In the event of any conflict between translated versions and the English version, the English version shall prevail.
© 2026 Amenly. All rights reserved.