Privacy Policy

1. Who we are

Orant is published by Babanorth Labs ("we", "us"). We are responsible for the personal information described in this policy. You can reach us at support@orant.online.

Orant is intended for adults aged 18 and over. See Children.

2. What stays on your phone

Much of Orant works entirely on your device, and this information is not sent to us:

• Your daily check-in journal: moods, gratitude notes and reflections. These are stored only on your phone and are never synced to an account, even if you sign in. (A reflection may be briefly checked for safety when you're signed in; see Safety screening. It is not stored.)
• Your onboarding answers: your name, faith tradition and goals. These stay on your phone even if you create an account.
• Your preferred Bible translation, reading position, recently played items and in-app achievements.
• Prayer times and reminder settings. Reminders are scheduled on your phone; we don't send push notifications.
• Your progress, streak, plan progress and saved prayers until you create an account and choose to sync (see below).

The Bible text, ambient sounds, fonts and card artwork are built into the app. Guided prayer audio, meditation audio, music and some artwork are streamed from our content server when you play them.

Orant's data is not included in Google's cloud backups of your phone. If you move to a new phone with Android's direct phone-to-phone transfer, it may be copied across to the new phone. Deleting the app, or clearing its data in Android settings, removes everything stored on your phone. That includes your journal, which we cannot recover for you.

3. Information we collect

3.1 If you use Orant without an account

• Anonymous prayer counter. When you finish a prayer, the app sends the prayer's ID and a random ID created by the app on your phone. This random ID is not your advertising ID or any hardware identifier, and it is not linked to your name or account. We use it only to count each completion once per day and to show counts such as "prayed 1,200 times". Deleting the app resets it.
• Ask Master questions. The text of the questions you type is sent to our Ask service, without any account ID. See Ask Master questions.
• Content requests. When you stream audio or artwork, or read the community, your device requests it from our servers. Like any internet service, those servers receive your IP address and basic device and request information.
• Advertising data collected by Google AdMob. See Advertising.

3.2 If you create an account

An account is optional. You need one to post in the community, join groups, and sync your progress between phones. When you sign up and use an account, we collect:

• Account details: your email address and password. We store only a secure hash of your password, never the password itself.
• Profile: your theme (light or dark), the optional public name shown on your posts, and your chosen avatar (a built-in illustration, not a photo).
• Progress you choose to sync: the days you used Orant and your streak, reading-plan progress, saved prayers, quiz progress and favourites.
• Password reset: if you tap "Forgot password?", we email a reset link to the address you enter. The link is valid for 30 minutes, and using it signs your account out on every device.
• App allowances: how many Ask Master questions you've used in the current 24-hour window, and features unlocked by watching a rewarded ad. We store the counts, not your questions.

3.3 If you use the community

• Feed posts, prayer requests and replies you write, with the verse you attach and the audience you choose (public, group or private).
• "I prayed for this" taps on other people's prayer requests.
• Groups: the groups you create or join, their names and join codes, and your daily group check-ins.
• Reports you make about content, including a short excerpt of the reported content and the reason you give.
• Moderation records, for example if a post is hidden or an account's posting is suspended.

Your posts show your public name and avatar if you've set them, or "Someone" if you haven't. Your email address is never shown to other users.

3.4 Technical information

Our servers and our infrastructure provider, Cloudflare, automatically record standard technical data in access and security logs: IP address, time, the address requested, and your device or app type. We use these logs to keep the service running, prevent abuse and fix problems. Orant does not include any analytics or crash-reporting SDK.

3.5 Device permissions

Orant does not access your location, contacts, photos, camera or microphone.

4. Sensitive information

Some of what you share in a prayer app reveals your religious beliefs and, sometimes, your health or state of mind. We treat the following as sensitive:

We use this information only to provide the features described here. We never use it for advertising or share it with advertisers, and we never sell it.

5. Safety screening (OpenAI)

People sometimes write about self-harm in a prayer. To respond with care, Orant automatically checks the following text for signs of self-harm before it is published:

• Prayer requests and replies (comments) you post in the community.
• Journal reflections, when you save a check-in while signed in. When you're signed out, the reflection never leaves your phone. The app uses only your chosen mood to decide whether to show support resources.

The text is sent from our server to OpenAI's moderation API. Your email address and account details are not included. OpenAI returns a safety assessment, and we use only the self-harm categories.

• For a journal reflection, we use the result only to decide whether to show you support resources. We do not store the reflection, and no one on our team sees it. Our server records only whether support was suggested.
• If a prayer request or reply is flagged, or can't be checked, it is kept private (visible only to you), you are shown support resources, and a record is added to a private safety queue that only the app's administrator can see. The record contains a link to the item, your country code (to match local helplines), and review notes. The flagged item and its record are kept until a person has reviewed and resolved them, and are then deleted automatically 30 days after resolution. If you delete your account first, they are deleted with it.

This screening is a safety net, not a crisis service. If you are in danger, please contact local emergency services or a crisis line. Our Support page lists some.

OpenAI processes this data under its Privacy Policy and business terms. OpenAI states that, by default, data sent through its API is not used to train its models.

6. Ask Master questions

When you ask Ask Master a question, the app sends the text of your question to our Ask service at qa.orant.online, which runs on Cloudflare Workers. The question travels inside the encrypted request, never in the web address, so it doesn't appear in address-based logs. No account ID, email or device ID is attached. The service matches your question against a library of answers we prepared in advance with Google's Gemini AI, reviewed for accuracy and tone, and returns the closest answers.

Currently your question is used only for that lookup and is not forwarded to Google. If we later let questions without a match be answered live, the question text (still with no account or device ID) will be sent to the Google Gemini API, and the new answer may be added to the shared answer library in anonymous form. We will update this policy before that happens.

Please don't include personal details, such as names or contact information, in your questions. Ask Master answers are general teaching, not pastoral, medical, legal or professional advice.

7. Advertising (Google AdMob)

Orant is free and is supported by ads served by Google AdMob: banner ads, full-screen ads, and optional rewarded ads you can choose to watch to unlock extra features.

• To show and measure ads and to prevent fraud, the Google Mobile Ads SDK collects information such as your device's advertising ID, your IP address and an approximate location estimated from it, device and app information, diagnostic data about the SDK's performance, and your interactions with ads.
• Personalised or not. Where the law requires your permission, for example in the European Economic Area, the UK and Switzerland, ads are personalised only if you consent, and you'll be asked in the app. If you don't consent, or you opt out, you'll see non-personalised ads based on general context rather than your profile. Non-personalised ads still use data for limited purposes like frequency capping, fraud prevention and aggregate reporting.
• Rewarded ads. When you're signed in and choose to watch a rewarded ad, your Orant account ID (a random string, not your email) and the name of the reward are sent to Google, so Google can confirm to our server that the ad was actually watched before the reward is granted.
• We never give advertisers your prayers, journal, prayer requests, faith tradition or email address.

You can reset or delete your advertising ID, or opt out of personalised ads, in Android Settings → Google → Ads (or Settings → Privacy → Ads, depending on your phone). Learn more in how Google uses information from apps that use its services.

8. How we use information

• To provide Orant's features: stream audio, run your account, sync progress, show the community, count prayers, and answer Bible questions.
• To keep people safe: screen for self-harm, respond to reports, moderate content, and enforce posting limits and suspensions.
• To show ads that keep Orant free, and to confirm rewarded ads.
• To secure the service, prevent spam and abuse, and fix problems.
• To send the account emails you ask for, such as a password reset link, and to reply when you contact us.
• To comply with the law and protect our rights and the rights of our users.

Where the law requires a legal basis (for example, under the GDPR), we rely on: performing our contract with you (providing the app and your account); your consent (personalised ads, and sensitive information you choose to share, such as your tradition or a prayer request, which you can withdraw at any time by removing it); our legitimate interests in keeping the service secure and free of abuse; the vital interests of people at risk (safety screening); and legal obligations.

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising other than through Google AdMob as described above.

9. Who can see your information

Other people using Orant

• Feed posts are public: anyone using the app can read them, including people who aren't signed in. They're deleted after 1 day.
• Prayer requests are shown to the audience you pick each time:
  • Public: anyone using the app, including people who aren't signed in.
  • Group: members of that group.
  • Private: only you.
  They're deleted after 5 days, whatever the audience. Replies and "I prayed for this" taps are deleted with them.
• Replies are visible to people who can see the post or request they belong to and who are signed in.
• Groups: other members can see your public name, avatar and group check-ins.
• Prayer counts are shown to everyone as numbers only. No names are ever shown.

Anything you post publicly can be read, and possibly copied, by others before it is deleted. Please don't share information you wouldn't want seen, especially other people's personal details.

Us

As the operator, we can access the data on our servers when needed to run, secure and moderate the service, and to respond to your requests. Only the administrator can see the safety queue. If we appoint community moderators, they will be able to review reports and hide or delete community content only. They will have no access to the safety queue, your email, or your account settings.

Service providers and legal requests

We share information with the service providers listed below, only so they can provide their services to us. We may also disclose information if required by law, to protect someone's life or safety, or in connection with a sale or reorganisation of Orant, in which case this policy would continue to apply.

10. Third-party services

Tapping a helpline link opens that organisation's website or your phone dialler. From then on, that organisation's own privacy policy applies. Sharing a prayer or verse card uses your phone's share menu and sends it only where you choose.

11. How long we keep it

When you delete your account, your account and associated data are removed from our live database, and remaining copies drop out of our backups within 30 days. See Delete your account.

12. How we protect it

All communication between the app and our servers uses encrypted HTTPS connections. Passwords are stored only as secure hashes. Database rules on the server make sure you can read and change only your own account data, and administrative access is restricted to the operator. The AI and moderation keys stay on our servers, never in the app. No system is perfectly secure, but we work to protect your information and will notify you and the authorities where the law requires if a breach affects you.

13. Your choices and rights

• Use Orant without an account. Most features work signed out.
• Choose your audience each time you post a prayer request, and delete your own posts at any time.
• Edit your profile (public name, avatar, tradition, theme) in the Me tab.
• Reset a forgotten password with "Forgot password?" on the sign-in screen.
• Turn off reminders or notifications in the app or in Android settings.
• Control ads personalisation in Me → Settings → Privacy → Ad privacy choices (shown where the law requires it) and in your Android ads settings.
• Delete your account in the app (Me → Settings → Delete account) or by email. See Delete your account.

Depending on where you live (for example, under the GDPR in the EEA and UK, or under California and other US state laws), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to not be discriminated against for exercising these rights. To make a request, email support@orant.online from the address linked to your account. We'll respond within 30 days (or sooner if the law requires). You also have the right to complain to your local data protection authority.

14. Children

Orant is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has created an account or shared information with us, please contact support@orant.online and we will delete it.

15. International transfers

Our account and community server is located in the European Union (Finland). Our service providers may process information in other countries, including the United States. Where required, we rely on appropriate safeguards such as the providers' standard contractual clauses.

16. Changes to this policy

We'll update this policy when Orant changes, for example before introducing paid features or live AI answers. We'll change the effective date above and, for significant changes, let you know in the app before they take effect.

17. Contact us

Questions or requests about your privacy: support@orant.online