Privacy Policy

Last updated: 18 October 2026

1. The short version

Lumen Christi ("we", "our", "the app") is a daily Catholic devotional app published by the Lumen Christi team. We collect the minimum data needed to run the app, we do not sell your data, we do not use it for advertising, and you can delete your account and data at any time.

2. What we collect

Information you give us

• Account information — email address, display name, and (if you sign in with Google or Apple) the unique user ID from that provider.
• Profile preferences — your chosen language, Bible version, notification preferences, and prayer-time settings.
• Activity within the app — bookmarks, favorites, prayer-streak history, reading-plan progress, and notes you save.
• Support requests and feedback — anything you send us by email, through the contact form, or through Send feedback in the app, with the reply address you choose to give.

Joining a parish

If you are signed in and add a parish in the app, you become a member of that parish. We keep which parish you joined, when, and two choices you control: whether the parish may send you short notices, and whether the parish office may see your name. Where you worship says something about your faith, so we treat it as sensitive: it is used only to count members, to show the office the names members chose to show, and to send the notices you agreed to. It is never sold, used for advertising, or shared with anyone else.

The parish office sees how many members it has and, for members who chose to share their name, that name and the month they joined. It never sees your email address or phone number. You can switch notices or name-sharing off, or leave the parish, with one tap, and deleting your account removes your membership. A parish may send a member at most one notice a day, and never between 9 pm and 6 am in the parish’s time.

Connect

If you take part in Connect, the app's community of prayer, we keep what you share there: your posts, prayer requests and testimonies, comments, quotes, the photos you choose to attach, your reactions and "praying for you", whom you follow and block, and any report you make about a post or a person. Posts and comments are shown to other members of Connect; a prayer request may speak of your faith or your health, so share only what you are comfortable with. Reports are seen only by our moderators. Everything you share in Connect is linked to your account and is deleted with it, photos included.

Parish applications

If you apply to register a parish (at lumenchristi.app/parishes), we collect what you enter: your name and email address; the parish's name, address, diocese, languages and timezone; the parish office's email address; and the name and email address of the parish priest (or a diocesan contact) whom you ask us to contact.

We use this only to check that the request is genuine and to set up the parish page. In practice that means we email the parish office once to confirm its address, email the priest or diocesan contact once to confirm the request, and review the application ourselves. The priest or contact you name is told who applied and for which parish, and nothing more. You confirm that you are happy for us to email them before you can submit.

We record that an application was made using a hashed form of your internet address (to limit abuse) and never store the address itself. We do not use this information for marketing.

Information collected automatically

• Device and diagnostic data — device model, operating-system version, app version, language and time-zone settings, and crash reports. We use this only to keep the app stable.
• Push-notification tokens — an anonymous identifier from Apple Push Notification service or Firebase Cloud Messaging, used solely to deliver the prayer reminders you've enabled.

What we do not collect

• We do not use third-party advertising trackers.
• We do not collect your contacts, microphone or location. The only photo we receive is one you choose to attach to a Connect post.
• We do not show advertising.
• We do not sell, rent or trade your personal data — ever.

3. Why we collect it

• To run the app — show you the right readings, save your bookmarks, sync across devices.
• To send you the prayer reminders you've asked for.
• To improve the app — diagnose crashes and understand which features are most loved.
• To respond to your messages when you write to us.

4. Who we share it with

We share data only with the service providers required to run the app:

• Supabase — our authentication, database, and file-storage provider.
• Apple Push Notification service & Firebase Cloud Messaging — only to deliver the notifications you've enabled.
• Vercel — hosts the web version of the app.
• Resend — delivers the emails we send you: sign-in and account emails, and the confirmation emails for parish applications.
• Paystack — only if you choose to give a donation. You enter your payment details on Paystack's own secure page; we never see your card or bank details and keep no record of who gave what.

These providers act as our processors and are bound by data-protection agreements. We do not share your data with advertisers or analytics resellers.

5. How long we keep it

• Account data — kept until you delete your account.
• Activity data (bookmarks, streaks, etc.) — kept until you delete it or delete your account.
• Connect (posts, comments, photos, follows, reactions) — kept until you delete it or delete your account. A report you made about someone else is removed with your account; a moderator's decision about it is kept without your name.
• Feedback you send in the app — kept until we have dealt with it, and deleted with your account.
• Diagnostic data — typically retained for 90 days.
• Support emails — retained for up to 24 months for service quality.
• Parish applications — if an application is rejected or lapses, we delete it 90 days later. If it is approved, we keep it for as long as the parish page exists, as a record of why the page was created; its administrator is a user of the app and can delete their account at any time.

6. Your rights

Wherever you live, you have the right to:

• Access the personal data we hold about you
• Correct any data that is inaccurate
• Delete your account and your data
• Export your data in a machine-readable format
• Withdraw consent at any time
• Lodge a complaint with your local data-protection authority

To exercise any of these rights, write to [email protected].

7. Deleting your account

You can delete your account in two ways:

1. From inside the app: tap your profile picture (top right) → Delete my account → type DELETE to confirm.
2. From the web: visit our account deletion page.

All personal data is removed within 30 days. See the account deletion policy for full details.

8. Children's privacy

Lumen Christi is suitable for all ages. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this policy as the app evolves. Material changes will be announced inside the app and at the top of this page, with the "Last updated" date. Your continued use of the app after a change constitutes acceptance of the updated policy.

10. Contact us

For any privacy question, write to [email protected] or use our contact form.