App Privacy Policy

Last updated: 18 October 2026

This document describes the Modlitwa app. It is an English translation of the Polish policy of the same date. Information about browsing this website, cookies and e-mail contact is in the website privacy policy (in Polish).

In short

The Modlitwa app for Android and iOS has no accounts and runs no analytics or tracking for advertising purposes. Saved intentions, settings, the apps you selected, schedules and the cached Plus status stay on your phone. A separate feature, “Prayer with an intention”, sends a newly typed intention online only after you press the “Prepare prayer” button; it is described below. Payment is handled by Google Play or the Apple App Store respectively, and the purchase status is handled for us by RevenueCat.

Local data

All of the saved data listed below stays in the memory of your device. A new entry used to generate a prayer online is sent only after you press “Prepare prayer”, as described below:

Data	Purpose
The list of apps you chose to block	to know when to invite you to pray
The time until which blocking is lifted	so that we do not ask again right after a prayer
Streak and prayer count	to show your progress
Settings (prayer mode and duration, reminder)	so that the app works your way
The text of intentions typed in “Write an intention” mode	saved in the history (“My intentions”) so you can come back to them; only on your device, never sent anywhere. You can delete a single intention or the whole history with one button
Cached Modlitwa Plus status (active/inactive) and the time of the last verification	so that purchased features also work without the internet. This entry is valid for at most 72 hours; after that, without a network connection, the app cannot confirm the purchase and Plus features switch off until the next successful verification

On Android the app may also keep a local cache of the names and packages of installed apps to show the selection faster the next time you open it. On iOS, the Family Controls system gives the app only opaque tokens of the selected apps, not the full list of apps or the contents of their screens. Tokens, schedules and the blocking state are stored locally in the app's storage and its App Group. We do not send this data off the device.

A standard uninstall removes the data from the device according to the system's rules. On Android the app has automatic backup disabled (android:allowBackup="false"). We do not guarantee this behaviour for custom system variants prepared by device manufacturers (OEMs) or for every phone migration method; that is outside our control.

Prayer with an intention — online generation

This feature is part of Plus. After you type a new intention (up to 1000 characters) and press “Prepare prayer”, the app sends it online immediately; the screen says so below the text field. The screen does not ask for your age or for separate consent, and the app does not collect a date of birth here.

The app sends over HTTPS to Cloudflare the new intention, the platform, the pseudonymous RevenueCat identifier and the store's proof of purchase: on Android the signed Google Play purchase data (including the order number and purchase token), on iOS the App Store purchase confirmation. Cloudflare checks Plus with RevenueCat and the proof of purchase (on iOS it passes it to Apple for that purpose), and forwards the intention itself to OpenAI to generate the prayer and check the content for safety. OpenAI does not receive the RevenueCat identifier, the proof of purchase or the “My intentions” history. We do not store the proof of purchase. Data may be processed outside the EU. Please do not type surnames, contact details or details that would identify other people.

We do not use Zero Data Retention (ZDR). According to the OpenAI API policy, content is not used for training by default, but safety logs may contain content and be kept for up to 30 days, with the exceptions described by the provider. The store=false setting disables storing the response in the service but does not remove those logs.

Our Worker does not store the intention or the prayer in a database or in application logs. The daily counter keeps, for 30 days, a pseudonym derived from the RevenueCat identifier, the date and the number of uses. Cloudflare also processes technical connection data under its privacy policy and data processing addendum.

The generated prayer does not go into the history. A separate “Save intention” button saves only that entry locally; it does not send previously saved intentions. Amen counts towards local statistics and the streak, without unlocking apps. “Report a problem” opens your e-mail app without automatically attaching the intention or the prayer.

App blocking on iOS — Family Controls

On iOS, selecting and blocking apps works through the system mechanisms Family Controls, Managed Settings and Device Activity. You give individual consent yourself and pick the apps in Apple's system window. Modlitwa does not receive the full names or the list of installed apps and does not read their contents.

On older iOS versions the button on the shield may create a local notification leading to the prayer screen. The notification is created on the phone and does not use an external push server. Consent to Family Controls and notifications can be withdrawn in the iPhone settings.

Accessibility service — what exactly it does

To block the selected apps, Modlitwa uses the system accessibility service. This permission sounds serious, so we explain it precisely:

What we do: we check only the package name of the app currently in the foreground (for example com.instagram.android). On that basis we decide whether to show the prayer screen.

What we do NOT do:

we do not read the contents of your screen: the service is set to canRetrieveWindowContent="false", so the system technically does not give us access to window contents;
we do not read the text you type or your passwords;
we do not perform gestures or taps on your behalf;
we do not store a history of which apps you use;
we do not send any of this information anywhere.

The service listens only for active-window change events (typeWindowStateChanged) and asks for no additional capabilities.

Other permissions

Permission	Purpose
Accessibility service and display over other apps (Android)	recognising the selected app and showing the block
Family Controls (iOS)	system app selection, schedule and shield over the blocked app
Notifications	daily invitation to pray, warning about the blocking state, and the local step from the shield to the prayer on supported iOS versions
Run after restart (Android)	restoring scheduled reminders
Internet access	handling, restoring and verifying Modlitwa Plus through the store and RevenueCat, opening the prayer source and the store's system features; standard prayers and verses are included in the app, and the optional Prayer with an intention requires an online connection
Google Play / Apple App Store payments	purchase, subscription, subscription management and restoring Modlitwa Plus

Data shared when buying

The prayer book, the word for today and the streak are free forever. App blocking requires an active Modlitwa Plus, also in installations that previously had it for free. Plus covers app blocking, short access windows, schedules, instant blocking, Mass Mode and the “write an intention” mode, as well as the optional online Prayer with an intention.

Payment is handled entirely by Google Play on Android or the Apple App Store on iOS. We do not see or store card details or billing addresses.
We do not create accounts and do not send the publisher your e-mail address or your Google or Apple account identifier.
The purchase status is handled by RevenueCat (RevenueCat, Inc., USA). It receives a pseudonymous customer identifier, the product identifier, the transaction status and the basic technical data needed to complete the purchase.
On the device we store the Plus status and the time of the last verification. Online verification is required at least once every 72 hours, also for an earlier lifetime purchase.
A yearly and a weekly subscription are on sale; both renew automatically. On iOS the terms shown by Apple apply, and you manage the subscription in your Apple account settings. On Android, Google Play shows the terms and how to manage it. Previously bought monthly subscriptions and lifetime purchases remain valid and can be restored.
The privacy policies of Google and Apple also apply.

Google Play In-App Review

When the app shows you the system rating window (In-App Review), the star rating and any review text you type go directly to Google Play, not to us. Depending on the publishing channel the review may be public or visible only to the developer. More: Google Play In-App Review documentation.

Sharing (“Recommend Modlitwa”)

The “Recommend Modlitwa” feature and sharing diagnostics open the system share sheet. You choose the app and the recipient; we do not see or send that content ourselves.

Children

The app is not directed at children under 13 and does not knowingly collect their data.

Third parties

We use no analytics, advertising or tracking tools. We do not build user profiles and we do not sell any data to anyone.

We use third parties that handle payments and the stores' system features:

Google Play (Google Ireland Ltd.) carries out the transaction and collects the money, and handles the system In-App Review window (rating/review text). The Google privacy policy applies.

Apple App Store (Apple Distribution International Ltd.) carries out the transaction on iOS, manages the subscription and allows the purchase to be restored. The Apple privacy policy applies.

RevenueCat (RevenueCat, Inc., USA) checks with Google Play or the Apple App Store whether the purchase is valid and returns the answer “Plus active: yes/no” to the app. The RevenueCat privacy policy applies.

Cloudflare handles the connection for the optional Prayer with an intention, checks Plus and keeps the pseudonymous counter. OpenAI receives the text of the new intention to generate the prayer and moderate it, as described above.

What goes to RevenueCat:

Data	Notes
Pseudonymous customer identifier	a random string created by RevenueCat, not linked to your name, e-mail or Google account
Identifier of the purchased product and purchase status	for example “plus_yearly, active until…”
Basic technical device data	model, system version, store country, app version

What RevenueCat does not get: your intentions, the list of blocked apps, your prayer streak, card details or e-mail address. The app does not pass the local data listed above to RevenueCat.

If you never open the purchase screen and never buy Plus, the app still connects to RevenueCat at start-up to check the entitlement status; only the pseudonymous identifier and the technical data listed above are sent then.

Earlier sign-ups for the iOS launch notification

Modlitwa is already available in the App Store. The website no longer offers sign-ups for a launch notification. The information below concerns voluntary requests sent earlier by e-mail.

The data controller is Adam Szymczak (Dev AS Company brand), ul. Paderewskiego 3/19, 81-198 Pogórze, Poland; contact: devas.app.company@gmail.com. On the basis of your consent (Art. 6(1)(a) GDPR) we use the e-mail address and the content of the request to handle it and to send a one-off notification about the iOS launch. We do not add you to a newsletter. You do not have to give your name or any other data.

We keep the request in a Gmail mailbox, operated by Google, until the notification is sent or consent is withdrawn, and no longer than 12 months from the request. Google's processing of e-mail is described in the Google privacy policy, including the rules for transferring data outside the European Economic Area.

You can withdraw your consent at any time by writing to the address above. This does not affect the lawfulness of earlier processing. You have the right to access your data, to have it rectified or erased, to restrict processing, to data portability and to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). Providing data is voluntary; without an e-mail address we cannot send the notification. We make no automated decisions and do no profiling on the basis of the request.

Changes

If the policy changes, we will update the date at the top and, where needed, describe the change in the update notes in Google Play or the Apple App Store.

Contact

For privacy matters write to: devas.app.company@gmail.com

Data controller: Adam Szymczak (Dev AS Company brand), ul. Paderewskiego 3/19, 81-198 Pogórze, Poland.