Privacy

Praying needs no account

The prayer clock, the timers and the alerts never ask who you are. You can open 7xNoon, keep the watch at noon, pray close to home and never type your name. Nothing on your phone is sent to us unless you choose to make an account.

Who we are

Prophetic Art of James Nesbit is the controller of this information.
Postal address: [POSTAL ADDRESS — TO FILL]
Privacy contact: prayer@7xnoon.org — a real person reads it.

What stays on your phone and is never sent to us

If you use the phone app, these live on the device only: how many prayers you have completed on that phone, the last day you sealed the close-to-home prayer, which of the five close-to-home steps you ticked today, a cached copy of the day's devotional so it reads offline, your light or dark setting, whether prayer alerts are switched on, an optional first name and town for the praying-now roster, and how many times you have declined the town question. You can erase all of it in the app under Me → My data & privacy → Clear everything on this phone, and that works signed out and with no signal.

What we hold, but only if you make an account

• Your email address, your name, and your home time zone.
• Your password, stored only as a modern one-way hash. We cannot read it, and we can never email it to you — that is why a forgotten password is reset with a link rather than sent.
• An optional city and state. A town is only ever named on the map once three or more people pray from it.
• A dated row for each prayer you complete while signed in — the time zone and the moment.
• Prayer-wall posts. These are public.
• Private journal entries, which only you can read.
• A sign-in cookie that keeps you signed in for up to 180 days, so you don't have to sign in every time you come to pray.

Your state, read from your connection

If you are signed in and have not given us a town, the prayer you seal is credited to a state worked out from your internet connection at the moment you pray — the state alone, never your address, and your internet address is never stored. It is read for the lookup and discarded. A town you type yourself always wins. Prayers lifted without signing in get no lookup at all: they still count in the national total, but the map cannot place them.

Why we hold each of these

To run the prayer clock and keep your streak across your devices; to count the national total; to build the prayer map; to carry the public prayer wall; to keep your private journal; and to send the morning email if you have asked for it.

The prayer wall is public, and it is screened first

Anything you post to the prayer wall is visible to everyone. Before a post appears it is read by an automated screening system — Claude, made by Anthropic — which is sent the text of your post along with your name and email address so a prayer can be traced to its author if it has to be. That is a disclosure outside the ministry, and we would rather say so here than let you assume otherwise. Posts may be held for a person to read, or removed. Your private journal is never sent anywhere.

Who else sees anything

• Our web host, which runs the server this site and its database live on.
• Anthropic, for the prayer-wall screening described above.
• Apple and Google, who tell us only how many people downloaded the app.

There is no analytics, no advertising, and no third-party tracker anywhere in the app or on this site. We do not sell anything about you to anybody, and we never will.

How long we keep things

• Your account — until you delete it.
• Your prayer rows — until you delete your account. See the next section for what survives.
• Prayer-wall posts — until you delete your account, which deletes them too.
• Journal entries — until you clear them, or until you delete your account.
• The praying-now roster — minutes. It is swept automatically.
• Held posts that are never approved — 90 days.
• Server logs — 30 to 90 days.
• Backups — a deletion is not truly complete until the backups holding that data have rolled off. We would rather tell you that than claim an erasure is instant.

Deleting your account

In the phone app: Me → My data & privacy → Delete my account. It asks for your password and confirms twice, and then it is done — we erase, we do not merely switch off. Deleted with it: your account, your journal, your place on the roster, your alerts, your town, and your prayer-wall posts.

One thing deliberately survives, and you should know exactly what it is. The dated rows recording that a prayer was lifted stay in the national record, with the link to you cut away. What remains is a time zone, a moment and a state — it names nobody and cannot be traced back to you. We keep it because the cumulative record of this nation's prayers is the point of the watch, and removing it would quietly rewrite what the country prayed. If you would rather those rows were destroyed outright, write to prayer@7xnoon.org and we will do it.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to erase it. Write to prayer@7xnoon.org and we will answer within one month. Erasure is also the button in the app described above.

Children

Accounts are for people aged 13 and over. Praying needs no account, so a child can use the clock and the timers without us holding anything about them at all — and we intend to keep it that way.

Changes

If this policy changes we will update the date at the top of this page, and we will say so on the site. If a change materially affects what we do with what you have already given us, we will tell account holders by email before it takes effect.