This Policy explains how Coeli collects, uses, keeps and protects information when you use the Coeli mobile app and this website. Coeli is a Catholic prayer app for iOS and Android.
1. Controller and contact
The data controller is the owner of Coeli, under the jurisdiction of Chile. For privacy questions or rights requests, contact [email protected].
2. Data we collect
- Name and email when you create an account or sign in with Google or with email and password.
- An internal user identifier assigned to your account and a technical installation identifier generated by the app.
- Prayer logs: prayer type, completion date and time, local prayer date and the optional intention you choose to write.
- Usage and analytics data, such as app installation and opening, sign-in method, onboarding completion, views of the trial notice and paywall, the type of prayer completed or logged, and purchase or restoration outcomes.
- Basic app and device technical data, together with an approximate location that may be derived from the IP address, without requesting access to the device's precise location.
- Purchase and subscription identifiers managed by our payment providers.
- Technical preferences needed to operate the app, such as language, visual theme and text size.
3. Prayer intentions and sensitive data
Prayer intentions may contain personal, religious or health-related information if you choose to write them. Coeli does not require that content to use the app. Communications are protected in transit through encrypted connections. Access to your logs and intentions is restricted to your account. Product analytics never includes your name, email address, intentions, free-form text or prayer content. Technical providers and authorized administrators may access data only when necessary to operate, secure or comply with legal obligations for the service.
4. How we use data
- Create and maintain your account.
- Sync your history, streak, statistics and intentions.
- Manage subscriptions, free trials and access to the service.
- Understand in aggregate how the app is used, evaluate features, and improve the experience and reliability of the service.
- Respond to support requests, prevent abuse and comply with legal obligations.
5. Legal basis
Where the GDPR applies, we process data as appropriate for contract performance, user consent, legitimate interests in operating, securing and improving the service, and compliance with legal obligations. You may object or withdraw non-essential consent by contacting us.
6. Third parties and transfers
We allow data to be processed by providers needed to operate Coeli: Supabase for authentication, database and sync, with hosting in the United States and/or European Union; PostHog Cloud US for product analytics, without session recording and without receiving names, email addresses, intentions or prayer text; Google for sign-in; RevenueCat for subscription management; and Apple and Google for in-app payments, billing and refunds. These providers process data on Coeli's behalf or under their own policies and contracts, and may involve international data transfers.
7. Retention and deletion
We keep your data while your account is active or as long as needed to provide, secure and improve the service. When you close or request deletion of your account, we will delete associated personal data from our operational systems. To also request deletion of analytics data associated with your internal identifier, contact [email protected]. We may keep information when required for legal, accounting, security or dispute-resolution reasons, as well as aggregate statistics that can no longer identify you.
8. Your rights
You may request access, correction, deletion, portability, objection or restriction of processing where applicable law allows it. Contact [email protected] from your account email so we can verify your identity.
9. Children
Coeli is not directed to children under 13. In jurisdictions where digital consent requires a higher age, such as 16 under the GDPR in certain cases, use requires valid authorization from a parent or guardian.
10. Cookies and web tracking
This static website does not use first-party analytics cookies at the time of publication. Our hosting provider may process technical network and security data to deliver the site. If we add analytics or non-essential cookies, we will update this Policy.
11. Security
We use reasonable measures to protect information, including encrypted connections and per-account access controls. No system is completely secure, so you must protect your credentials and notify us if you suspect unauthorized use.
12. Changes
We may update this Policy to reflect legal, technical or service changes. We will publish the new version on this page with a visible last updated date.