Subprocessor and Service Provider List
This page identifies material providers Prayer Tracker uses to operate the Services. A provider receives only the information reasonably needed for its role. Not every provider receives every category, and prayer or journal content is not provided for advertising.
Church Data Subprocessors
| Provider | Purpose | Relevant information | Processing location |
|---|---|---|---|
| Google LLC — Firebase and Google Cloud | Authentication, database, storage, server functions, Hosting, messaging, diagnostics, security, and backups | Accounts, Church records and content, public submissions, files, technical and security records | United States and other provider locations |
| Resend, Inc. | Transactional email, invitations, notices, and support/contact delivery | Email addresses, recipient/display names, organization context, message or template content needed for delivery | United States and other provider locations |
| Cloudflare, Inc. | Turnstile human verification and abuse prevention for public forms; country-level routing for the public-site analytics consent choice | Network, browser, challenge, limited request-security information, and country code for the consent decision; the regional Worker returns only whether consent is required and stores neither the request nor the decision; not prayer text or account content | Global provider infrastructure |
| Stripe, Inc. and Link | Church Managed Payments when purchasing is activated | Customer and organization billing identifiers, payment details entered with Stripe, invoices, transactions, tax and subscription status; Prayer Tracker does not receive full card details | United States and other provider locations |
Other Service Providers and Platforms
| Provider | Purpose | Relevant information |
|---|---|---|
| RevenueCat, Inc. | Personal Premium offer presentation, store receipt validation, restoration, entitlement, and subscription operations | App-user identifier, product, purchase, store, and entitlement status; not prayer or journal content |
| Apple Inc. | App distribution, Apple authentication where chosen, Personal Premium purchases, and device services | Apple account/provider identifiers and store transaction information governed by Apple |
| Google LLC — Google Play | App distribution, Google authentication where chosen, and Personal Premium purchases | Google account/provider identifiers and store transaction information governed by Google |
| Google LLC — Google Analytics 4 | Traffic measurement on approved public informational pages, subject to the regional consent behavior described in the Privacy Policy | Public page path and title, sanitized referring site, conventional campaign tags, approximate geography, and browser/device categories. First-party analytics cookies may be set after analytics is allowed or enabled. Advertising storage, advertising user data, advertising personalization, remarketing, and Google Signals are disabled; no prayer text, signed-in account content, or advertising identifier |
Analytics Status
Google Analytics 4 measures only the approved public informational pages described in the Privacy Policy. It is excluded from signed-in, authentication/action, Church, and prayer routes. In the European Economic Area, United Kingdom, and Switzerland, analytics is denied until allowed; a failed regional check uses the same consent-first behavior. Advertising storage, advertising user data, advertising personalization, remarketing, Google Signals, and custom account or prayer-content events are disabled. Nonessential Firebase Analytics remains disabled in the personal web app, Church administration portal, and current mobile apps. Core authentication, billing verification, security, crash and error diagnostics, service reliability, and functional preference storage remain operational. RevenueCat subscription events are used to operate Personal Premium entitlement rather than to analyze prayer content.
Changes and Objections
Prayer Tracker will provide at least 30 days’ notice before adding or replacing a material Church-data subprocessor where feasible. An urgent security or service-continuity change may receive shorter notice with an explanation. A Church may raise a reasonable data-protection objection by emailing support@theprayertracker.app.
The English version controls where permitted by law. The Spanish version is a convenience translation.
Back to Prayer Tracker