Breadbasket

Bring it to the basket.

Privacy Policy

Effective July 13, 2026

What you share in prayer is among the most personal things there is. This policy says plainly what Breadbasket collects, what it never does, and what stays entirely on your phone.

What stays on your device

Personal ("just me") prayers are stored only on your phone. They are never uploaded to any server, which also means they are not backed up: deleting the app deletes them.

What we collect and why

• Account: a random identifier, and — only if you save your account — your email address or Apple ID token. Guest accounts need nothing at all.
• Profile: the display name, avatar emoji, and color you choose. Optional contact details (phone, email, Instagram) are stored only if you add them, and are shown only to groups you explicitly share them with.
• Prayer content you share with a group: stored so your group can see it. Visibility is enforced by database row-level security: a request shared with a group is readable by that group's active members and no one else. Anonymous requests never include your name in the data sent to other phones.
• Push tokens and timezone: to deliver the daily digest and urgent prayer notifications at a humane local hour. Notification payloads carry counts and group names, never prayer text.
• Usage analytics and crash reports: we count taps, not words. Analytics events and crash reports never contain prayer content and are scrubbed of personal information.

What we never do

• We never sell your data. There are no ads and no data brokers.
• We never share prayer content with any third party.
• We never make profiles searchable: nobody can find you without an invite code you chose to share.

Religious data, handled seriously

Using a prayer app can itself reveal religious belief — a specially protected category of data under GDPR and similar laws. We treat every piece of content in Breadbasket at that standard: least-privilege access enforced at the database layer, encryption in transit and at rest, and no secondary use of any kind.

Blocking and safety

If you block someone, you become mutually invisible: neither of you sees the other's requests, updates, comments, reactions, or prayer activity. Reports you file include a snapshot of the reported content so we can act on it even if it is later deleted.

Deletion is real

Deleting a request permanently erases its text. Deleting your account (Settings → Delete account, inside the app) erases your profile, requests, prayers, memberships, and push tokens. We keep no shadow copies.

Children

Breadbasket is for people 13 and older. A parent or guardian can pray on a younger child's behalf from their own account.

Your rights & contact

You can access, correct, or erase your data in the app itself; for anything else — including data-protection requests under GDPR/CCPA — email support@breadbasketapp.com. If this policy changes materially, we will say so in the app before the change takes effect.