Section 01Who we are
Ora: Bible & Prayer (“Ora,” the “App,” “we,” “us,” or “our”) is a Catholic Scripture and prayer companion for iOS, published by Marcos Roberto Lemos Veloso, an individual developer located in Brasília, CSG 3, Brazil.
For the purposes of applicable data-protection law, including Brazil's Lei Geral de Proteção de Dados (LGPD), the European General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA), we act as the controller of the limited personal information described below. If you have any questions about this policy, you can reach us at marcosvelosodev@gmail.com.
Section 02Scope of this policy
This policy applies to the Ora mobile application and any related updates and features. It does not apply to third-party services you may reach through the App (such as the Apple App Store), which are governed by their own privacy policies.
Some features described here — in particular optional accounts and cloud sync (Section 05) — are being introduced as the App evolves. Where a feature is not yet available in your version of the App, the related data handling does not apply to you until you choose to use it.
Ora is currently offered to users in the United States, Canada, and the United Kingdom. This policy applies to users in those markets and is written to meet applicable US state privacy laws, Canada's PIPEDA, and the UK GDPR, regardless of where we as the developer are based.
Section 03Information stored on your device
Ora is designed to be local-first. The App bundles its Scripture and prayer content offline and stores your activity in a private database on your device. Unless you turn on an optional account (Section 05), the information below stays on your device and is not transmitted to us or to any server:
- Your reading progress, reading-plan status, and streak history.
- Bookmarks, favorite prayers, and saved or highlighted passages.
- Your answers to the onboarding personalization questions (for example, your stated goals, habits, and time commitment), which are used only to tailor your experience within the App.
- Verse of the Day state and any daily-verse content you choose to view or share.
- App settings and preferences (such as translation choice, theme, reminders, and widget configuration).
Because this data lives on your device, it is included in your device's normal backups (for example, iCloud or encrypted local backups) if you have those enabled, and it is governed by Apple's handling of those backups. Deleting the App removes this on-device data from your device.
Section 04Subscription & purchase information
Ora offers an optional paid subscription (Ora Pro). Purchases are processed by Apple through the App Store, and subscription status is managed with the help of RevenueCat, our subscription-infrastructure provider. We use these services to unlock features you've paid for, restore purchases across your devices, and manage free trials and renewals.
In connection with subscriptions, the following information is processed:
- Purchase and subscription data — such as which product you purchased, purchase and renewal dates, trial and subscription status, and receipt/transaction identifiers.
- An app-generated user identifier — a pseudonymous ID used to associate a subscription with an installation or account, so entitlements can be restored.
- Limited device and technical data — such as platform, app version, country/region, and device type, which RevenueCat receives as part of processing purchases.
We never see or store your payment details. Your card, billing address, and Apple ID credentials are handled entirely by Apple. We receive only confirmation of your subscription status, not your payment information.
Section 05Accounts, sign-in & cloud sync
To let you back up your progress and sync it across devices, Ora is introducing an optional account. You can create one using Google or Sign in with Apple. When you choose to create an account or sign in, we (using our backend provider, Supabase, together with the sign-in provider you select) process:
- Account credentials — you can sign in with Google or with Sign in with Apple. In each case we receive a unique account identifier and an authentication token, along with your email address and, where provided, your name. If you use Sign in with Apple and choose to hide your email, Apple gives us a private relay address instead of your real one.
- Synced app data — the reading, streak, prayer, and preference data described in Section 03, so it can be securely stored and restored on your other devices.
Creating an account is optional. If you do not sign in, Ora continues to work as a local-only app and none of the above is collected. If you create an account and later delete it, we delete the associated account data as described in Section 10.
Section 06Diagnostics & app functioning
If you have enabled sharing of diagnostics with developers at the operating-system level, Apple may provide us with aggregated crash and performance reports to help us fix problems and improve stability. This data is provided by Apple in accordance with your device settings and does not identify you to us.
Usage analytics
As the App evolves, we are introducing product analytics to understand how features are used and where the experience can be improved. When enabled, this collects limited usage and technical data — such as which screens and features are opened, in-app events (for example, completing a reading or starting a plan), session information, app version, and general device type. This data is used only to improve Ora and is not used for advertising.
We process this through a third-party analytics provider, [analytics provider name — e.g., PostHog, Firebase, or Amplitude — add once selected], and will list it in Section 09. Where required, we ask for your consent before enabling analytics, and you can opt out at any time in the App's settings.
Section 07What we do not collect
To be clear about our boundaries:
- We do not sell or rent your personal information to anyone.
- We do not use advertising networks, and Ora contains no third-party advertising trackers.
- We do not build advertising or marketing profiles from your Scripture reading or prayer activity.
- We do not collect your contacts, photos, precise location, or microphone data.
Your reading and prayer life inside Ora is treated as private. Where it stays on your device, we cannot see it; where you choose to sync it (Section 05), it is used only to provide the service to you.
Section 08How we use information
We use the limited information described above to:
- Provide the App's core features — Scripture reading, reading plans, streaks, the prayer library, and the Verse of the Day.
- Personalize your experience based on your onboarding responses and in-app activity.
- Process and restore subscriptions and manage free trials and renewals.
- Where you use an account, back up and sync your data across your devices.
- Maintain the security, stability, and performance of the App.
- Comply with legal obligations and enforce our terms.
Legal bases (UK GDPR / LGPD). Where these laws apply — the UK GDPR because Ora is offered to users in the UK, and Brazil's LGPD because we as the controller are based in Brazil — we rely on the performance of our contract with you (to deliver the App and subscriptions you request), your consent (for optional features such as accounts), and our legitimate interests (to keep the App secure and working well). You can withdraw consent for optional features at any time by turning them off or contacting us.
Section 10Data retention
On-device data remains on your device until you delete it or remove the App. Subscription records are retained for as long as needed to provide the service, restore purchases, and meet tax, accounting, and legal requirements. If you create an account, we retain your account data while your account is active; when you delete your account, we delete or anonymize the associated data within a reasonable period, except where we are required to retain certain records by law.
Section 11Security
We use reasonable technical and organizational measures to protect information, including encryption in transit for any data sent to our providers and the security controls offered by Apple, RevenueCat, and Supabase. No method of transmission or storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security.
Section 12Children's privacy
Ora is intended for a general audience and is not directed to children under the age of 13. We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
Section 13Your privacy rights
Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or receive a copy of it, to object to or restrict certain processing, and to withdraw consent. This includes rights available under US state privacy laws (such as the CCPA/CPRA in California and similar laws in other states), Canada's PIPEDA, the UK GDPR, and Brazil's LGPD. Depending on the law that applies to you, you may also have the right to lodge a complaint with a supervisory authority — such as the UK's ICO, Canada's Office of the Privacy Commissioner, or Brazil's ANPD.
Because most of your data stays on your device, you can exercise many of these rights directly — by editing your preferences, clearing data in the App, or deleting the App. For data tied to a subscription or account, contact us at marcosvelosodev@gmail.com and we will respond as required by applicable law. We will not discriminate against you for exercising your rights.
Section 14International data transfers
We are based in Brazil, and our service providers may process data in other countries, including the United States and the European Union. Where personal information is transferred across borders, we rely on the safeguards offered by those providers and on legally recognized transfer mechanisms, such as standard contractual clauses, to protect your information.
Section 15Changes to this policy
We may update this policy from time to time — for example, when we add features such as accounts and cloud sync. When we do, we will revise the “Last updated” date at the top of this page, and, for significant changes, we will provide a more prominent notice within the App. We encourage you to review this policy periodically.
Section 16Contact us
If you have questions, requests, or concerns about this policy or your information, please contact us:
- Email: marcosvelosodev@gmail.com
- Publisher: Marcos Roberto Lemos Veloso
- Address: Brasília, CSG 3, Brazil