RedeemPrivacy policy
Effective 1 November 2026
Redeem is built to be private. We collect as little as we can, we don't sell your data, we don't show ads, and we don't track you across other apps or websites.
The controller of your personal data is Redeem Labs Ltd (trading as Redeem), 128 City Road, London EC1V 2NX, United Kingdom ("we", "us"). Contact us at support@getredeem.app.
Screen Time: what we can't see
Redeem uses Apple's Screen Time features to pause the apps you choose. Apple gives Redeem only private tokens for those apps, which stay on your device. We can't see which apps you picked, how long you use them, or anything else about your screen time, and none of it is sent to us. We only record whether Screen Time access is switched on, so we can help if pausing stops working. Your pause settings are also kept on your device. Screen Time information is never sold, shared with anyone, or used for advertising or analytics. We use Apple's Screen Time features only to pause the apps you choose for yourself; Redeem isn't a parental control or a monitoring tool. If you get Redeem Plus through Apple Family Sharing, Apple tells us only that your account has Plus. We don't learn who shared it, and family members can't see each other's activity in Redeem.
What we collect and why
| Information | Why we use it | Legal basis (UK/EU GDPR) |
|---|---|---|
| A random account ID (with no name or email attached), an internal member number and a support code | To run your account, show your requests, and tell you when someone prays | Contract (providing the service) |
| Prayer requests: topic, optional note, the country you choose, whether a request was answered, and any praise word you pick when it is | To show your request in the Prayer Pool for 48 hours and keep it in your history | Your explicit consent, which you give before your first request. Requests can reveal your religious beliefs and sometimes health, which the law treats as special category data |
| Prayer activity: prayers you've prayed, thanks sent, reports and people you've hidden | To tell people they've been prayed for, keep the community safe, and show your history | Contract; legitimate interests in keeping Redeem safe |
| Your prayer moments: when you prayed, which kind of prayer, how long it took, and whether you opened an app anyway | To show your prayer journey and totals | Contract (providing the service) |
| Your age range from Apple's Declared Age Range feature, or the age band you tell us | To keep the Prayer Pool off for under-13s and set safer defaults for teens | Legal obligation; legitimate interests |
| Purchase records (whether you have a subscription, its type and renewal dates; never your card details, which Apple handles) | To give you access to what you bought and restore it on a new device | Contract |
| Your device's country setting (for example "GB"), stored with each prayer you pray | When you pray for someone, we record your device's country with that prayer. The person you prayed for sees which countries prayers came from and roughly when (to the hour), never who prayed. Prayers from a shared link have no country | Legitimate interests in encouraging people who asked for prayer |
| Push notification token | To send the notifications you've allowed | Contract; you can turn notifications off in iOS Settings |
| Your app setup: the latest Redeem version you use, your iPhone's iOS version, whether notifications and Screen Time access are switched on, your plan (free or Plus), whether pausing is active, and how many apps you've chosen (never which). We never learn which apps you chose. | To help when you contact us and to spot problems with a version or setting. Only authorised staff can see it, and it's replaced each time the app updates it. | Legitimate interests |
| Crash reports: what went wrong, the app and iOS version, and the iPhone model. They don't include your account ID, prayer requests or the apps you've paused. | To find and fix bugs. If you send us a problem report with your support code, we can match it to a crash so we can fix it. | Legitimate interests |
| Basic, non-identifying usage counts (for example, prayers completed) | To understand how Redeem is used and improve it | Legitimate interests |
| Emails and website messages you send us, including church and partner enquiries (your name, email, church or organisation, and message) | To answer you | Legitimate interests |
| Problem reports and feedback you send: your message, any screenshot you choose to attach, technical details about your device and the app, and your support code if you include it | To fix problems, answer you, and hear what you think | Legitimate interests; your consent for anything personal you choose to write |
Your faith. Because Redeem is a Christian prayer app, using it can show something about your religious beliefs, which the law treats as special category data. We handle everything linked to your Redeem account on the basis of your explicit consent, which you give when you tap Agree and continue at the start, together with our contract with you. You can withdraw it at any time by deleting your account in the app.
We don't collect your name, email (unless you email us), contacts, photos, GPS or precise location, or advertising identifier.
Who can see your prayer requests
Other Redeem users can see your request for 48 hours, as coming from "Someone in" your country. They can't see who you are or contact you. Our automated filter and, for some requests, a person on our team review requests to keep the community safe. Please don't include anyone's full name or contact details.
If you pray for a request that is later shared as answered, your country may be listed among the places prayers came from, but only when several people from that country prayed, and never your name. Turn off showing your country in You > Privacy to be left out.
Sharing a request by link
If you choose to share one of your requests with a "Pray for me" link, anyone with the link can see that request (your country and text) and tap to say they prayed, until the request expires after 48 hours or you turn the link off. Shared pages are hidden from search engines. When someone opens a shared page, we use a scrambled version of their IP address to limit repeated taps and stop abuse. A general version is kept for up to an hour. A version that only works for that one request is kept until the request closes, at most 48 hours after it went live, so we can count one prayer per network. Neither is used for anything else. To count one prayer (and one report) per visitor, the page also stores a random identifier in their browser, plus a note of which requests they've prayed for so the page can show that on a return visit. We keep only a scrambled version of it, and replace it with an unlinkable random value as soon as the request closes, at most 48 hours after the request went live. The number of prayers and any report reasons are kept without it. Only share a link if you're comfortable with people outside Redeem seeing your request.
Share cards you post to Instagram or elsewhere are created on your phone and shared by you; Redeem doesn't send them anywhere.
How we measure Redeem
To understand how Redeem is used and improve it, the app sends usage events (for example, "prayer completed") to PostHog under a random ID created on your phone. That ID isn't linked to your account, your purchases or your prayer requests; we don't send prayer text, and we don't collect your IP address or location for analytics. You can turn this off at any time in Settings, under Privacy, and it's always off for under-13s.
On our website's shared-request pages we keep only daily totals of page views and App Store taps; we don't store IP addresses, page links or browser identifiers for this. We also use Apple's App Store campaign links to see, in total, which of our posts lead to downloads. Apple shares only aggregate numbers with us. If we run ads on other platforms, Apple's privacy-preserving attribution (SKAdNetwork) tells us only how many installs or trials a campaign produced, never who. If you're 18 or over, haven't turned off usage data, and install Redeem from an Apple Search Ads ad, the app passes Apple's attribution token to RevenueCat, which tells us which campaign and keyword led to the install, linked to your random account ID, so we can see which ads work. We don't use advertising identifiers, use no advertising SDK, and never track you across other companies' apps or websites.
Safety and moderation
We check every request automatically before it appears, using a word filter and an automated moderation service. Requests that may break our guidelines are held for a person to review. If a request suggests someone may be at risk of harm, we don't publish it and we show helplines. A person on our team reads it, and it's only shared with the Prayer Pool if you choose to share it. If a request suggests someone may be at risk, we keep a safety record of it for up to 12 months, even if you haven't finished the consent steps, so our team can review it and offer help. We do this to protect people at risk of harm (safeguarding), which the law allows without consent. We may share information with the police or other authorities if we believe someone's life or safety is at risk, or if the law requires it.
If you post several requests about things like grief, anxiety or loneliness, Redeem may gently point you to support services. This happens only on your phone, it can be switched off in Settings (Gentle check-ins), and we never receive or store it.
Problem reports and feedback
If you report a problem or send feedback, we receive your message, any screenshot you choose to attach, and technical details about your device and the app (for example app version, iPhone model and the screens you used recently). We never include your prayer requests, other people's requests or the apps you've paused in those technical details, and you can see exactly what's sent before you send it. If you include your support code, we can link the report to your account; otherwise we can't. Please don't include anyone's personal details. If a screenshot shows someone else's request, we use it only to fix the problem. Like prayer requests, messages are checked automatically for signs that someone may be at risk, so we can offer help. Screenshots are deleted after 30 days and messages after 12 months, or sooner if you delete your account.
Launch and Android waitlists
If you join the iPhone launch list or the Android waitlist on our website, we keep your email address only so we can send you one email when Redeem is available (on the App Store, or on Android). We'll ask you to confirm it first, and we keep the date you confirmed as a record of your consent. We won't use it for anything else or share it, apart from our email provider (Resend), which sends the message for us. We delete your address after that email. If the email hasn't gone yet, we delete it after 6 months. You can leave either list at any time with the link in any email or by writing to support@getredeem.app. The lawful basis is your consent.
Invite links. If you join the iPhone launch list through someone's invite link, or share your own, we also keep a random invite code for you, the invite code that brought you (if any), and how many people confirmed their email through your link. We use these only to work out and send any reward you earn, as an Apple offer code in your launch email. Invite codes aren't made from your email, and we never tell you who joined through your link, or tell them about you. None of this is linked to your Redeem account in the app. If you earned a reward, we keep your address for 30 days after the launch email, in case the code doesn't work and we need to send another, then delete it with your invite record. Otherwise the 6-month and after-the-email rules above apply. Leaving the list deletes all of it straight away.
Who we share data with
We use a small number of service providers who process data only on our instructions:
- Supabase, which hosts our database, sign-in and server functions (London, UK region)
- RevenueCat, which manages subscriptions and, for adults, Apple Search Ads attribution (United States)
- PostHog, for usage counts; it never receives prayer text (EU region)
- Sentry, for crash reports (EU region)
- Expo, which relays push notifications to Apple (United States)
- Telegram, which delivers internal alerts to our team; an alert contains only an internal member number and the request's topic, never its text
- Resend, which delivers internal alert emails to our team; these contain only an internal member number and the request's topic, never its text
- Cloudflare, which stores our encrypted nightly database backups (EU region)
- OpenAI (moderation API), whose automated service checks request text before it is shown and doesn't use it to train its models (United States)
- Apple, for app distribution, purchases and push notifications
We never sell your data or share it for advertising.
International transfers
We store data in the UK (London), with some providers in the EU and the United States. If a provider processes data outside the UK or EEA, we rely on UK adequacy regulations or the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
How long we keep it
- Prayer requests leave the Prayer Pool after 48 hours. They stay in your history until you delete them or your account (free shows the last 7 days; we keep the rest so it's there if you choose Plus). Deleting a request removes it and the prayers recorded against it straight away, and any shared link to it stops working. If a request you delete was reported or flagged for safety, we keep the moderation record for up to 12 months, but the request leaves your history and the Prayer Pool immediately.
- When you delete your account, your data is removed from the Prayer Pool straight away and erased from our systems within 30 days, and from backups within 90 days.
- Moderation records (what was reported or removed and why) are kept for 12 months, or longer if needed for a legal claim or a report to authorities.
- Crash and usage data is kept for up to 12 months.
- Records of the notifications we've sent you are kept for 90 days (we keep the last two so we don't send too many). Sign-in security logs are kept for 90 days.
- Purchase records (what was bought, when, and the price) are kept for 6 years because tax law requires it. If you delete your account, they're kept without any link to your account.
- If you don't open Redeem for 2 years, we delete your account and data as if you'd deleted it yourself. Purchases stay with Apple and come back with Restore purchases.
- Feedback screenshots are deleted after 30 days and feedback messages after 12 months.
- Emails and website messages: up to 12 months after our last reply, unless we're working together, in which case for as long as we are.
- We back up our database every night. Backups are encrypted before they leave our systems, stored with Cloudflare in the EU, and deleted automatically after 90 days at most.
Your rights
You can access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time (delete a request or your account in the app). Withdrawing consent doesn't affect what happened before. To use these rights, email support@getredeem.app with your support code (in Settings, under Contact us). We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or your local data protection authority if you're in the EU.
Children
Redeem is for people aged 13 and over. If your device tells us you're under 13, the Prayer Pool is turned off and you can't post requests. If someone on an iPhone tells us they're under 13, the Prayer Pool stays off on that iPhone, even after Redeem is reinstalled, unless Apple confirms an older age. This is stored only on the iPhone. For users aged 13 to 17, and anyone who hasn't told us their age, we use more private defaults: requests marked as adult themes are never shown to them, they can't create share links, and we don't use Apple's ad-attribution information for them. If you believe a child under 13 has posted a request, email us and we'll remove it.
Security
Data is encrypted in transit and at rest, and access is limited to the people who need it to run Redeem.
Only a small number of authorised Redeem staff can open an account's record, which brings together its requests, prayer activity, reports, settings and subscription status. They do so only to moderate content, keep people safe, answer support requests or handle your data rights requests, and every view is logged.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.