Privacy Policy — OraVia

Last updated: September 9, 2026 · Applies to the OraVia mobile app (com.oravia.app) · Leer en español

OraVia is a Catholic prayer and formation app. It is built on a privacy-first principle: it works fully without an account, and your most personal content stays on your device.

What the app does NOT collect

• No advertising and no advertising trackers.
• We do not sell or share personal data with third parties.
• No background location.
• No data is collected from children. The family and children's sections are meant to be used with adult guidance and ask for no information at all.

Data that stays ONLY on your device

• Spiritual journal: stored encrypted (AES-GCM) on your phone, with the key held in the system's secure store. Nobody else can read it — not even us.
• Examination of conscience answers, private intentions, stories marked as read, badges, voice/speed/language preferences, and reminders.

Data sent to our servers

• Anonymous identifier: the first time you open the app, an anonymous session with a random identifier is created. It is not tied to your name or email unless you link an account, and it lets us keep the preferences and progress of this installation on the server.
• Account (optional): if you choose to link your email, it is used to create groups, appear in the rankings and back up your favorites and spiritual profile; your consistency points are synced only as totals. The breakdown of your practices stays private on your device.
• Notifications (optional): if you turn on reminders or community alerts, we store the notification token issued by your phone. It is used only to deliver those alerts, and it is removed when you turn them off or delete your account.
• In-app surveys: if you answer a survey (for example, the interest survey for Solidarity Donations), we store your answers without your name or email, to decide whether that feature is worth building.
• Intentions wall: the intentions you choose to publish, editorially moderated.
• Bug reports: the text and screenshots you choose to attach are sent to a private store that only the editorial team can read, solely to diagnose the problem.
• Audio: when you listen to content, the app requests already-generated audio from a shared cache; no personal data is sent with that request.

Third-party services

OraVia uses Supabase (database and storage, encrypted in transit over HTTPS), Firebase Cloud Messaging (notifications) and ElevenLabs (speech synthesis of prayer texts — never of personal data). External songs and videos open on their own platforms (Spotify, YouTube) under their respective policies.

Delete account and data

You can delete your account from the app, at Me → Account → Delete account, even if you never linked an email: the account and its server-side data are erased immediately and the app returns to anonymous mode. What lives only on your phone (journal, private intentions, preferences) is left untouched. What gets deleted, what is anonymized, and how to ask if you no longer have the app, is in Delete your account and data. To use another email on the same phone, delete the account and link the new one.

Contact

Controller: OraVia team · emq001@gmail.com

Changes to this policy will be published on this same page along with their update date.