Privacy Policy

Effective date: May 17, 2026

1. Introduction

Myrosa ("we," "our," or "the app") is a Catholic Rosary prayer application for iOS. We are committed to protecting your privacy. This policy explains what information the app accesses, how it is used, and your rights regarding your data.

This Privacy Policy describes the data practices of the Myrosa iOS app. The myrosa.app website is a static marketing page; the limited data Vercel collects when hosting it is described in Section 13 below.

2. Information We Do Not Collect

Myrosa does not collect, transmit, or store any personal data on external servers. Specifically, the app has:

• No user accounts or sign-in
• No general usage analytics or behavioral tracking
• No advertising or ad networks
• No crash reporting services
• No third-party SDKs that collect personal data
• No cloud database or remote storage

3. Information Stored on Your Device

All app data is stored locally on your device and is never transmitted to us or any third party. This includes:

• Prayer history — records of completed prayer sessions, including mystery set, duration, and completion status
• Preferences — language, voice selection, haptic settings, and display options
• Rosary design — bead colors, chain materials, medal choices, and lighting settings
• Profile information — display name and profile photo, used only within the app on your device
• Prayer intentions — personal prayer requests you enter during sessions

4. Device Permissions

Myrosa may request the following permissions, each used solely for the stated purpose:

• Camera — to take a profile photo during onboarding. The photo is stored locally on your device and is never uploaded.
• Photo Library — to select photos for the Prayer Wall and rosary medal companions. The app references photos by identifier only; it does not copy, import, or upload your photos.
• Calendar — to create prayer schedule events via iOS Calendar so family members can see shared prayer times. Events are created through Apple's EventKit framework and sync through your own iCloud or local calendar.

You can revoke any permission at any time through iOS Settings.

5. SharePlay (Group Prayer)

Myrosa supports praying together using Apple's SharePlay (GroupActivities framework). During a SharePlay session:

• Prayer progress, display names, and session state are shared peer-to-peer between participants
• All communication is encrypted by iOS
• No data passes through our servers — Apple's framework handles all connectivity
• No session data is retained after the session ends

6. Voice Packs

Optional voice packs (additional prayer voices) are downloaded from Apple's servers through the BackgroundAssets framework. These downloads are managed entirely by Apple's infrastructure. No third-party servers are involved.

7. Third-Party Services

The Myrosa iOS app uses Apple-provided frameworks plus one third-party service — RevenueCat — for managing in-app purchases, as described in Section 8. We do not integrate any third-party analytics, advertising, social media, or crash-reporting services into the app. The myrosa.app website uses Vercel for hosting and Postmark for the contact form, both described in Sections 13 and 14.

8. In-App Purchases

Myrosa offers optional Patron subscriptions (monthly and yearly) and a one-time Lifetime purchase. All transactions are processed by Apple through the App Store and StoreKit — Apple handles your payment, and Myrosa never receives your name, email address, or payment-card information.

To validate receipts and manage subscription entitlements, Myrosa uses RevenueCat, a purchase-infrastructure service operated by RevenueCat, Inc. When you make or restore a purchase, the App Store receipt and an anonymous app-user identifier generated on your device are sent to RevenueCat. Myrosa does not send your name, email address, or any custom identifier to RevenueCat. Consistent with the data-type "Purchases — Used for Analytics, and App Functionality" declared on Myrosa's App Store listing, RevenueCat may use this purchase data in aggregate to power features (such as entitlement checks and restore-purchases) and to provide subscription analytics. This data is not linked to your identity.

Apple's handling of payment information is governed by Apple's privacy policy at apple.com/legal/privacy. RevenueCat's privacy practices are described at revenuecat.com/privacy.

9. Data Deletion

You can delete all app data at any time from within the app. This removes all prayer history, preferences, profile information, downloaded voice packs, and design customizations from your device. Because no data is stored externally, there is nothing to delete from our servers.

You can also delete the app entirely, which removes all associated data from your device.

10. Children's Privacy

Myrosa does not collect personal information from anyone, including children under 13. The app is suitable for all ages.

11. Changes to This Policy

If we update this Privacy Policy, we will post the revised version on this page with a new effective date. We encourage you to review this page periodically.

12. Contact

If you have questions about this Privacy Policy, please use the contact form at myrosa.app/support and choose "Privacy question" as the topic.

13. Website Hosting

The myrosa.app website is hosted on infrastructure provided by Vercel Inc. When you visit this page, Vercel processes standard hosting data on our behalf:

• Hosting logs — IP address, user agent, requested URL, and request timestamp, used by Vercel for routing, abuse prevention, and operational reliability.
• Vercel Web Analytics — we have enabled Vercel's built-in analytics, which records anonymized page views and aggregate visitor metrics. Per Vercel's documentation, this product does not set cookies and does not perform cross-site fingerprinting.

This website disclosure is separate from the iOS app's data practices described in Sections 2–11. The Myrosa app itself does not include analytics, advertising, or third-party SDKs. For Vercel's own privacy commitments, see vercel.com/legal/privacy-policy.

14. Contact Form

The myrosa.app website includes an opt-in contact form on the Support page. If you submit a message through this form:

• Your email address, chosen topic, and message are relayed as a single notification to the site owner via Postmark, a transactional email service operated by ActiveCampaign LLC.
• The notification also includes basic spam-diagnostic metadata: timestamp, the page you submitted from, your browser's user-agent string, and the request IP address as forwarded by Vercel.
• This information is used solely to respond to your inquiry. It is not stored in a database, CRM, or marketing platform, and it is not used for marketing.
• It is not sold, rented, or shared with any third party beyond Postmark's role as the delivery mechanism and Vercel's role as the hosting provider.
• You can request removal at any time by submitting another message through the same form; we will delete the prior message containing your address from the owner's inbox.

Postmark's privacy practices are described at postmarkapp.com/privacy-policy.