← Back

Privacy Policy

Last updated: April 12, 2026

Overview

Six Hail Marys ("the App") is designed with privacy at its core. We do not collect personal information, do not require accounts, and do not store any confession or spiritual reflection content on our servers.

No Confession Content Storage

Examination of conscience responses, personal reflections, prayer intentions, and any content related to sacramental preparation are processed on-device only. This data is never transmitted to or stored on our servers.

Analytics Architecture

We collect minimal, anonymous analytics to understand aggregate usage patterns and improve the App. Our analytics system is designed as follows:

  • •Hashed IP addresses. IP addresses are one-way hashed using a cryptographic hash function with a rotating salt. The salt is changed regularly, making it impossible to correlate hashes across rotation periods or reverse them to the original IP.
  • •Country-level geography. We read the country code from Cloudflare's CF-IPCountry header for aggregate statistics. The raw header is used in memory and immediately discarded. No city, region, or coordinate data is stored.
  • •No device fingerprinting. We do not fingerprint devices, browsers, or sessions.

No Third-Party Tracking

The App does not include any third-party tracking scripts, advertising SDKs, or analytics services that share data with external parties. There are no ads in the App and there never will be.

Data We Do Not Collect

  • •Names, email addresses, or phone numbers
  • •Confession or examination of conscience content
  • •Location data beyond country-level
  • •Device identifiers or advertising IDs
  • •Browsing history or cross-app tracking data
  • •Contact lists, photos, or other device data

Prayer Wall

If you choose to submit a prayer intention to the communal prayer wall, that text is stored on our servers. Prayer wall submissions are anonymous and cannot be linked to any individual. You may choose not to use this feature.

GDPR Compliance

For users in the European Economic Area: because we do not collect personal data as defined by the GDPR, most obligations do not apply. However, we respect the spirit of the regulation:

  • •We process the minimum data necessary
  • •We do not transfer personal data to third countries
  • •We do not engage in profiling or automated decision-making
  • •Our analytics data cannot identify individuals

Data Subject Rights

Although we do not hold personal data, we honour data subject requests. If you believe we hold any data relating to you, contact us at [email protected] and we will respond within 30 days.

Children

The App is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the App. Continued use after changes constitutes acceptance.

Contact

For questions about this policy, contact us at [email protected].