Privacy Policy

Last updated: October 22, 2026

Daily Flame was made to help you pray more and use your phone less. We take your privacy seriously: data about how you use your apps never leaves your iPhone.

1. Who we are

Daily Flame (Oração em Dia in Portuguese) belongs to R. GONCALVES DESENVOLVIMENTO DE APLICATIVOS LTDA, Brazilian company tax ID (CNPJ) 22.792.201/0001-01, Rua Jandaia, 5742, Zona III, Umuarama-PR, CEP 87502-130, Brazil, which controls the data described here. Contact and data protection officer: [email protected].

2. Screen Time data

Blocking uses Apple's official Screen Time APIs (Family Controls, Managed Settings, and Device Activity). Apple gives the app only anonymous identifiers for the apps you choose. We don't know which apps they are or what you do in them, and none of this is sent to our servers.

3. Your prayers and your streak

Your prayer history, the mood you chose, your streak of days, and your settings are saved only on your device. If you delete the app, this data is deleted with it. The same goes for your blocking history (attempts to open blocked apps, unlocks, and pauses), which never leaves the device.

4. Candle on the Lock Screen (Live Activity)

When you unlock your apps with a prayer, the app can show the candle with the countdown on the Lock Screen. So the candle can keep melting while the app is closed, the app sends our server a notification token that Apple generates for that Live Activity, the start and end times of the unlock, and the number of days in your streak. This data doesn't identify you, is used only to update the candle, and is deleted one day after the unlock ends. You can turn off the candle in the app under Settings > Candle on the Lock Screen.

5. Prayer requests by link (not yet available in the app)

If you create a prayer request to share, the text and the name you choose (optional) stay on our server for up to 30 days and are then deleted. Anyone with the link can see the request and mark that they prayed for it. So write only what you are comfortable showing to anyone who receives the link.

• To count each person once, we store only an irreversible summary (hash) of the device key or the IP address of the person who prayed.
• You can delete the request in the app at any time. The prayers and reports linked to it are deleted with it.
• Anyone can report a request. Requests reported by several people are hidden automatically, and texts with profanity, insults, or links are not accepted.

6. Prayer partner (not yet available in the app)

If you invite someone or accept an invitation to pray together, we store the name you chose, the days you prayed, and your streak count. Your partner sees this information, and the app uses the days to light the shared flame.

To recognize your device without knowing who you are, the app creates a random key, and the server stores only an irreversible summary (hash) of it. Unused invitations expire after 48 hours. When either of you ends the partnership, this data is deleted; partnerships with no activity for 180 days are also deleted, and the days prayed are deleted after 400 days.

7. Statistics and ad measurement

Through version 1.0, they are off by default. Starting with version 1.0.1, they are on by default, and you can turn them off at any time in Settings → Privacy → Statistics. When they are off, the app sends nothing through any of the channels below.

When they are on, they send usage counts, such as prayers completed, onboarding steps, and subscription screens viewed, along with the app and iOS versions, through two channels:

• Our server: receives only daily totals, with no identifier for you or your device, and does not store the sender's IP address. We keep the sum for all people per day and per app version, for up to 2 years.
• TelemetryDeck: shows how people move through the app, for example how many people who finish onboarding go on to pray their first prayer. The app's identifier on the device is hashed twice before it reaches TelemetryDeck, which does not receive your name, email, Apple ID, or IP address.

Starting with version 1.0.2, they also notify Meta (Facebook and Instagram) when the app is installed and each time it is opened. This way we know which of our ads brought people to the app, and Meta shows the ads to people who are more likely to install it.

• What is sent: the install or open notice, a random identifier created on the device by Meta's SDK, technical device data (such as model, iOS and app version, language, time zone, and carrier), and the sender's IP address.
• What is not sent: your prayers, your streak, anything about blocking, your name, email, or Apple ID, or the iPhone's advertising identifier. The app does not ask for permission to track you.
• How Meta uses it: without that permission, Meta says it restricts the use of this data and combines it in aggregate to measure ads. Meta handles this data under the Meta Privacy Policy.

Nothing that happens on the block screen goes into these statistics.

8. Subscriptions

Purchases are processed by Apple. We use RevenueCat to check whether your subscription is active. RevenueCat receives an anonymous identifier generated by the app and the purchase details (product, date, and expiration), and notifies us when a subscription starts, renews, or is canceled. We keep these notifications for 400 days. We do not receive your name, email, or payment details.

9. Where data is stored and who helps us

We use a few providers only to deliver the service. They process data on our behalf, with protection equivalent to ours:

• Apple: purchases, notifications, and the Live Activity.
• RevenueCat: subscription verification.
• MongoDB Atlas: our server's database.
• TelemetryDeck: the app's usage statistics, when they are on.
• Meta: measurement of our ads on Facebook and Instagram, when the app's statistics are on (section 7) and, on the website, when you accept "Anúncios" (section 11). Meta also uses this data for its own purposes, under its own privacy policy.
• Cloudflare: delivery and protection of the website and the server, and counting visits to the website (Cloudflare Web Analytics).
• Hosting provider: the virtual server where our API runs.

The server's access logs keep IP addresses for up to 14 days, for security and troubleshooting. Statistics submissions are not included in these logs, and our API does not store IP addresses in its own logs.

10. Notifications

Reminders are local notifications, scheduled on the device itself. You can turn them off at any time in the app or in your iPhone's Settings.

11. What we don't do

• We don't show ads in the app.
• We don't track you across apps or websites: the app doesn't ask for tracking permission and doesn't use the iPhone's advertising identifier.
• We don't sell your data. The only sharing for marketing is with Meta, to measure our ads: from the app, the install and open notice, when statistics are on (section 7); from the website, the Meta Pixel events described below, when you accept "Anúncios".
• To know how many people visit the website and which pages they view, it uses Cloudflare Web Analytics, which counts visits without cookies and without identifying you. The prayer request and invitation pages don't use analytics tools.
• The sign-up and subscription pages (oracaoemdia.online/comecar) use the Meta Pixel only if you accept "Anúncios" in the privacy notice. It then receives your visits to those pages, the sign-up (without your email), the opening of the payment step, and the purchase or the start of the free trial with the plan's price, together with Meta's own cookies (_fbp and _fbc), your IP address and browser data. Your quiz answers, prayers, journal, email and name are never sent. To withdraw, use "Preferências de privacidade" in the footer of those pages.

12. Your rights (LGPD) and data deletion

You can delete your prayer requests and end partnerships directly in the app. To request information about, correction of, or deletion of the subscription data associated with your anonymous identifier, or for any other request, write to [email protected]. We respond within 15 days.

To stop sending data to Meta, turn off Settings → Privacy → Statistics in the app and, on the website, turn off "Anúncios" in "Preferências de privacidade". To see and delete what Meta has received from apps like ours, use "Your activity off Meta technologies" in the Facebook or Instagram Accounts Center. Deleting the app also deletes the random identifier the SDK created on the device.

13. Children

The app can be used by people of all ages. We do not knowingly collect personal data from children.

14. Changes to this policy

If this policy changes, the date at the top of the page is updated. Important changes are also announced in the app.