Privacy Policy

This policy explains how Pines Intelligence, Inc. (“we,” “us”) collects, uses, discloses, and protects information when you use Chirho Prayer (also called ChiRho), including our native app, website, prayer tools, groups, and related services.

We do not sell personal information. ChiRho does not display third-party ads, use personal information for targeted advertising, or track you across other companies' apps or websites.

• Account and authentication information: your name, phone number, account identifier, and authentication records. The native app requires phone-number verification by one-time passcode through Clerk. We do not receive your one-time passcode.
• Prayer profile and preferences: religious tradition, prayer focuses, selected burdens, theme, voice, notification settings, and similar app preferences.
• Sensitive prayer categories: general health-related or other sensitive categories you select for prayer personalization. Please avoid entering unnecessary medical details or confidential information.
• Loved-one information: names, relationship categories, prayer categories, virtues, and other choices you provide to personalize prayers. We encourage first names only.
• Content and community activity: prayers, prayer requests, group messages, memberships, invitations, reports, blocks, and moderation records.
• Optional photos: photos you choose for your profile, home screen, prayer groups, loved ones, and prayer focuses, together with related file metadata.
• Notifications: push notification tokens and delivery preferences.
• Usage and diagnostics: first-party prayer view and share counters, feature activity, device and browser information, IP address, timestamps, crash information, and security or performance diagnostics.
• Organization payment information: if an organization purchases a web-based offering, Stripe processes its payment details. ChiRho does not receive full payment-card numbers. The native app does not sell subscriptions in this release.

• Provide, personalize, and maintain prayer experiences.
• Authenticate accounts, sync settings, and deliver requested notifications or service messages.
• Enable groups, sharing, reporting, blocking, and moderation.
• Generate prayer content and audio when you request those features.
• Protect users, prevent abuse, troubleshoot problems, and understand aggregate service performance.
• Comply with law and enforce our Terms of Use.

We disclose information only as needed to operate ChiRho, comply with law, protect people and the service, or complete a transaction you request. Our processors and infrastructure providers include:

• Clerk for account authentication, including phone OTP.
• MongoDB Atlas for application data storage.
• Vercel for web hosting and private Vercel Blob file storage.
• Railway for application and real-time service infrastructure.
• AWS S3 for service media and audio storage.
• Google Gemini and OpenAI for requested AI-assisted prayer features. Depending on the feature, the text sent may include prayer requests, first names, religious tradition, prayer categories, health or life concerns, user-supplied notes, group context, and recent prayer text.
• ElevenLabs for requested narration. ElevenLabs receives the generated prayer text and selected voice identifier needed to create the audio.
• Expo and Apple Push Notification service (APNs) for push notifications.
• SimpleTexting for service-related SMS, such as invitations or other messages you request.
• Stripe only for web organization payments where applicable.

ChiRho asks for separate permission before using personal information with third-party AI services. Phone numbers and uploaded photos are not included in prayer-generation or narration requests. Avoid entering confidential details or information about another person that you do not have permission to share.

Provider retention and model-improvement practices depend on the service and account tier. OpenAI API submissions and paid Gemini API submissions are not used for model training by default. Unpaid Gemini services may use prompts and responses to improve Google products. ElevenLabs workspace model-improvement sharing is disabled, although ordinary service and safety logs may still be retained. Providers may retain limited information for security, abuse prevention, troubleshooting, or legal compliance.

We require service providers processing personal information on our behalf to provide the same or equivalent protection described in this policy and required by applicable law.

We may also disclose information in response to valid legal process, to protect rights or safety, or as part of a merger, financing, acquisition, or transfer of assets, subject to appropriate notice and protections.

Photos are optional. Loved-one photos are stored in private Vercel Blob storage for your authenticated personal prayer experience. Profile, home-screen, group, and prayer-focus photos are shown in the account or community context you select. We do not use uploaded photos for facial recognition, advertising, or AI model training. Only upload photos you have permission to use.

Group content is visible to the members or administrators indicated in the product. If you intentionally create or use a public share link, anyone with that link may view and further share the linked prayer content. Public prayer content may include names or details you chose to include, but loved-one photos are not included in public prayer links or group shares. Review content carefully and obtain permission before sharing information about another person.

We keep information only as long as reasonably necessary for the purposes described in this policy. Retention depends on factors such as whether your account is active, the feature involved, user safety and moderation needs, legal and accounting obligations, dispute resolution, fraud prevention, and backup cycles.

You can remove individual content in the app where controls are provided, or request full-account deletion from Profile > Delete account. Full-account deletion removes or de-identifies the account and associated user content from active systems, subject to limited information we must retain for legal, security, fraud-prevention, or legitimate moderation purposes and copies that remain temporarily in protected backups. See our account deletion instructions.

You can update profile data and preferences, remove loved ones or photos, leave groups, manage notification permissions in the app or device settings, and delete your account. Blocking and reporting tools are available for certain community features.

AI-assisted prayer permission is separate from agreement to the Terms of Use. You may decline it during account creation. To withdraw permission later, use the Support link in Profile or email us. After withdrawal is processed, ChiRho will stop future transfers of your personal information to AI and narration providers; withdrawal does not reverse processing already completed at your request.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to appeal a privacy request decision. Email us to make a request. We may need to verify your identity before acting on it.

We use reasonable administrative, technical, and organizational safeguards, including encrypted network connections and access controls. No storage or transmission method is completely secure.

ChiRho is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child under 13 has provided personal information.

ChiRho and its providers may process information in the United States and other locations where they operate. Privacy protections in those locations may differ from those in your jurisdiction.

We may update this policy as the service or legal requirements change. We will post the revised policy and update its effective date, and provide additional notice when required.

Chirho Prayer is operated by Pines Intelligence, Inc. Questions or privacy requests can be sent to our monitored address: kendall at thepines.