Privacy Policy

Effective October 7, 2026

Bless is a place to pray for the people you love. Prayer is personal, so we have tried to build Bless to collect as little as possible and to keep what we do collect carefully. This policy explains, in plain language, what information the Bless app and blessme.now (together, "Bless") handle, why, and the choices you have. "We," "us," and "our" mean the team that operates Bless.

1. Information we collect

Your account

You sign in with Apple. Apple gives us an identifier that is unique to your account in Bless, which is how we recognize you when you sign in again. We do not ask Apple for your email address and we do not keep one. To keep you signed in securely, we record each sign-in session along with the IP address and device or app version that started it.

Your profile

You choose a username and display name, and you can add a short bio and a profile photo. When you upload a photo we re-save it on our servers, which removes hidden information such as the location where it was taken. Your username, display name, bio, and photo are visible to other people on Bless. Your profile link (blessme.now/your-username) and invitation links you send open a simple public web page that shows only your display name and photo, so the person who taps it knows who it is from — prayer requests are never shown on the web. We also store your time zone so your day resets at the right time.

Your phone number

We ask you to verify a phone number so the people who already have you in their contacts can find you and pray for you. To send the verification code, your number goes to our SMS provider, Twilio. On our servers, your number is converted into a keyed hash: a one-way code made with a secret key that only our servers hold, so it can be matched against the same code later but cannot be turned back into your number without that key. We keep only that hash, never the number itself, and we never show it to anyone.

Your contacts (only if you allow it)

If you give Bless access to your contacts, the app sends the phone numbers in your address book to our servers over an encrypted connection. Our servers immediately convert each number into a keyed hash and discard the number. Names, photos, and every other detail in your contacts stay on your phone — the app shows them to you from your own address book. We use the hashes to show you which of your contacts are on Bless, to let you invite people who are not, and to suggest people you might know. We never tell anyone which numbers you have, and we never contact your contacts ourselves: invitations are sent from your own Messages app, by you.

If you invite someone who is not on Bless yet, we keep a keyed hash of their number so that if they later join and verify that number, the prayers people said for them can find their way to them.

Prayer requests

You can share a short prayer request. Before anyone else sees it, it is checked for safety (see section 3), and a short prayer is written for the people who pray for you to read. You choose whether a request is shared with everyone on Bless or only with your people. If a request suggests you may be going through something dangerous, we keep it among your people rather than strangers and show you resources where you can find help right away.

Prayers, cards, and activity

When you pray for someone, we record who you prayed for, when, and for how long, so prayers can be counted, the people you pray for can know someone prayed for them, and you can unlock scripture cards. We keep the cards you collect and a simple activity history (for example, "someone prayed for you" or "someone followed you").

Following, blocking, and reports

We store who you follow, who you block, and any reports you make, so we can show you the right people and keep Bless safe.

Notifications

If you turn on notifications, we will use OneSignal to deliver them. OneSignal receives a device token for your phone and the notification itself; we store which kinds of notifications you want.

What we do not collect

We do not collect your location, your browsing activity, or your contacts' names or photos. We do not use advertising identifiers, third-party analytics, or tracking tools in the app. This website sets no cookies and loads nothing from third parties.

2. How we use information

We use information only to run Bless: to sign you in, show your profile and feeds, connect you with people you know, count prayers and award cards, check prayer requests for safety and write prayers, send notifications you have turned on, respond to reports, prevent abuse and fraud (for example, limiting how many messages or requests can be sent), and meet our legal obligations. Our server logs are written so that they never contain phone numbers, contact details, or the text of prayer requests.

3. Who we share information with

We never sell your information, and we do not share it for advertising. We share it only in these ways:

• Other people on Bless see your username, display name, bio, profile photo, the prayer requests you choose to share with them, and the people you have prayed for when that is part of the experience (for example, "someone prayed for you"). Your phone number and your contacts are never shown to anyone.
• Google Cloud hosts our servers, database, photo storage, and this website in the United States.
• TypeSafe checks the text of each prayer request for safety (for example, hate, harassment, or sexual content) before it is shown to others, and checks the prayers we write.
• Google Gemini writes the short prayer that goes with a prayer request, and may serve as a backup safety check.
• Twilio sends the text message that verifies your phone number.
• Apple provides Sign in with Apple and delivers notifications.
• OneSignal sends notifications you have turned on.
• For legal reasons, if we are required to by law, or when we believe in good faith it is necessary to protect someone's safety or the rights and safety of Bless and its community.

Prayer request text is processed by TypeSafe and Google to keep Bless safe and to write prayers. Profile text and report notes are checked by the same services. We send them only the text, never your name, phone number, or contacts. Our service providers may process information only to provide their service to us.

4. How long we keep information, and deleting your account

We keep your information while your account is open. You can delete your account at any time from the app's settings. When you do, we remove your profile (username, display name, bio, and photo), your phone number hash, your contacts' hashes, the people you follow and who follow you, your blocks, your sign-in sessions, and the text of your prayer requests. We keep a record that prayers happened, without your profile attached, so other people's prayer counts stay accurate, and cards you collected may remain in anonymized form. Copies in our encrypted backups are replaced on their normal schedule, typically within about 30 days.

If you just want to change something, you can edit your profile or remove a prayer request in the app at any time.

5. Security

Everything between the app and our servers is encrypted in transit. Phone numbers are kept only as keyed hashes, and the key never leaves our servers. Photos are stored privately and are served only through our own servers, never from a public storage link. Our API keys for TypeSafe, Google, and Twilio live only on our servers. No system is perfectly secure; if you believe you have found a security problem, please write to support@blessme.now.

6. Children

Bless is for people who are 13 or older. We do not knowingly collect information from children under 13. If you believe a child under 13 is using Bless, please contact us and we will delete the account.

7. Your choices and rights

• View and edit your profile in the app.
• Turn contacts and notifications access on or off at any time in your phone's Settings.
• Block or report anyone from their profile.
• Delete your account in the app.
• Ask us for a copy of your information, or to correct or delete it, by writing to support@blessme.now. Depending on where you live, you may have additional rights under local law, and we will honor them.

8. Where information is processed

Bless is operated from the United States, and our servers are in the United States. If you use Bless from elsewhere, your information will be processed in the United States.

9. Changes to this policy

If we change this policy, we will post the new version here with a new effective date, and if the changes are significant we will let you know in the app.

10. Contact

Questions or requests about privacy: support@blessme.now