covered.

Privacy Policy Terms of Use Support

Privacy Policy

Last updated: September 21, 2026

covered. is operated by Bilski Apps LLC ("we", "us", or "our"), a company based in the United States. covered. helps you share prayer requests and pray together with people you invite. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the covered. app on iOS and Android and to our website at https://coveredwithprayer.com. By using covered., you agree to this policy.

Information we collect

• Account information. When you sign in with Apple or Google, we receive your name and email address and a unique account identifier. If you create an account with an email and password, we store your email and a securely hashed password (we never see or store your actual password).
• Profile information. Details you choose to add, such as a profile photo, church or community name, and birthday. Your birthday is used to confirm that you meet the app's minimum-age requirement and may also be used for age-related context in the app. It is never shown to other users. If you pick your church from the map search rather than typing it in, that church's location is saved with it — see Your church's location below.
• Phone number (optional). You may add your phone number so friends who already have you in their contacts can find you. Before your number is used for this, we verify it by sending you a one-time code by text message through our SMS provider (Twilio). Your phone number is kept private — it is never displayed to other users — and it is only used for matching if your profile's discoverable setting is on. We never use your phone number for marketing, and we never share it with third parties or affiliates for marketing or promotional purposes. See Text messages (SMS) below.
• Content you create. Prayer requests, notes, updates, photos you attach, and the prayer circles you create or join. Journal entries are private to you and are not shared with any circle.
• Contacts (optional). If you grant contacts permission, the app reads the phone numbers in your device's address book and sends those numbers to our servers to check which of your contacts already use covered.. Contact names are never uploaded. The numbers are used transiently for matching and are not stored on our servers, and only users who have turned on discoverability and verified their own phone number are matched. Any member of a circle can use contact matching while suggesting or inviting someone to that circle; it is not limited to circle admins. You do not need to add your own phone number to search your contacts. You can decline contacts permission entirely, and the rest of the app continues to work without it.
• Circle invitations. We keep records needed to manage circle invitations, including the circle, the person invited, the member who suggested or sent the invitation, its approval status, and related timestamps. If a regular circle member suggests someone, the suggestion is shown to the circle admin for review and is not shown to the proposed recipient unless the admin approves it. Invitations sent by the circle admin do not require this review. In every case, the recipient must accept before becoming a circle member.
• Usage & device information. Basic app activity (for example, when you mark that you prayed, your streaks, and circle membership) and, if you enable notifications, a push notification token so we can deliver reminders and updates through Apple and Google's notification services. We also keep notification and activity records so the app can show your activity feed, unread badge, and notification history. Depending on the event, those records may include an internal user, prayer, or circle identifier; a member's display name and profile-photo snapshot; a prayer title; a circle name; the event type; and when it occurred.
• Analytics. We use Mixpanel to understand how the app is used. Mixpanel automatically records basic app and session activity. We also record product events such as completing signup and creating, praying for, or answering a prayer. Analytics data may include your user ID, name, email address, subscription plan, signup method, device platform, app version, internal prayer or request identifiers, and whether an action applied to all copies of a prayer. It never includes the text of your prayers, testimonies, journal entries, or notes. We do not use advertising identifiers (IDFA/GAID), and we do not use analytics data for advertising.
• Approximate location. covered. uses your device location for two things, and never stores your location on our servers. First, the "time of day" appearance theme calculates local sunrise and sunset times entirely on your device; that location is not sent anywhere. Second, if you choose to look for nearby churches during setup, the app rounds your position to roughly one kilometre and sends that approximate area — never your exact location — to OpenStreetMap, which returns a list of nearby churches. We do not receive or keep either value. If you deny the location permission, the theme falls back to your device clock and you can still search for your church by name.
• Your church's location. If you pick your church from that search, we save the church's coordinates — the location of a public place, not your own position — together with its name on your profile. We use this only to suggest people who attend churches near yours when someone is adding members to a circle. It is never shown to other members and never included in what the app sends back to anyone. If you type your church in by hand instead, no coordinates are saved, and changing or clearing your church in Profile → Edit profile removes them.
• Subscription information. If you purchase covered. Pro, your payment is processed by Apple (App Store) or Google (Google Play) — whichever store you purchased through — and your subscription status is managed through our payments provider (RevenueCat). We receive your subscription status but never your credit card or payment details.

How we use your information

• To provide the app: create your account, show your prayer requests to the circles you share them with, match you with friends when you use contact discovery, manage circle invitation suggestions and approvals, and deliver notifications you opt into.
• To verify your phone number by one-time text message when you choose to add one.
• To send transactional emails, such as email verification codes, password reset codes, and account notices.
• To operate and secure the service, review reports, prevent abuse, enforce our Terms, and maintain community safety.
• To provide customer support and respond to your requests.
• To manage subscriptions and process purchases.
• To understand usage and improve the app (see Analytics above).

We do not sell your personal information, we do not show ads, and we never use your prayer content for advertising or marketing.

Text messages (SMS)

covered. does not send marketing or promotional text messages. The only text messages we send are one-time phone verification codes (one-time passcodes), and we send one only in direct response to a request you make in the app.

How you consent. Adding a phone number is optional. On the "Add your phone number" step during onboarding, and in Profile → Edit profile, the screen states that by entering your number and tapping to send a code you agree to receive a one-time verification code by text message from covered., and it links to this Privacy Policy and to our Terms of Use. You opt in by entering your own mobile number on that screen and tapping the button to send the code. We do not collect SMS consent anywhere else, and we never buy, sell, rent, or obtain phone numbers or messaging consent from any third party or data provider.

Consent is never required. You are not required to give a phone number or to agree to receive text messages in order to create an account, use covered., search your contacts, or purchase a subscription. Adding and verifying your number only allows friends who already have that number in their contacts to find your discoverable profile.

Message frequency. One message per verification request — in practice one message, plus one more if you ask us to resend the code. This is not a recurring program; we never send unsolicited texts.

Cost. Message and data rates may apply, depending on your carrier and mobile plan. covered. does not charge you for text messages.

Opting out and getting help. Reply STOP to any text message from us to stop receiving text messages at that number. No further verification texts will be sent to it. Reply HELP for help, or email contact@bilskiapps.com. You can also remove your phone number at any time in Profile → Edit profile, which stops verification texts and prevents other users from finding your profile by matching that number. Carriers are not liable for delayed or undelivered messages.

No sharing of mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party or affiliate for any purpose, and are excluded from every category of information sharing described in this Privacy Policy. We disclose your phone number only to the SMS provider (Twilio) that delivers your verification code on our behalf, as a subcontractor acting solely on our instructions, and to no one else. We do not sell, rent, license, or trade phone numbers or SMS consent data.

How your information is shared

• With people you choose. Your name, profile photo, church name, prayer requests, notes, and prayer activity are visible to the members of the circles you share them with. Requests you mark as anonymous hide your identity from other members. You control whether other users can find your profile through search or contact matching with the discoverable setting in your profile.
• For circle invitation review. When a regular circle member suggests inviting you, the circle admin can see your name, profile photo, church name, the suggesting member's identity, and the circle involved so the admin can approve or decline the suggestion. You do not receive the invitation unless it is approved. If the circle admin sends the invitation, no additional approval is required. An invitation never adds you automatically; you must accept it before joining the circle.
• Service providers. We use trusted providers to run the app, and they process information on our behalf to provide their services: Apple and Google (sign-in, app distribution, payment processing, and notification delivery), RevenueCat (subscription management), Resend (transactional email), Twilio (phone verification texts and carrier opt-out/help responses), Mixpanel (usage analytics), Expo (app services and notification delivery for supported tokens), OpenStreetMap (nearby-church lookup, which receives only an approximate area rounded to about one kilometre and never your exact location), and Replit and its infrastructure providers (application hosting, database, private file storage, and related infrastructure). Notification providers receive the delivery token and notification payload needed to deliver a message. Private prayer content is not provided to a service provider unless needed to perform the service you requested, secure or support the app, or comply with law.
• Legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of our users and the service.

We never share your prayer content, journal entries, birthday, phone number, or contacts with advertisers or data brokers, and we do not sell your personal information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories above exclude text messaging originator opt-in data and consent; that information will not be shared with any third parties.

Data retention and deletion

We keep your information for as long as your account is active. You can permanently delete your account at any time from Profile → Delete account inside the app on either platform. Deleting your account removes your profile and account content, including prayer requests, journal entries, notes, and profile information, from our active database. We also initiate deletion of photos stored on our behalf. Storage deletion is best-effort and may take additional time if a provider is temporarily unavailable. Limited records may remain where reasonably necessary for security, fraud prevention, legal compliance, resolving disputes, or maintaining de-identified activity shown to other users. Records already held by service providers, such as email-delivery logs and analytics records, are subject to their own retention schedules. You may also email us at contact@bilskiapps.com to request deletion or ask a question about retained information.

Security

We protect your information with industry-standard safeguards, including encryption in transit (HTTPS/TLS), securely hashed passwords, and rate limiting to resist unauthorized access attempts. Phone verification codes are generated and checked by our SMS provider (Twilio) and are never stored on our servers. Access to your prayer content is restricted by server-side controls to you and, where applicable, the members of the circle you shared it with.

How your prayer content is stored. Your prayer requests, journal entries, and notes are stored on our servers so the app can display and sync them across your devices and circles. This content is not end-to-end encrypted, which means our systems can process it to operate the service. We do not read your private content except where strictly necessary to operate, secure, or support the service, or where required by law. No method of transmission or storage is completely secure; we will notify you of a breach affecting your data as required by applicable law.

Children's privacy

covered. is not directed to children under 13, and you must be at least 13 to use the app. We ask for a birthday during setup and prevent a person who indicates that they are under 13 from completing onboarding. We do not knowingly collect personal information from a child under 13. If you believe a child under 13 has created an account or provided us information, email contact@bilskiapps.com and we will investigate and delete the account and information as appropriate.

Your rights

Depending on where you live (including under U.S. state privacy laws such as the California Consumer Privacy Act), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing, and to appeal certain decisions about a request. You can correct profile information or delete your account directly in the app and manage contacts, location, photo, and notification permissions in your device settings. To request a copy or export of your information, ask us to correct information you cannot edit, object to or restrict processing, appeal a prior response, or make another privacy request, email contact@bilskiapps.com with the subject line "Privacy Request" and describe what you are requesting. We may ask you to verify your identity before fulfilling a request so we do not disclose or delete information for the wrong person. We will acknowledge and respond within the time required by applicable law. We do not discriminate against anyone for exercising a privacy right. We do not sell personal information or share it for cross-context behavioral advertising, and we honor supported privacy requests for all users regardless of location.

Where we operate

covered. is operated from and currently offered in the United States. We and the service providers listed above may process or store information in the United States and in other locations where they operate. If you use the app from outside the United States, your information may be transferred to a country whose data-protection laws differ from those where you live. If we make the app available in additional regions, we will update this policy and use any transfer safeguards required by applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where appropriate, notify you in the app or by email.

Contact us

Bilski Apps LLC
Email: contact@bilskiapps.com
Website: https://coveredwithprayer.com