Clusti · Saintly Daily
Privacy
Last updated 3 August 2026
Praying in this app requires no account and sends nothing anywhere. One feature — the communion globe — is different, and is public on purpose. This page is mostly about telling those two things apart.
Praying sends nothing
The day's saint, the prayers, the silence, the rosary, the widget and the morning reminder all run on your phone. No sign-in, no profile, no email address. If you only ever use the app to pray, nothing about you is collected and no record of your praying is created anywhere — not by us, and not by anyone else.
Two things are stored on your phone and stay there: your reminder time and reading settings, and the list of intentions you have tapped to say you prayed for. Deleting the app deletes both.
The one place you are seen: the communion globe
If you post an intention, it is published to the open internet. Not to members, not to other users of the app — to anyone. It can be read on this website without signing in, and it can be opened as a shareable page with a generated image.
Posting an intention is always a deliberate act. Nothing is posted for you, and nothing about praying is posted unless you type something and send it. When you do, this is published and can be read by anyone:
- the words you wrote, up to 49 characters
- the display name shown beside it
- the city you picked from the list, its country, and that city's coordinates
- the drawn face assigned to your device
- the time you posted, and how many people have said they prayed with you
- an anonymous identifier for your device (see below)
The city is chosen, not detected
The app never asks for your location and cannot read it. There is no location permission because there is no location code — you pick a city from a fixed list, and that city's coordinates are what the globe uses. It is a place you named, not a place you were found in.
The anonymous identifier
The first time you post an intention, say you prayed for someone, or report something, the app creates an anonymous account with Firebase Authentication. It has no email, no password and no name, and it is not connected to your Apple ID. It exists so the app can tell that an intention is yours and stop one person counting themselves many times.
Be aware that this identifier is stored on each intention you publish, and that intentions are publicly readable. Two intentions posted from the same device can therefore be connected by someone reading the raw data. Deleting the app and reinstalling it creates a new identifier.
Moderation
Intentions are held until approved before they appear. If you report one, we store which intention was reported and the anonymous identifier of who reported it. Reports cannot be read back by anyone using the app.
Who else is involved
Google (Firebase)
Firebase Authentication holds the anonymous identifier. Firestore stores published intentions. Firebase Hosting serves this website and the day's artwork that the app downloads. As with any request to any website, Google's servers see the network request, including your IP address, and may keep their own operational logs under their terms.
The Firebase software inside the app also sends Google its own diagnostic pings about the SDK. These are not linked to you and are not used to track you.
Superwall
The screen that offers a subscription is delivered by Superwall. It uses its own anonymous identifier, your device's vendor identifier, and technical details such as device model, OS version, app version and language. We give it two further things: which language you read in, and whether you have finished the opening screens.
What we deliberately do not give it is anything about your praying. How often you pray, whether you prayed today, what you asked for — none of that is sent to Superwall or used to decide what you are shown. Earlier versions did send some of it; that was wrong and it was removed.
Apple
If you subscribe, Apple handles the payment. We never see your card, your address or your Apple ID. We only learn that a subscription is active.
What we do not do
- No advertising, and no advertising identifier. The app never shows the App Tracking Transparency prompt because it has nothing to ask for.
- No tracking of you across other apps or websites.
- No selling or sharing of anything to data brokers.
- No first-party analytics measuring how you use the app.
Children
The app is not directed at children and we do not knowingly collect anything from a child. The communion globe carries writing from strangers, which is why it is moderated. If you believe a child has posted something, write to us and we will remove it.
How long things are kept
The globe shows the last day of intentions, but published intentions remain stored after they leave the globe. Ask us and we will delete yours.
Your choices
- Post nothing. The whole of the prayer app works without ever publishing anything.
- Have something removed. Write to us with roughly when and from which city you posted and we will find it and delete it.
- Delete everything. Ask, and we will delete your published intentions and your anonymous identifier.
- Delete the app. That removes everything held on your phone. It does not remove anything you have already published — for that, write to us.
One honest limit: once something has been public it may already have been copied, shared or cached elsewhere. We can delete what we hold. We cannot reach into someone else's screenshot.
Depending on where you live
If you are in the European Economic Area or the United Kingdom, you have rights to access, correct, delete, restrict and object, and to receive a copy of your data. If you are in California, you have rights to know, delete and correct, and to not be discriminated against for asking. We do not sell or share personal information as those laws define it. Write to us and we will answer.
Changes
If this page changes in a way that matters, the date at the top changes with it.
Contact
Write to hello@clusti.app. It is a small project and a real person reads it.