Rosary Count — Privacy Policy
Last updated: 8 September 2026
Rosary Count is published by JMJ Consultancy Services ("we", "us"). It lets a pilgrim record how many decades of the Rosary they prayed each day and see their group's, country's and the world's totals.
We ask for as little as the app can work with, and we do not sell anything.
What we collect
| Data | Why | Kept |
|---|---|---|
| Email address | To sign you in. We send a one-time link; there is no password. | Until you delete your account |
| Display name | So your group sees who prayed. Shown only to members of your own group and to your group's admins. | Until you delete your account |
| Decades prayed per day, and an optional intention you type | The purpose of the app: your daily entry and the group totals built from it. | Kept after account deletion, without your name attached (see below) |
| Group membership and role | To show you your group and to let admins approve members. | Until you delete your account |
| Profile photo, if you add one | So your group recognises you. Shown only to members of your own group and to your group's admins. Optional; the app works without one. | Until you replace or remove it, or delete your account |
| An event picture, if you organise an event | It is the event's own picture, shown to the people who joined it. | Until the organiser replaces or removes it |
| An email address a group leader invites | To send that person the group's join code and record who was asked. | Until they join (the record then belongs to their account), or 90 days after the last invitation if they never join |
| Device push token, if you turn on the daily reminder | To deliver reminders. | Until you turn reminders off, sign out, or delete your account |
| Web push subscription, if you turn on announcements from your group | So your group's leader can send a short notice (“we start tonight”) to members who chose to receive it — at most three a day per group. The message is encrypted to your browser; the push service cannot read it. | Until you turn announcements off, or delete your account |
| Your reminder time and its timezone, if you set one | To send the reminder at the hour you chose, where you actually are. The timezone is the name of the zone (“Asia/Dubai”), not a location. | Until you clear the reminder, or delete your account |
| Which emails you have asked for | Three separate switches — a daily reminder, a weekly summary, and notices when your group reaches something. All are off unless you turn them on, and each can be turned off on its own. | Until you delete your account |
| An unsubscribe token | A random value in the unsubscribe link at the bottom of those emails, so one tap works without signing in. It identifies your account and nothing else. | Until you delete your account |
| Session cookie | To keep you signed in. Strictly necessary; not used for tracking. | Until you sign out or it expires |
Photos you upload are re-encoded on our servers before they are stored, which removes the camera information the file carries — including GPS coordinates. We keep the picture, never where or when it was taken.
We do not collect your phone number, location, contacts, advertising identifiers or usage analytics — there is no phone sign-in, so we never ask for a number at all. There is no third-party analytics or advertising SDK in the app. We do not track you across other apps or websites.
Where your data lives
Personal data (email address and display name) is stored on servers in the United Arab Emirates and stays there. Backups are encrypted and kept on UAE storage. (Maintainers: this claim is tracked in store/data-residency.md.)
Who can see what
- Your group's members see your display name, your profile photo if you
added one, and the decades you logged today, in the group breakdown. A photo is served only to people who share a group with you.
- Your group's admins additionally see your day's entries and may correct
a mistaken entry. Every correction is recorded in an audit log.
- A super admin (the pilgrimage organiser) can see all groups and export
the logs as a spreadsheet for the pilgrimage's own records.
- Nobody else. Intentions you type are visible to your group's admins
alongside your entry; do not type anything you would not want them to read.
- The nightly summary posted to the pilgrimage's group chat contains totals
only — no names.
Sharing with others
We do not sell or rent personal data and we do not share it for advertising. We use these processors only:
- Email delivery for the sign-in link and for group invitations. These
are the only places an address leaves our servers.
- Expo push notification service, only if you turn on the daily reminder.
- Your browser's push service (operated by Google, Apple or Mozilla), only if you turn on group announcements. It carries the encrypted message and cannot read it.
Your choices
- See your data: everything the app holds about you is on your own
screens (Today, History, Settings).
- Turn off reminders: Settings → clear the reminder time.
- Turn off any email: Settings → Emails from Rosary Count, or the unsubscribe link at the bottom of the email itself. Sign-in emails are not a list and cannot be turned off — you need them to get in.
- Leave your group: Settings → Leave group.
- Delete your account: Settings → Delete account. This immediately
removes your email address, name and profile photo, ends every session, and removes you from your group. Your past daily counts remain as anonymous numbers so the pilgrimage's historical totals do not change — they can no longer be linked to you.
- Remove your photo: Settings → remove photo. It is deleted, not hidden.
- Report a picture: write to support@rosarycount.com. We can remove any
profile photo or event picture, and we do so within two working days.
- Ask us anything: privacy@rosarycount.com. We answer within 30 days.
Children
Rosary Count is intended for pilgrims aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child has an account, write to privacy@rosarycount.com and we will delete it.
Changes
If we change this policy we will update the date above and, for a material change, tell you in the app before it takes effect.
Contact
JMJ Consultancy Services — privacy@rosarycount.com https://rosarycount.com/privacy