Privacy Policy

Effective Date: June 7, 2026 Last Updated: June 7, 2026 Operated by: BrookMind LLC

This Privacy Policy explains how BrookMind LLC (operating as ORA Daily) ("ORA Daily," "we," "our," or "us") collects, uses, and protects personal information when you use our mobile applications, website, or related services (collectively, the "Service").

By using ORA Daily, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

1. Who We Are

ORA Daily is operated by BrookMind LLC, a privately held U.S.-registered company. We provide Catholic daily devotional content and spiritual resources.

Contact Information [email protected] BrookMind LLC

2. Information We Collect

A. Information You Provide

Account Data: name, email address, and authentication credentials when you register or sign in.
Payment Data: collected securely by third-party processors (Apple App Store, Google Play Store). ORA Daily never stores full payment card numbers.
User Content: notes, reflections, favorites, and other content you create within the Service.
Preferences: notification settings, content language preferences, and other customization choices.
Communications: messages, support requests, or feedback you send to us.

B. Automatically Collected Information

Usage Data: IP address, device type, operating system, session time, and activity logs related to your use of the Service.
Device Information: technical identifiers such as device model and OS version for debugging and optimization.
Analytics: anonymized or aggregated data about how the Service is used, such as feature engagement metrics.

C. App Store Privacy Nutrition Label

For transparency, ORA Daily's App Store listing reflects the following data practices:

Data Not Collected: sensitive identifiers (race, religion, health, sexual orientation, etc.), contacts, photos, audio, calendar, and other categories not required by the Service.
Data Not Linked to You: aggregated usage analytics that cannot reasonably be tied to your identity.
Data Used to Track You: none. ORA Daily does not link user or device data across third-party apps or websites for advertising or attribution.

3. How We Use Information

We process personal and technical data to:

Operate, maintain, and deliver the Service.
Manage subscriptions and process transactions.
Sync your content (notes, favorites) across devices.
Communicate with you (support, updates, billing).
Send notifications you have opted into (daily notes, Sunday Gospel).
Prevent fraud, abuse, or violations of our policies.
Improve the Service and develop new features.
Comply with legal obligations.

We do not use any data to track you across other companies' apps or websites, and we do not share data with data brokers.

4. Data Storage and Transfers

Our infrastructure is hosted on secure servers with encryption and access controls. For international transfers, we implement:

Standard Contractual Clauses (SCCs) where applicable.
Data Processing Agreements (DPAs) with service providers.
Encryption and access control consistent with industry standards.

5. Data Retention

We retain personal data only as long as necessary to provide the Service and comply with legal obligations.

Account Data: retained while your account is active.
User Content (notes, favorites): retained while your account is active. You may export or delete your content at any time.
Deleted Accounts: upon account deletion, your data is permanently deleted within 30 days, except where retention is required by law (for example, tax records relating to in-app purchases, which may be retained for up to 7 years).
Server Logs: retained for up to 30 days for security and operational purposes, then aggregated or deleted.
Access / Deletion Requests: we respond to verified requests within 30 days, in line with GDPR Art. 12 and equivalent regulations.

6. Data Security

We implement industry-standard security practices, including:

Encryption in transit (TLS) and at rest.
Access controls and authentication requirements.
Secure cloud infrastructure.

While we take reasonable precautions, no online service is completely secure. You use ORA Daily at your own risk.

7. Sharing and Disclosure

We share information only as necessary to operate the Service:

Service Providers: for hosting, analytics, email delivery, and customer support.
Legal Compliance: when required by applicable law or court order.
Business Transfers: if ORA Daily is involved in a merger, acquisition, or sale of assets.
With Consent: when you explicitly authorize disclosure.

We never sell, rent, or trade personal information.

8. Your Rights

Depending on your jurisdiction (GDPR, CCPA, and similar laws), you may:

Access, correct, or delete your personal data.
Request data portability or restrict processing.
Withdraw consent or object to certain uses.
File a complaint with a data protection authority.

Contact [email protected] to exercise these rights. We will verify your identity before processing any request.

9. Notifications

With your permission, ORA Daily sends:

Daily Notes: a daily devotional notification at your chosen time.
Sunday Gospel: a notification on Sundays with the Gospel reading and reflection.
Product Updates: occasional notifications about new features or content.

Permission is requested through Apple's UNUserNotificationCenter (or Android's equivalent). You can manage notification preferences granularly at any time, both in the app settings and in your device's system settings.

10. Third-Party Links

Our Service may link to external sites or services not operated by ORA Daily. We are not responsible for their content, policies, or practices.

11. Children's Privacy

ORA Daily is a Catholic devotional app intended for users of all ages, including families. We do not knowingly collect personal data from children under 13 without parental consent in compliance with COPPA (Children's Online Privacy Protection Act). For children under 13, a parent or guardian should supervise their use of the Service.

The Service does not require personal information to access core devotional content. ORA Daily is family-friendly, not directed to children under 13, and we do not use an active age-gate. If we learn that personal information has been collected from a child under 13 without parental consent, we will delete it promptly.

12. Subscription & App Store Data

All paid subscriptions are processed by Apple (App Store) or Google (Play Store). ORA Daily does not collect, transmit, or store your payment card number, CVV, or full bank details.

Apple acts as a payment processor on our behalf. Charges on your statement may appear as "BrookMind" or "ORA Daily".
You can view, change, or cancel your subscription at any time in your Apple ID account settings: https://apps.apple.com/account/subscriptions
Refund requests are handled by Apple in the first instance. Unresolved requests can be sent to [email protected].

13. Account Deletion

You can delete your ORA Daily account at any time from within the app (Settings → Account → Delete Account).

When you delete your account:

Your personal data is removed from our production systems within 30 days.
Backups are rotated out within 90 days, in line with standard backup retention.
We retain only what is strictly required by law (e.g., tax records of paid transactions).

If you cannot access the app to delete your account, email [email protected] from the address on file and we will action the request on your behalf.

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect operational or legal changes. The updated version will be posted with a new "Last Updated" date. Continued use of the Service after updates constitutes acceptance of the revised Policy.

For material changes, we will notify you in-app or by email at least 30 days before the changes take effect.

15. Contact Us

BrookMind LLC (ORA Daily) [email protected]