Effective date: August 20, 2026

Applies to: the Holy Heroes mobile application for iOS and Android (com.holyheroes.app) and the app experience at app.holyheroes.com (together, the "App").

Holy Heroes, LLC ("Holy Heroes," "we," "us") provides family-oriented Catholic audio and media through the App. This policy explains what information the App collects, why, and the choices you have.

1. Information we collect

Account information. When you create an account we collect your name and email address. If you sign in with Apple or Google, we also receive the identifier those services share with us. Authentication is handled by our provider Clerk; we never see or store your password.

Subscription and purchase information. If you subscribe or buy a story add-on in the iOS or Android app, your purchase is processed by Apple (App Store) or Google (Google Play). If you subscribe in a web browser at app.holyheroes.com, the purchase is processed by our subscription provider RevenueCat and its payment processor. In every case we receive your subscription status and transaction history (product, dates, renewal state) through RevenueCat, and we never receive or store your payment card details; for web purchases we share your account email address with RevenueCat so the purchase can be attached to your account. For each one-time story add-on we keep a purchase record: the product, the store it was bought from, the purchase date, the store's transaction identifier, which story you chose to unlock, and whether the purchase was later refunded. Purchases are associated with the Holy Heroes account that was signed in when you bought them.

Listening activity and preferences. To make the App work across your devices we store your favorites, playlists, playback position, listening streaks and activity days (with your device's time zone, used to compute daily streaks), recent searches, and notification and app preferences.

Device and push information. If you enable notifications we store a push token for your device (Apple Push Notification service on iOS, Firebase Cloud Messaging on Android) and its platform. Feast-day and Mass Prep reminders are scheduled on your device and are not sent to our servers.

Log data. Our servers automatically record standard technical logs (IP address, request metadata, timestamps) for security and troubleshooting.

What we do not collect. The App contains no advertising and no third-party analytics or tracking SDKs. We do not track you across other companies' apps or websites, and do not collect precise location, contacts, photos, or browsing history. The App has no child accounts or child profiles and collects no personal information about children (see §4). We do not sell personal information, whether it belongs to an adult or a child.

2. How we use information

•     Provide the App: accounts, playback, syncing your library and progress across devices

•     Personalize content suggestions based on your listening activity

•     Process and maintain subscriptions and restore purchases

•     Send new-release push notifications (only if enabled; see §6)

•     Provide customer support and respond to your requests

•     Keep the App secure, prevent fraud and abuse, and debug problems

•     Comply with legal obligations

Where GDPR/UK GDPR applies, our legal bases are: performance of our contract with you (providing the App and subscriptions), legitimate interests (security, service improvement, support), consent (push notifications), and legal obligation.

3. How we share information

We share personal information only with service providers who process it on our behalf, under contracts that require them to protect it to at least the standard described in this policy:

Provider	Purpose	Data involved
Clerk	Sign-in and account management	Name, email, sign-in identifiers
RevenueCat	Subscription and add-on purchase management, web billing	App user ID, purchase/entitlement data, email (web purchases)
Apple / Google	Payment processing, push delivery	Handled under their own policies
Railway	Application and database hosting	All server-stored data above
Cloudflare	Media file storage and delivery	Content requests, IP addresses

 

The App also loads its display fonts from Google Fonts, so Google receives the standard technical data of those requests (such as your IP address); no account information is included.

We may also disclose information if required by law or legal process, to protect the rights and safety of our users or others, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to previously collected data).

We do not sell personal information and do not share it for targeted advertising.

4. Children's privacy

Holy Heroes is made for families: its content is intended to be enjoyed by children together with their parents. We take children's privacy seriously.

•     Accounts may only be created by adults (parents, guardians, or other users who have reached the age of majority). All information we collect is about the account-holding adult and their use of the App.

•     We do not knowingly collect personal information from or about children. The App has no child accounts, no child profiles, and no features that ask anyone for information about a child. Listening activity is associated only with the adult's account.

•     If we learn we have collected a child's personal information in violation of this policy, we will delete it promptly. Contact us at customerservice@holyheroes.com with any concerns.

5. Data retention

•     Account data (profile, favorites, playlists, progress, preferences): kept while your account is active; permanently deleted within 30 days of account deletion.

•     Push tokens: deleted when you sign out, disable notifications, or delete your account, and pruned automatically when a device stops responding.

•     Subscription and purchase records: retained as required for tax, accounting, refund handling, and fraud-prevention obligations, then deleted. When you delete your account, the link between a story add-on purchase record and you is removed (your account identifier is cleared from the record and the date of removal is noted); the de-identified transaction record itself is kept so that a later refund from Apple or Google can be matched and our store payouts reconcile. Once de-identified it cannot be used to identify you or to unlock content.

•     Server logs: retained no more than 30 days.

6. Your choices

•     Push notifications are off until you enable them and can be disabled anytime in the App's settings or your device's notification settings. You can also mute specific content categories.

•     Feast-day and Mass Prep reminders are local to your device and controlled entirely in the App's settings.

•     Cookies and similar technologies. The App and app.holyheroes.com use only the cookies and on-device storage needed to keep you signed in and make the App work. We set no advertising or analytics cookies. We treat the Global Privacy Control signal as a valid opt-out where the law requires; we do not respond to legacy "Do Not Track" browser signals, as we do not track users across other sites or apps in any case.

7. Access, correction, and deletion

You can access and update your account information in the App. You may request a copy of your data, correction, or deletion at any time.

Deleting your account: open Settings → Delete account in the App, or sign in at app.holyheroes.com/settings in any web browser and choose Delete account, or email us. Deleting your account permanently removes your profile and listening data as described in §5, removes your account from our sign-in provider (Clerk), and deletes your customer record at our subscription provider (RevenueCat). Subscriptions must be cancelled separately through your App Store or Google Play account settings (deleting an account does not cancel a store-managed subscription, and does not refund a subscription or an add-on). Because store purchases belong to your Apple or Google account, a new Holy Heroes account created later with that same store account may be able to restore them.

Residents of the EEA/UK may also object to or restrict certain processing, withdraw consent, and lodge a complaint with their data protection authority. Residents of California and other US states with privacy laws have rights to know, delete, correct, and opt out of sale/sharing (we do not sell or share as defined by those laws) and will not be discriminated against for exercising them. We honor rights requests from all users regardless of location. We may need to verify your identity before acting on a request (for example, by confirming you control the email address on the account), and where the law allows you may submit a request through an authorized agent.

8. Security

We use industry-standard safeguards: encryption in transit, scoped and time-limited access to stored media, secrets management, and log redaction of sensitive fields. No system is perfectly secure; if a breach affects your personal information we will notify you as required by law.

9. International transfers

We are based in the United States and process data there. If you use the App from the EEA/UK, transfers are protected by Standard Contractual Clauses or an equivalent lawful mechanism.

10. Changes to this policy

We will post any changes here and update the effective date. For material changes we will notify you in the App or by email before they take effect.

11. Contact

Holy Heroes, LLC P.O. Box 12, Cramerton, NC 28032, United States customerservice@holyheroes.com · +1 855-879-2246