Effective date: [DATE: set on publication]

Applies to: the Holy Heroes mobile application for iOS and Android (com.holyheroes.app) and the app experience at app.holyheroes.com (together, the "App").

Holy Heroes[, LLC: confirm legal entity name] ("Holy Heroes," "we," "us") provides family-oriented Catholic audio and media through the App. This policy explains what information the App collects, why, and the choices you have.

1. Information we collect

Account information. When you create an account we collect your name and email address. If you sign in with Apple or Google, we also receive the identifier those services share with us. Authentication is handled by our provider Clerk; we never see or store your password.

Subscription information. If you subscribe, your purchase is processed by Apple (App Store) or Google (Google Play). We receive your subscription status and transaction history (product, dates, renewal state) through our subscription-management provider RevenueCat. We never receive or store your payment card details.

Listening activity and preferences. To make the App work across your devices we store your favorites, playlists, playback position, listening streaks and activity days, recent searches, and notification and app preferences.

Device and push information. If you enable notifications we store a push token for your device (Apple Push Notification service on iOS, Firebase Cloud Messaging on Android) and its platform. Feast-day and Mass Prep reminders are scheduled on your device and are not sent to our servers.

Log data. Our servers automatically record standard technical logs (IP address, request metadata, timestamps) for security and troubleshooting.

What we do not collect. The App contains no advertising and no third-party analytics or tracking SDKs. We do not track you across other companies' apps or websites, and do not collect precise location, contacts, photos, or browsing history. The App has no child accounts or child profiles and collects no personal information about children (see §4). We do not sell personal information, whether it belongs to an adult or a child.

2. How we use information

•     Provide the App: accounts, playback, syncing your library and progress across devices

•     Personalize content suggestions based on your listening activity

•     Process and maintain subscriptions and restore purchases

•     Send new-release push notifications (only if enabled; see §6)

•     Provide customer support and respond to your requests

•     Keep the App secure, prevent fraud and abuse, and debug problems

•     Comply with legal obligations

Where GDPR/UK GDPR applies, our legal bases are: performance of our contract with you (providing the App and subscriptions), legitimate interests (security, service improvement, support), consent (push notifications), and legal obligation.

3. How we share information

We share personal information only with service providers who process it on our behalf, under contracts that require them to protect it to at least the standard described in this policy:

Provider	Purpose	Data involved
Clerk	Sign-in and account management	Name, email, sign-in identifiers
RevenueCat	Subscription status management	App user ID, purchase/entitlement data
Apple / Google	Payment processing, push delivery	Handled under their own policies
Railway	Application and database hosting	All server-stored data above
Cloudflare	Media file storage and delivery	Content requests, IP addresses

 

We may also disclose information if required by law or legal process, to protect the rights and safety of our users or others, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to previously collected data).

We do not sell personal information and do not share it for targeted advertising.

4. Children's privacy

Holy Heroes is made for families: its content is intended to be enjoyed by children together with their parents. We take children's privacy seriously.

•     Accounts may only be created by adults (parents, guardians, or other users who have reached the age of majority). All information we collect is about the account-holding adult and their use of the App.

•     We do not knowingly collect personal information from or about children. The App has no child accounts, no child profiles, and no features that ask anyone for information about a child. Listening activity is associated only with the adult's account.

•     If we learn we have collected a child's personal information in violation of this policy, we will delete it promptly. Contact us at [privacy@holyheroes.com: confirm address] with any concerns.

5. Data retention

•     Account data (profile, favorites, playlists, progress, preferences): kept while your account is active; permanently deleted within 30 days of account deletion.

•     Push tokens: deleted when you sign out, disable notifications, or delete your account, and pruned automatically when a device stops responding.

•     Subscription records: retained as required for tax, accounting, and fraud-prevention obligations, then deleted.

•     Server logs: retained no more than [90: confirm] days.

6. Your choices

•     Push notifications are off until you enable them and can be disabled anytime in the App's settings or your device's notification settings. You can also mute specific content categories.

•     Feast-day and Mass Prep reminders are local to your device and controlled entirely in the App's settings.

•     The App honors platform privacy controls; we respect the Global Privacy Control signal on our web surfaces.

7. Access, correction, and deletion

You can access and update your account information in the App. You may request a copy of your data, correction, or deletion at any time.

Deleting your account: [Settings → Account → Delete account in the App: ship in-app deletion before publishing this sentence], or visit [holyheroes.com/app/delete-account: create this page, required by Google Play], or email us. Deleting your account permanently removes your profile and listening data as described in §5. Subscriptions must be cancelled separately through your App Store or Google Play account settings (deleting an account does not cancel a store-managed subscription).

Residents of the EEA/UK may also object to or restrict certain processing, withdraw consent, and lodge a complaint with their data protection authority. Residents of California and other US states with privacy laws have rights to know, delete, correct, and opt out of sale/sharing (we do not sell or share as defined by those laws) and will not be discriminated against for exercising them. We honor rights requests from all users regardless of location.

8. Security

We use industry-standard safeguards: encryption in transit, scoped and time-limited access to stored media, secrets management, and log redaction of sensitive fields. No system is perfectly secure; if a breach affects your personal information we will notify you as required by law.

9. International transfers

We are based in the United States and process data there. If you use the App from the EEA/UK, transfers are protected by Standard Contractual Clauses or an equivalent lawful mechanism.

10. Changes to this policy

We will post any changes here and update the effective date. For material changes we will notify you in the App or by email before they take effect.

11. Contact

Holy Heroes, LLC] P.O. Box 12, Cramerton, NC 28032, United States [privacy@holyheroes.com: confirm] · +1 855-879-2246