Privacy Policy

This Privacy Policy explains how Beadlight handles information when you use the Beadlight iOS or Android app, the Beadlight website, or Beadlight support services. Beadlight is a Catholic Rosary prayer companion operated by Sam Warburton, trading as Mercian Digital.

Questions and privacy requests can be sent to support@merciandigital.co.uk or submitted through the Beadlight support page.

Privacy At A Glance

• You can use Beadlight without creating an account.
• Guest prayer preferences, intentions and devotions are initially stored on your device.
• If you sign in, eligible prayer journey, intention and devotion records can sync privately through your account.
• Your intention and devotion text is not included in product analytics, support diagnostics, public prayer totals or CarPlay.
• Private prayer text is not displayed publicly or shared with other Beadlight users.
• Beadlight does not sell personal information and does not use information for cross-app advertising tracking.

Information We Handle

Account and authentication information

An account is optional. If you register or sign in, we may handle your email address, Beadlight user ID, authentication tokens and authentication-provider identifiers. Depending on the method you choose, Apple or Google may provide an account identifier, name or email address. Supabase provides Beadlight's authentication and account infrastructure.

We use account information to authenticate you, protect your account, connect eligible data to your account, sync across devices, restore account content and support account deletion. Authentication credentials and tokens are handled securely and are not displayed publicly.

Private intentions and saved devotions

Beadlight lets you write an optional prayer intention, create reusable devotions and keep a history of intentions attached to Rosaries. This is user-authored content and may be deeply personal or reveal religious, spiritual, health, family or other sensitive circumstances. Only enter information you are comfortable storing in Beadlight.

These records may include:

• devotion title and prayer text;
• intention text;
• a historical snapshot of the devotion used for a Rosary;
• the selected mystery set;
• whether the associated Rosary is in progress, unfinished or completed;
• created, updated, started, completed and deletion timestamps.

Before sign-in, this content is stored locally on your device. When you sign in, eligible guest content may be uploaded to your account, and account-owned content may sync through Supabase so it is available after reinstalling or on another signed-in device. When you sign out, account-owned prayer text is removed from the local app cache and can be restored after you sign back in.

Synced intentions and devotions are protected by account-based access controls. They are not part of Beadlight's ordinary analytics or roadmap administration dashboards. Limited authorised personnel and infrastructure providers may nevertheless be technically able to access stored records where necessary to operate, secure, troubleshoot or comply with legal obligations. This content is not end-to-end encrypted.

Prayer journey and prayer activity

Beadlight may record prayer activity when you start a Rosary, move through prayer steps, complete decades or finish a Rosary. This may include:

• prayers and Rosaries completed;
• current streak, weekly progress and lifetime totals;
• mystery set and prayer type;
• prayer step, step number and decade number;
• completion dates and times.

If you are signed in, prayer journey records may be linked to your account so Beadlight can show your personal history and progress. If you are not signed in, limited prayer events may use a randomly generated installation identifier for aggregate prayer totals and reliability. Beadlight does not publish an individual user's prayer history.

Product analytics and app identifiers

Beadlight collects limited product interaction information to maintain global prayer totals, understand feature use, diagnose reliability issues and improve the app. Depending on the event, this can include:

• a randomly generated installation identifier and app-session identifier;
• event time and event type, such as app opened, Rosary started or completed, paywall viewed, or purchase flow result;
• mystery set, prayer kind, step index or decade index;
• app version, build number and platform;
• whether Premium was active;
• paywall source, product identifier and trial eligibility where relevant.

The installation identifier is not your advertising identifier, Apple ID, Google account, name, email address or payment-card information. It allows events from the same app installation to be grouped for duplicate prevention and aggregate reporting. Intention text, devotion titles and devotion prayer text are specifically excluded from analytics events and support diagnostics.

Subscriptions, purchases and Premium access

Beadlight uses RevenueCat with Apple App Store and Google Play billing to manage subscriptions, lifetime purchases where offered, entitlement status, purchase restoration and Premium access. We may receive or store a product identifier, purchase or subscription status, entitlement status, expiration information, store, RevenueCat app user ID and whether Premium access is active.

Apple or Google processes the payment. Beadlight and RevenueCat do not receive your full payment-card details from the app stores. Deleting a Beadlight account does not cancel an Apple App Store or Google Play subscription and does not erase store purchase ownership.

Support requests and communications

If you contact Beadlight or use the support form, we receive the information you choose to provide. This may include your name, email address, request type, priority, subject, message, device details and app details. We use it to respond, investigate problems, consider feedback and maintain support records. Resend may be used to deliver support acknowledgements and related email.

Please do not include private intention or devotion text in a support request unless it is essential to the issue and you are comfortable sharing it with the support team.

Settings and local device data

Beadlight stores information locally to provide the app experience. This may include onboarding state, current Rosary progress, selected mysteries, short or expanded prayer preference, rosary theme, matched-background preference, appearance, voice, guided-audio speed, hands-free settings, ambient-sound preference, reminders, draft intention selection and other app settings.

Local data generally remains until you delete it within Beadlight, reset the relevant feature, clear app data or uninstall the app. Some identifiers may be held in platform-secure storage so they can support account, purchase or analytics continuity.

Audio, CarPlay and device permissions

Guided prayer audio, Gregorian chant, piano, rain and other ambient sounds are played by the app. Beadlight does not need to record your voice or listen to your prayers for these features. Private intention and devotion text is not presented through CarPlay.

If you enable reminders, the app uses notification permission and stores the reminder schedule needed to deliver them. Beadlight does not collect precise location, contacts, photos, camera data or microphone recordings for prayer tracking.

Website information

The public website is hosted through GitHub Pages. When you visit it, GitHub and network providers may process technical request information such as IP address, browser type, requested page and request time for delivery, security and operational logging. The site loads web fonts from Google, which may receive standard network request information.

Beadlight does not use the website for cross-site advertising tracking. The support form sends the details you enter to Beadlight's Supabase support service. The restricted admin area uses authentication and is available only to approved administrators.

Beadlight uses Google Analytics to understand website visits unless you reject analytics in the privacy banner. This may include the page viewed, approximate country or region, device and browser information, referral or campaign source, and clicks on outbound App Store or Google Play links. Google You can reject analytics or change your choice through the “Privacy settings” control.

How We Use Information

• to provide the Rosary, devotion, intention, audio, reminder and accessibility features you request;
• to create, authenticate, secure and delete accounts;
• to store and sync private account content across signed-in devices;
• to show prayer streaks, totals, history and progress;
• to maintain pseudonymous and aggregate prayer totals;
• to improve reliability, understand feature use and prevent duplicate event counting;
• to provide and restore Premium access;
• to respond to support requests and feedback;
• to prevent misuse, fraud and security incidents;
• to comply with legal obligations and enforce our rights.

Legal Bases

Where UK or European data-protection law applies, we process information as necessary to provide the app and services you request, including accounts, synchronization, purchases and support. We rely on legitimate interests for proportionate security, fraud prevention, service reliability, aggregate prayer totals and product improvement. We rely on consent where the law requires it, including where your affirmative choice to provide or sync sensitive user-authored prayer content requires consent, and we process information where necessary to comply with legal obligations.

Sharing And Service Providers

Beadlight does not sell personal information. We share information only as needed with service providers, app stores, authentication providers, professional advisers or authorities for the purposes described in this policy. The main providers are:

• Supabase, for authentication, database storage, synchronization, cloud functions, prayer records, support and restricted administration;
• RevenueCat, for purchase status, subscriptions, restoration and Premium entitlements;
• Apple, for App Store distribution, billing and Sign in with Apple;
• Google, for Google Play distribution and billing, Google sign-in and website fonts;
• Resend, for support-related email delivery;
• GitHub, for public website hosting.

These providers process information under their own terms and privacy policies. We may also disclose information where required by law, to protect users or the service, or to investigate fraud, abuse or security incidents.

Retention And Deletion

Account information, synced intentions, saved devotions and account-linked prayer journey records are generally kept while your account exists or until you delete the relevant content. Historical intention records preserve a snapshot of the devotion used at the time, so later edits to a reusable devotion do not rewrite past Rosary history.

When you delete an individual synced devotion or intention, a deletion marker and associated record may remain in the synchronization system so the deletion can propagate across devices and backups. Deleted content is no longer shown as an active record. Account deletion removes Beadlight-owned account data from the active service, subject to limited retention required for security, fraud prevention, legal compliance, purchase verification or backup lifecycle.

Pseudonymous or aggregate prayer analytics may be retained for historical totals, reliability and product analysis. Support records are retained as reasonably needed to resolve requests, document decisions and protect the service. Purchase and entitlement records may be retained for restoration, accounting, tax, fraud prevention and legal purposes.

Account Deletion

You can delete your Beadlight account from within the app under Settings, Account & Premium, Delete Account. This deletes the Beadlight account and Beadlight-owned cloud data linked to it, including synced intentions, saved devotions and account prayer journey records where applicable. Account-owned prayer text cached on the device is also cleared.

Account deletion does not cancel an Apple App Store or Google Play subscription. Manage or cancel an active subscription through the store that billed you. Anonymous analytics that cannot reasonably be linked back to your account may remain in aggregate or pseudonymous form.

If you cannot access the app, see the account deletion instructions or contact support@merciandigital.co.uk.

Your Choices And Rights

You may use the core app without an account, choose whether to enter an intention or saved devotion, edit or delete private prayer content, sign out, delete your account, manage notification permission in device settings and manage purchases through Apple or Google.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent relating to personal information. You may also have the right to complain to your local data-protection authority. To make a request, email support@merciandigital.co.uk.

Some pseudonymous analytics are not connected to an account, name or email address. If we cannot reasonably identify your events, we may be unable to retrieve or delete them individually.

Children's Privacy

Beadlight is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will review and delete it where appropriate.

Security And International Processing

We use reasonable technical and organisational safeguards, including encrypted network connections and account-based access controls. No storage or transmission system can be guaranteed completely secure.

Service providers may process information in countries outside your own. Where required, we use appropriate contractual or legal safeguards for international transfers.

Changes To This Policy

We may update this Privacy Policy when Beadlight or applicable requirements change. The revised version will be posted here with a new "Last updated" date. Material changes may also be communicated in the app or by another appropriate method.

Contact

Sam Warburton, trading as Mercian Digital
Email: support@merciandigital.co.uk
Support: beadlight.app/support