Privacy Policy — House of Prayer Website

Last Updated: June 19, 2026 Effective: June 19, 2026

Operator: Magnolia Technology Consultants Contact: support@magnoliatcs.com

Scope of this policy. This policy covers only the House of Prayer website at hop.magnoliatcs.com ("the Site"). The House of Prayer mobile app for iOS and Android is a separate product with its own privacy policy — see hop.magnoliatcs.com/app/privacy for that document. If something isn't covered here, it isn't done by the Site.

In plain English

The House of Prayer Site is a private web app for prayer groups. We collect only what we need to make the Site work — your account, the things you write on the Site, and the people you pray with. We don't sell your data, we don't run ads, we don't track you across other sites, and we don't share what you post inside the Site with anyone outside your prayer group. You can delete your account at any time from inside the Site. When you do, your account becomes unusable and your personal info (email, profile photo, phone, birthday, bio) is removed; the content you posted in your prayer group is kept but attributed to "Deleted Member" so the group's shared record isn't broken.

The rest of this document spells that out in detail so you know exactly where you stand.

1. Who we are

The Site is built and operated by Magnolia Technology Consultants, the data controller responsible for your information on the Site. You can reach us at support@magnoliatcs.com for any privacy question, correction request, or deletion request. This policy applies only to the Site; the House of Prayer mobile app has its own separate policy.

2. What we collect

2.1 Information you give us when you sign up

  • Email address — used to sign you in and for account recovery.
  • Display name — shown to other people in your prayer groups.
  • Password — stored only as a one-way hash (we cannot read it).

If you choose Sign in with Apple instead, we receive an Apple identity token from Apple, which we verify and then discard. If you choose to share your name and email with us through Apple, we receive those; if you choose Apple's private email relay, we receive only the relay address.

2.2 Optional profile information

You may add any of the following — none of it is required:

  • Phone number
  • Birthday
  • Short bio
  • Profile photo

You can edit or remove any of these at any time from your profile settings.

2.3 Information you create on the Site

  • Prayer requests, prayer comments, and prayer reactions you post in your group's prayer hub
  • Hub content you create or edit: announcements, events, ministries, songs, weekly plans, service plans, sign-ups
  • Files you upload — song charts, documents, and other files you attach to songs, plans, and other hub content
  • Profile photo you upload to your profile

A note on uploaded files. The files you and your group upload — song charts, documents, photos, and similar material — are stored only to operate the Site and share them with the other members of your prayer group. We do not control, monitor, review, or manage what you upload, and we provide no content of our own. You may only upload content that you own, that you created, that is in the public domain, or that you are otherwise properly licensed to use and share. You are solely responsible for the content you upload, group administrators and leaders are responsible for the uploads of their members, and you agree not to hold us liable for it.

2.4 Technical information your browser sends

  • Session and preference cookies — small first-party cookies set by the Site to keep you signed in (a session cookie), remember the group password you entered to access the Site (the "gate" cookie), and remember your visual theme. These cookies are essential for the Site to work; we do not set advertising, analytics, or cross-site tracking cookies.
  • Browser type, operating system, and IP address — sent automatically by your browser with every request, and used for diagnostics, rate-limiting, and security. We do not build advertising profiles from this information.

2.5 What we do NOT collect

  • We do not collect location, GPS, or Wi-Fi network information.
  • We do not access your contacts, calendar, microphone, or camera (beyond a file you explicitly choose to upload as a profile photo).
  • We do not include any advertising tags, analytics SDKs, or third-party trackers on the Site.
  • We do not use any tracking pixel, cross-site identifier, or fingerprinting technique.

3. How we use your information

We use what we collect only to:

  1. Sign you in and keep your session active.
  2. Display the prayer requests, comments, and hub content you create to the other members of your prayer group.
  3. Display your profile to other members of groups you belong to.
  4. Operate, secure, and improve the Site — for example, rate-limiting failed logins to protect your account.

We do not use your data to build advertising profiles, train AI models, or sell to data brokers. We do not run advertising on the Site.

4. Who we share your information with

Inside the Site: the other members of prayer groups you participate in can see the prayer requests, comments, and hub content you post there. That's the point of the Site. Group administrators can see additional management information about their group.

Outside the Site: we share information only with the limited service providers we need to operate the Site:

Provider What they receive Why
Apple — Sign in with Apple The identity token we verify To support Sign in with Apple
Our own servers (operated by Magnolia Technology Consultants) All Site data Storage and operation of the Site's servers

We do not sell your personal information. We do not share your personal information with any third party for their own advertising, marketing, or profiling purposes.

We may disclose information if we are legally required to do so (court order, subpoena, etc.), and only to the narrowest extent the law requires.

5. How we keep your information secure

  • All traffic between your browser and our servers uses HTTPS (TLS) end-to-end.
  • Your authentication token is stored in a secure, HTTP-only cookie that JavaScript cannot read.
  • Passwords are stored only as one-way hashes.
  • Your private messages and prayer requests are encrypted on our servers, so they can't be read directly from the database — someone with database access sees only scrambled text, not your conversations.
  • We do not have your Apple ID password — Sign in with Apple authenticates you with Apple directly and only returns a verified token to us.
  • We apply rate limiting and abuse detection on authentication endpoints.

No system is perfectly secure. If we ever experience a security incident that affects your data, we will notify you by email and on the Site as required by law.

6. How long we keep your information

  • Active accounts: for as long as your account exists.
  • Deleted accounts: when you delete your account, we anonymize it. We immediately and permanently remove your email address, password, Sign in with Apple link, phone number, birthday, bio, and profile photo from our active systems, and we change your display name to "Deleted Member." Login is then impossible — the account can never be reactivated. Backups containing the pre-anonymization data are overwritten within 30 days.
  • Content you posted in your community: prayer requests, prayer comments, hub announcements, plans, and other contributions you made to your prayer group remain visible to the members of that group, attributed to "Deleted Member." We retain this content because it belongs to the shared record of the prayer group, not to any one member. If you want a specific post fully removed (rather than just anonymized), edit or delete it yourself before deleting your account. If you've already deleted your account, or if someone else's post mentions you and you'd like it scrubbed, email support@magnoliatcs.com.
  • Service logs: technical logs (request timestamps, error traces, IP addresses for security purposes) are kept for up to 90 days and contain no prayer content.

7. Your rights and choices

You can do all of the following at any time:

  • See or correct your information — your profile settings on the Site
  • Delete your account — your profile settings → Delete Account. This is permanent and immediate. (See Section 6 for what happens to content you posted.)
  • Clear cookies — use your browser's "Clear cookies" feature for hop.magnoliatcs.com at any time. (Clearing the session cookie signs you out.)

If you are in the European Union, United Kingdom, California, or another region with specific data-protection laws (GDPR, UK GDPR, CCPA/CPRA, etc.), you also have the right to request:

  • A copy of the personal information we hold about you (data portability / right of access)
  • Correction of inaccurate information
  • Restriction of processing
  • The right to object to processing
  • The right to withdraw consent

Email support@magnoliatcs.com and we will respond within 30 days. We will not charge you for these requests and we will not retaliate against you for making one.

8. Children

The Site is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at support@magnoliatcs.com and we will delete the account.

9. International users

Our servers are operated in the United States. If you use the Site from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, which may have different data-protection rules than your home country.

10. Changes to this policy

If we change this policy, we will update the "Last Updated" date at the top and, for material changes, notify you on the Site or by email at least 14 days before the changes take effect. Your continued use of the Site after the effective date constitutes acceptance of the updated policy. If you do not accept the new policy, you can delete your account from your profile settings.

11. How to contact us

For any privacy question, request, or complaint:

Magnolia Technology Consultants Email: support@magnoliatcs.com

We aim to respond within 5 business days, and always within 30 days for formal data-rights requests.

By creating an account or using the Site, you acknowledge that you have read and understood this Privacy Policy.