Privacy Policy
Effective date: 14 October 2026
The Crusade is a Catholic prayer app and website at thecrusade.app. This policy explains what personal information we collect, why, how we protect it, and the choices you have. We have tried to write it plainly. Prayer is personal, and we treat it that way.
1. Who we are
The Crusade is run by Stephen Muzzeroll, an individual developer ("we", "us", "our"). For data protection law, we are the controller of your personal information.
-
Privacy requests: privacy@thecrusade.app
-
General support: support@thecrusade.app
-
Post: 39B Le Van Mien, Thao Dien Ward, Thu Duc City, Ho Chi Minh City, Viet Nam
2. What this policy covers
This policy covers the website thecrusade.app, The Crusade apps for iOS and Android, and any email we send you (together, the "Service").
Today the website collects no personal information. The waitlist is not yet open, and the site sets no analytics or advertising cookies. This policy also describes the features we plan to launch, so you know in advance how they will work. When a feature goes live, the section about it applies.
3. Information we collect
3.1 Information you give us
-
Waitlist email (planned). If you join the waitlist, we keep your email address and the date you signed up.
-
Account details (app). When you sign in with Apple or Google, we receive a unique account identifier and, depending on what you allow, your name and email address. With Sign in with Apple you can choose to hide your email. We then get a private relay address. We never see or store your Apple or Google sign-in credentials.
-
Prayer content. Your prayer journal, private intentions, saved prayers, novena and Rosary progress, and reminders you set.
-
Community intentions (optional). Prayer requests you choose to post where other users can see them, and the prayers you add to shared intentions. You can post anonymously.
-
Messages to us. Anything you send when you contact us for support.
3.2 Information collected automatically (app, optional)
-
Analytics. If you turn it on, Firebase Analytics records anonymous usage events, such as which screens are opened, along with device type, OS version, app version, approximate country and a random app-instance ID. We set up analytics so that it never receives the text of your prayers or intentions.
-
Crash reports. If you turn it on, Firebase Crashlytics sends technical details when the app crashes, such as the device, OS, the app state and stack traces.
-
Push notification token. A device token, so we can send the reminders you ask for.
-
Website logs. Firebase Hosting, run by Google, may keep standard server logs, such as IP address, browser and pages requested, for security and reliability.
3.3 Purchases
Pro subscriptions are sold through the Apple App Store and Google Play. We never receive or store your card or payment details. Apple or Google tells us your subscription status, such as active or expired, the product and renewal dates, plus a transaction ID. That lets us unlock Pro features.
4. Religious information: our special care
Using a Catholic prayer app can reveal your religious beliefs. Under the EU and UK GDPR this is "special category" data, and other laws, including Canadian privacy law and California's CPRA, also treat it as sensitive. Our promises:
-
Explicit consent. We ask for your clear consent before we store prayer content or community posts tied to your account. You can withdraw that consent at any time in Settings or by contacting us. Withdrawing doesn't affect processing that took place before.
-
Minimisation. We collect only what a feature needs. Journals and private intentions are stored privately to your account. They are not used for analytics, profiling or marketing.
-
Never sold, never used for ads. We do not sell your personal information. We do not share it for cross-context behavioural advertising, and we never use religious or prayer data for any advertising.
-
Your control. You can export your prayer content and delete it, or delete your whole account, from within the app (see section 9).
5. How we use information, and our legal bases
| Purpose | Information | Legal basis (EU/UK GDPR) |
|---|---|---|
| Send waitlist and launch updates | Consent | |
| Create and run your account | Account details | Contract |
| Store and sync your journal, intentions and progress | Prayer content | Explicit consent (Art. 9(2)(a)) and contract |
| Show community intentions you choose to post | Community posts | Explicit consent (Art. 9(2)(a)) |
| Moderate community posts to keep them safe | Community posts | Legitimate interests, plus your explicit consent to posting |
| Send reminders and notifications | Push token, settings | Consent (your device permission) |
| Provide Pro features | Subscription status | Contract |
| Improve the app and fix bugs (optional) | Analytics, crash data | Consent |
| Answer support requests | Messages | Legitimate interests / contract |
| Security, fraud prevention, legal compliance | Logs, account data | Legitimate interests / legal obligation |
We do not make decisions about you using solely automated processing that has legal or similarly significant effects.
6. Who we share it with
We share personal information only as follows:
-
Service providers that process data on our behalf under contract: Google Firebase (hosting, authentication, database, analytics, Crashlytics, Cloud Messaging); Apple and Google (sign-in, app stores, notifications).
-
Other users, but only community intentions you choose to post, shown under your display name or anonymously.
-
Legal reasons: when the law requires it, or to protect someone's safety, our rights or the Service.
-
A successor, if the Service is transferred. You will be told in advance, and this policy, or one at least as protective, will continue to apply.
We do not sell personal information, and we do not "share" it for targeted advertising as California law uses that term.
7. International transfers
We operate from Vietnam, and our providers, chiefly Google, may process data in the United States and other countries. Where EU, UK or Canadian law requires it, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and our providers' data processing terms. You can ask us for details.
8. How long we keep it
-
Waitlist email: until you unsubscribe, or 12 months after launch if you don't create an account.
-
Account and prayer content: while your account is active. Deleted within 30 days of you deleting your account. Backups are cleared within a further 60 days.
-
Community posts: until you delete them or your account, or until we remove them under our Terms.
-
Analytics: no longer than 14 months. Crash data: no longer than 90 days.
-
Support messages: up to 2 years.
-
Purchase records: as long as tax and accounting law requires.
9. Your rights and choices
Wherever you live, you can:
-
Access and export your data. In-app export provides your journal and intentions in a portable format.
-
Correct inaccurate information.
-
Delete individual entries or your whole account in the app, or by emailing us.
-
Withdraw consent for prayer storage, community posting, analytics, crash reporting, notifications or email at any time.
-
Unsubscribe from email using the link in any message.
Deleting the app doesn't delete your account. Use "Delete account" in Settings. Cancelling a subscription is done through the App Store or Google Play.
EU and UK residents also have the right to restrict or object to processing, to data portability, and to complain to a supervisory authority: the ICO in the UK, or your local authority in the EU.
Canadian residents may access and correct their information and withdraw consent under PIPEDA and provincial law, and may complain to the Office of the Privacy Commissioner of Canada.
California and other US state residents have the right to know, access, correct and delete personal information, to opt out of sale or sharing (we do neither), to limit the use of sensitive personal information (we use it only to provide the Service), and not to be discriminated against for using these rights. You may use an authorised agent. We will verify requests by confirming control of your account or email.
To make any request, write to privacy@thecrusade.app. We reply within one month, or 45 days where US state law allows. We may need to confirm your identity first.
10. Children
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (COPPA). In the UK and EU you must be at least 13, or older where your country requires it, to create an account. Family features will not create accounts or logins for children, and children cannot post community intentions. If you believe a child under 13 has given us information, contact us and we will delete it.
11. Security
We use reasonable technical and organisational measures: encryption in transit (HTTPS/TLS), Google Cloud's encryption at rest, access rules that limit each user to their own private data, and minimal administrator access. No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires.
12. Cookies and similar technologies
The website currently uses no analytics or advertising cookies. Fonts are loaded from Google Fonts, which receives your IP address when your browser requests them. If we add optional cookies later, we will ask first where the law requires it and update this policy.
13. Links to other sites
Our pages link to other sites, such as Wikimedia Commons for art credits. Their own privacy policies apply.
14. Changes to this policy
If we update this policy, we will change the effective date above. For significant changes, we will let you know in the app or by email before they take effect, and ask again for consent where needed.
15. Contact
Privacy requests: privacy@thecrusade.app · General support: support@thecrusade.app · · 39B Le Van Mien, Thao Dien Ward, Thu Duc City, Ho Chi Minh City, Viet Nam