On This Rock

Privacy

Your prayers stay yours

This page is the whole promise, in plain words: what On This Rock keeps, what it never does, and what never leaves your device.

Yours alone

Your journal entries are yours alone. No one at On This Rock — not even Candace, who built it — can open or read them. There is no admin view anywhere in the app that displays journal entries, Examen reflections, or Ask questions; no such screen exists.

Never sold, never shared, never used for training

What you write is never sold, never shared, and never used to train AI. Not your entries, not your questions, not anything drawn from them.

No ads, no trackers

There are no ads in this app, and nothing in it watches you: no analytics, no trackers, no tracking cookies. The only cookie On This Rock sets is the one that keeps you signed in.

What never leaves this device

Some things are kept only here, on this device, and are never sent anywhere:

  • Your notes as you prepare for confession
  • The intention you bring to a novena
  • The offering you name in Offer It Up — the sacrifice, and who it is for
  • Any draft you have not saved yet
  • Your signed-out first day of prayer — it rests on this device until you sign in and tap to bring it into your account; only then does it leave, and only to your own account

When you sign in

If you sign in, your entries are kept in your own account and no one else's. Every entry is locked to the account that wrote it, so your words can only ever appear in your own journal.

Sign-in and email

Sign-in is by email magic link: we email you a link, you tap it, and you are in. No password is ever collected or stored — there is no password to remember, lose, or leak.

The only emails On This Rock sends are practical ones — your sign-in link, and account notices, like the confirmation that your account was deleted. They go through our email provider, and they never contain a single word from your journal.

Deleting

Delete an entry, and it is removed from the live system immediately and permanently. Delete your account, and everything in it goes the same way, at once. Backup copies age out within 30 days — a deleted entry may rest in a backup for up to 30 days, and then it is gone from everywhere.

The AI questions, honestly

The AI features are off. They stay off until they can run under zero-retention, no-training terms — and when they do, only the few words needed for one question are sent, nothing else, ever. Until then, the prompting questions in the app are written into the app itself, and your words are sent nowhere.

Reminders

You can save the times you would like a reminder, but reminder sending is not switched on. If it ever is, a reminder will only ever carry plain words of its own — “Time to pray” — never your words, and never your anchor word.

This page states the app's commitments in plain words. The formal legal privacy policy is being prepared — and if these commitments ever change, this page changes first, and we will tell you.