← Family Rosary
Privacy Policy
Effective: October 14, 2026 · Last updated: October 17, 2026
Who we are
Family Rosary (the "App") is operated by Cipher Haus, LLC, a Delaware limited liability
company ("we", "us"). We are responsible for the personal information described here. You can
reach us at [email protected] or by post at
Cipher Haus, LLC, 2958 S Victoria Ave, Los Angeles, CA 90016, United States.
We don't sell your information, we don't show ads, and we don't use analytics or tracking
tools in the App.
What we collect
- Your account: your email address and display name, and your password,
which Google Firebase Authentication stores as a secure hash.
- Family circles: each circle's name and invite code, the names, roles and
colors of its members (including profiles a family adds for someone without their own
account, such as a young child), which accounts belong to it, and who manages it.
- Requests to join: someone who has a circle's code can ask to join it. A
family manager must approve the request before that person can see anything in the circle.
When someone asks, we let the circle's managers know by email (unless they turn these emails
off) and, on phones where they turned them on, with a notification. The email and
notification show the requester's name and the role they entered, and the email also shows
their email address if they have confirmed it.
- Notification settings: whether you want emails about requests to join,
and, for each phone on which a manager turns on notifications about requests to join, a
notification token for that phone (issued by Firebase Cloud Messaging), whether it is an
iPhone or an Android phone, and when it was last updated. We use these only to deliver those
notifications. A phone's token is removed when you turn its notifications off, sign out on
it, or delete your account.
- Invitations: the email address, name and role a manager enters to invite
someone, and whether it was accepted. When a manager invites someone by email, we send that
person an email on the manager's behalf. Invitations are kept until they are accepted,
declined or deleted.
- Family novenas: when someone in a circle starts a novena for the family,
we store which novena it is, the day it starts, who started it, the intention they enter (if
any), and, for each of the nine days, which family members' profiles were marked as having
prayed and by whom. Ended novenas stay with the circle until the circle is deleted.
- Family intentions: when someone in a circle adds an intention to the
family's intentions board, we store its text, who it is for (if they enter a name), the date
to pray until (if they choose one), who added it, when, whether it is open, answered or
archived, and which members' accounts marked "prayed for this". An intention stays with the
circle until its author or a family manager deletes it, or the circle is deleted.
- Voice recordings: the prayers you, or someone recording on behalf of a
family member, record in the Studio, with their length and volume settings. Recordings of
your own voice that you make on your own profile are copied to each family circle you belong
to, so you don't have to record them again; each circle keeps its own copy. You can turn this
off for any circle on your profile there. Recordings someone else makes for you stay in the
circle where they were made.
- Your recordings on your account: your account also keeps a private copy
of the newest recording of your own voice for each prayer, so your recordings aren't lost
when you leave a circle or a circle is deleted. Only you can see or play this copy. When you
create or join a circle, the App asks before copying your recordings into it.
- On your device: settings, your place in a novena, and any recordings you
choose to download for offline use. These stay on your device until you remove them or sign
out. The App stores your sign-in state and settings in your browser's or device's storage. It
doesn't use advertising or tracking cookies.
The App uses the microphone only while you are recording in the Studio. It never records in
the background.
If you turn on prayer reminders in the iPhone or Android app, it asks permission to show
notifications. Reminders are scheduled on your device and nothing about them is sent to us. If
you manage a circle and turn on phone notifications about requests to join, the App asks the
same permission and registers that phone as described above. If notifications are already
allowed for the App, a manager's phone is registered without asking again; you can turn this
off in My Account → Notifications.
How we use it
- To sign you in and keep your family circles in step across your devices.
- To play your family's recordings in order during the Rosary, the Stations of the Cross
and novenas.
- To let managers invite people, approve requests to join, and manage their circle, and to
tell managers when someone asks to join.
Voice recordings are used only to play them back to your family circle. We don't use them
to identify people by their voice, to create voiceprints, or to train any
artificial-intelligence model.
Who can see it
- Your family circle: members of a circle can see its members, recordings
(including the copies of your own recordings from your other circles) and invite code, and
play its recordings. They can also see the circle's novenas, including their intentions and
who prayed each day, and the intentions on the family's intentions board, with who added each
one and who prayed for it, so please only write an intention you are happy for your whole
family to read. Managers can also see invitations sent for the circle.
- Google: we store everything with Google Firebase (Authentication, Cloud
Firestore, Cloud Storage, Cloud Functions and Hosting), which processes it for us under its
terms. Notifications about requests to join are delivered through Firebase Cloud Messaging,
and on iPhones through Apple's push notification service. The web version of the App also
loads fonts and rendering code from Google's servers (gstatic.com), which receive your IP
address.
- Sentry: when the App crashes or hits an error, it sends a diagnostic
report to Sentry (Functional Software, Inc.), which processes it for us. A report contains the
error, the App version, your device or browser type and operating system, the App's state
(such as which step of joining or uploading failed) and the steps that led to it. It
identifies your account and your family circles only by pseudonymous codes made from their
identifiers, so we can tell that several reports came from the same account; it doesn't
include your name, email address, recordings or the names of your family circles, and we've
configured Sentry not to store IP addresses. If you use Report a problem in My
Account, the report also includes what you type, and the technical details above unless you
untick them. We use these reports only to fix problems.
- Cloudflare: a small service we run on Cloudflare (Cloudflare, Inc.)
sends invitation emails. It receives the invitee's email address and name, the family's name
and the inviter's name, and keeps short-lived counters to limit how many invitations can be
sent.
- Resend: Resend (Plus Five Five, Inc.) delivers invitation emails for us,
from [email protected], and emails to family managers about requests to join, from
[email protected]. It receives the recipient's email address and the email's
contents.
- Anyone you share a link with: each recording has a private web address.
Someone who obtains that exact address can play the recording, so please don't share those
addresses outside your family.
- When the law requires it: we may disclose information if required by
law or to protect someone's safety.
Children
You must be at least 13 to create an account. Families may add a profile for a younger
child and record prayers in that child's voice only as the child's parent or legal guardian, or
with their permission. Those profiles and recordings are visible only within the family
circle.
A parent or guardian can remove a child's profile and recordings at any time in the App (a
family manager can remove any profile), or by emailing
[email protected]. If we learn that we hold an
account belonging to a child under 13, we will delete it.
How long we keep it
We keep your information while your account and family circles exist. Invitations are kept
until they are accepted, declined or deleted. To limit how many emails and notifications are
sent about requests to join, we keep counters that hold no names or addresses for a few days.
When you delete a recording of your own voice, you choose whether it goes from all your circles
or only from the one you are in. When you leave a circle, its copy of your recordings stays
with it as described below, nothing new is copied to it, and your account keeps its own copy.
If you delete a recording from all your circles, it is also removed from your account's copy;
deleting it from only one circle leaves your account's copy as it is. When a recording, profile
or circle is deleted, or a manager removes someone, we delete the related records and audio
files from our systems straight away. Google may hold residual copies for a limited period
under its own deletion practices.
Deleting your account
In the App, open My Account & Families → Delete Account, and
re-enter your password to confirm. When you delete your account:
- Recordings of your own voice: you choose whether to delete them too. If
you delete them, we remove them, and each circle's copy of them, from every family circle. If
you keep them, they stay with your family under your name, as a profile without an account; a
family manager can remove that profile at any time. Either way, the copy kept on your account
is deleted with your account.
- Recordings you made for other family members (for example a child or
grandparent) always stay with the family.
- Family novenas you started, and the days marked as prayed, stay with the
family, like recordings you made for others.
- Family intentions you added, and your "prayed for this" marks, stay with
the family; you can delete your intentions before you delete your account, and a family
manager can delete them at any time.
- Circles where you were the only member are deleted, with everything in
them.
- Invitations sent to your email are deleted.
- Phones registered for notifications on your account are removed.
- Your sign-in account and profile are always deleted.
If you can't use the App, see how to ask
us to delete your account.
Your rights
Depending on where you live, you may have the right to:
- see the information we hold about you;
- correct it;
- delete it;
- receive a copy of it;
- object to how we use it.
Most of this you can do in the App. For anything else, email
[email protected]. We will not treat you differently
for using these rights.
California residents: we don't sell or share personal information as the
California Consumer Privacy Act defines those terms.
EEA and UK residents: we use your information to provide the App you asked
for (performance of a contract), and to keep it secure (our legitimate interests). Your
information is processed in the United States. You can complain to your local data protection
authority.
Security
Information is encrypted in transit and at rest by Google. Our access rules let only members
of a circle read its data, and stop members from changing or deleting other people's
recordings. No system is perfectly secure, so please use a strong password. Tell us at
[email protected] if you find a problem.
This website
These pages are hosted on GitHub Pages. GitHub logs the IP address of visitors. The pages
have no cookies, scripts, analytics or advertising.
Changes
If we change this policy, we'll post the new version here and update the dates above. If a
change is significant, we'll also let you know in the App.