What we hold.

1. Who we are

This policy explains how Prodigal - The Way Back LLC (“Prodigal,” “we,” “us”) handles information in connection with the Prodigal website, web app, and Android app (the “Service”).

2. The short version

We collect the minimum needed to run your account and track your progress through the program. If an organization sponsors your account, it never sees what you do in the app. It is told whether you accepted and whether the sponsorship is still active, and if you end the sponsorship yourself it gets an email naming the address it invited. Your vow, journal entries, and similar reflective content are saved on your device and never sent to us. There is no code path in the app that uploads them, and we designed it that way deliberately. If you move to a new phone using your phone’s own transfer tool, Android may copy them to the new phone. We are not part of that transfer.

3. Information we collect

Account information. Email address and authentication data, handled through our authentication provider (Supabase).

Usage and progress data, stored on our servers:

• Which days of the program you’ve listened to, and when
• The date you started the program
• Sponsor/admin relationship data, if someone sponsors your account
• Subscription state, if you subscribe: which plan, whether it is active, and when it renews or expires
• A record of the subscription emails we send you: which email, and when it was sent. Not your email address

We do not record anything about your blocking. Whether the block is on, when you turned it on or off, and what it stopped are all held on your device and nowhere else. There is no column for any of it on our servers, and the sites you visit are never sent to us, logged, or retained.

Information we do not collect or store on our servers:

• Vow recordings
• Journal entries
• Habit Tracking entries and any notes attached to them
• Saved moments: the passages of a session you keep
• Anything else in that category of reflective, local-only content

This content is stored in your device’s local storage (IndexedDB) only. We have no access to it, cannot recover it if you switch devices or clear your browser/app data, and it is not visible to sponsor or admin accounts under any circumstance.

Payment information. We never receive or store your card details. Subscriptions are paid through Google Play. Where someone buys sponsorship for another person’s account, that payment is handled by Stripe on their own checkout page.

4. How sponsor / admin accounts work

If someone sponsors your account, they pay for it and nothing else.They cannot see your session progress, what you have listened to, your vow recordings, your journal entries, your Habit Tracking entries, or whether you have opened the app at all. None of that is transmitted anywhere a sponsor account could reach it, and the reflective content is never sent to us in the first place. This separation is structural, not a setting you have to configure.

5. How we use information

To operate your account and the program itself, to process payments, to respond to support and privacy requests, and to maintain and improve the Service.

We count, in aggregate, how many people complete each day’s session, to improve the program. No individual’s listening is reviewed for any other purpose.

We do not sell your personal information. The app itself carries no analytics software: there is no crash reporter and no advertising identifier, and the only record of your use is which sessions you have heard and the day you first opened the app, which we use to show your progress and count in aggregate. Our public marketing page uses first-party analytics run by our hosting provider, Vercel, as our processor under a data processing agreement. For each visit to that page, Vercel records the page, the site you came from, your approximate location (country, region and city), and your device’s operating system, browser and type. They use no cookies, the visitor hash Vercel computes is discarded within 24 hours, and no third party collects data about you across other sites. If either of those ever changes, this section changes with it.

6. Who we share information with

We use the following service providers to operate Prodigal. Most of them act only as our processors, under a written contract that limits them to processing on our instructions. Stripe and Google Play each also act on their own behalf for some purposes, under their own terms and privacy policies.

• Supabase: authentication and database hosting
• Vercel: application hosting
• Resend: sending account, subscription and support email
• Zoho Mail: receiving mail sent to our support, inquiries and privacy addresses
• Stripe: payment processing, when someone buys sponsorship for another person’s account
• Google Play: taking payment for subscriptions, under its own terms and privacy policy

One more company is involved in a subscription, and it is not on that list. If you subscribe, the purchase is made through Google Play and managed for us by RevenueCat, and information about it genuinely leaves our systems for theirs. What goes to RevenueCat is your account identifier and the purchase itself. We do not send them your email address, your name or your phone number, and there is no code path in the app that does. What comes back is the state of the subscription: which plan, whether it is active, and when it renews or expires.

Google Play takes the payment and tells RevenueCat what happened.

We do not share your information with advertisers. Apart from the providers above and the purchase path just described, we do not share it with anyone except where required by law.

7. Data retention and deletion

You can delete your account from within the app: open Options, then Account, then Delete account. Step-by-step instructions, including what to do if you have uninstalled the app, are at theprodigalapp.com/delete-account.

Deleting from inside the app takes effect when you confirm it. If you ask us by email instead, we complete it within 30 days and write back to tell you when it is done. If the law requires us to keep your information (because of a court order, subpoena or other legal process, to investigate fraud, a security incident or illegal activity, or because of a lawsuit or written claim against us), we pause deleting your account, tell you it is paused, and complete the deletion as soon as the matter ends.

Deleting also clears what Prodigal stored on the device you delete from (vow, journal, Habit Tracking entries, saved moments). That content is never uploaded to us, so we hold no copy of it to delete and cannot clear another device remotely. If the app is installed elsewhere, delete from there too, or uninstall it.

8. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, and to know what’s collected and why. To make a request, contact us at privacy@theprodigalapp.com.

If we refuse a request, you can appeal. How to appeal, and where to complain if we deny your appeal, is at theprodigalapp.com/privacy/appeals.

[If you expect users in California, the EU/UK, or other jurisdictions with specific privacy statutes (CCPA/CPRA, GDPR, etc.), this section needs jurisdiction-specific language. That’s an attorney-review item, not something to guess at.]

9. Children’s privacy

The Service is intended for users 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us at privacy@theprodigalapp.com and we’ll remove it.

10. Security

We use reasonable administrative and technical safeguards to protect your information, including database-level access controls scoping each user’s data to that user alone. No system is perfectly secure, and we can’t guarantee absolute security.

11. Crisis resources

If you are in crisis, you can call or text 988 (Suicide & Crisis Lifeline) any time, free of charge. This is never limited by your subscription or account status.

12. Changes to this policy

We may update this policy from time to time. We’ll update the “Last updated” date above when we do.

13. Contact

Privacy questions or requests: privacy@theprodigalapp.com
General support: use our contact form, which routes your message to the right place.

Prodigal - The Way Back LLC
2702 E Fifth St # 707
Tyler, TX 75701
United States