Privacy Policy

Last updated: 5 October 2026

The short version: your prayers never leave your phone. Your notes, the names of the people you pray for and what's going on for them are stored and processed on your device only. They are never sent to us, to analytics, or to a cloud AI. There's no account to make.

This policy covers the Now I'm Found app for iPhone and iPad and this website. Now I'm Found is made by Shinefort Ltd ("we", "us"), a company registered in England and Wales (company number 17081874), registered office 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE. We are the data controller.

What stays on your phone

Everything you tell the app about your prayer life stays on your device, including:

This data is protected by iOS Data Protection and is left out of your ordinary iCloud device backup. If you delete the app, or use "Delete all my prayers" in Settings, it's gone. We can't recover it, because we never had it.

Reminders are scheduled on your phone. Their text never includes a name, and the Lock Screen shows names only if you choose a widget view that does.

What we do receive

Usage statistics (you can switch these off)

To learn what helps, the app sends a fixed list of events to PostHog (EU servers): for example, that onboarding reached a given screen, that a prayer was started or finished and how long it took, that a note was saved (but not what it said), or that the paywall was opened. Each event carries only fixed values chosen by us, such as a screen name or a number of minutes. Nothing you typed, no prayer type, no names and no faith answers are ever included. These events use a random identifier for your installation, not your name or Apple ID. You can turn them off in Settings → Share usage statistics. In the UK they are on by default; in the European Economic Area they start off.

Anonymous tallies of two answers

We'd like to know, overall, how many people are new to faith or returning to it, and which traditions they come from. So your answers to those two questions are counted like ballots in a box: sent once, at a random time a day or two after you answer, to a separate PostHog project, with only the answer, the week, and a one-off random number that is never stored. It is not linked to your installation identifier or to anything else you do in the app, and IP addresses are discarded. We see totals, never who answered what.

Crash reports

If the app crashes, a crash report goes to Sentry (EU servers): the error, device model and iOS version, so we can fix it. Crash reports are set not to store IP addresses and never contain your notes or names.

Subscriptions

Purchases are made through Apple. We never see your payment details. RevenueCat manages subscription status using an anonymous app user ID and your purchase history, and sends us that status so our server can keep a record of who is subscribed (by that anonymous ID only). Nothing you write in the app is ever sent to this server.

The early-access list

Until the app is in the App Store, the website lets you leave your email address to hear when it's ready. We keep that address, and which button on the site you used, in the same private Google Sheet (Google LLC) as support messages. We use it only to tell you the app is ready, and to invite you to try it early if we run a beta. We don't add you to any other list or share the address. We delete the list within 90 days after the app launches, or sooner if you ask: send a message from the support page (choose "Privacy") and we'll remove you.

When you contact us

The support page has a form. If you use it (or "Share feedback" in the app, which opens that page), we receive your email address, your name if you give it, the topic and your message. If you came from the app, the page also shows, and sends with your message, the app version and iOS version it was opened with, and nothing else. Messages go through our server to a private Google Sheet (Google LLC), and we use them only to reply and to improve the app. We keep a message until it's dealt with and for up to a year after, then delete it. This is the one thing you write that reaches us, and only because you choose to send it from the website. Please don't put your prayers in it: we never need them to help.

This website

The site uses PostHog (EU) to count visits. Until you choose, it runs without cookies or local storage, so a return visit looks like a new one. If you accept analytics cookies, a random identifier is stored so return visits are recognised. Your choice itself is remembered in your browser's local storage. Our servers may log IP addresses, browser details and times for security and troubleshooting, and keep those logs briefly.

Legal bases

Who processes data for us

Where data leaves the UK or EEA, it's protected by the appropriate safeguards, such as standard contractual clauses.

Your rights

You can ask to access, correct or delete personal data we hold, object to or restrict its use, or withdraw consent, through the support page (choose "Privacy" as the topic). Because we hold so little, and none of it under your name, we may need your help to find it (for example, by turning off usage statistics instead). You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Children

Now I'm Found is not directed at children under 13, and we don't knowingly collect their personal data.

Changes

If this policy changes, we'll update this page and the date above, and tell you in the app if the change is significant. We will never change the promise that your prayers stay on your phone without telling you first.

Contact

Shinefort Ltd, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE · Support page