Effective: 2026-11-03
The GidoTree team provides church prayer-time aggregation. Contact rollcake.company@gmail.com for service questions or requests to access, correct, delete or restrict processing of your information. Email addresses and messages you provide for support are used to answer your request and unnecessary information is deleted when that purpose is fulfilled.
Your nickname, personal prayer topics, reminder settings, detailed prayer history and personal total are stored locally. Detailed history, personal topics and nicknames are not uploaded to our server. Uninstalling the app or deleting app data removes local information without recovery. No real name, phone number or email is required to join. We do not access contacts, photos or location. A one-time import of existing local totals supports church transfers as described below.
We process a Firebase anonymous user ID (UID), church code, church name and church aggregate time to enforce membership in up to two prayer rooms and show shared totals. Membership may reveal religious beliefs, so we request separate consent before creating or joining a church.
To transfer time between churches, we store an anonymous user's cumulative balance, contributions per church and reset generation. We do not store nicknames, personal topics or detailed prayer history on the server. The room creator’s anonymous UID and a shared prayer topic of fewer than 300 characters are stored on the server and visible to room members. Do not post personal or sensitive information about others. Once per anonymous account, existing local totals can be imported as an estimate without independent verification. Switching rooms does not move existing time. New prayer time is credited only to the room where the session started. Leaving deducts only that room’s applicable contribution and carries that room’s balance to the next room you join, preserving the other room’s contribution. Church totals reset after 30 days without new prayer credit; personal local history remains.
For duplicate and abuse prevention we temporarily process session IDs, anonymous UID, church code, start and last checkpoint times, credited seconds, completion status and request counts. Firebase Authentication, App Check and Cloud Functions may process IP addresses, SDK versions, user agents, integrity evidence, authentication tokens, installation identifiers and Functions SDK FCM tokens for authentication and security. We use no advertising SDK, Google Analytics or ad tracking.
Prayer reminders are scheduled locally on your device. Notification permission is optional. Reminder times and personal prayer topics are not sent to the server. Our server does not store SDK notification tokens separately or use them to send notifications. Google policies govern SDK-managed information.
Anonymous accounts, transfer balances, contributions and current membership are retained until account deletion. Leaving removes membership of that room. Deleting an owner’s anonymous account also clears their shared room topics and owner identifier. Temporary sessions and rate limits become eligible for Firestore TTL deletion after 24 hours; actual removal may take longer.
Settings > Delete personal data and anonymous account deletes local nicknames, topics, history and reminder settings, cancels scheduled reminders, and removes that UID's server membership, transfer balance, contributions, sessions, rate limits and Firebase anonymous account. Previously aggregated church totals remain.
Uninstalling alone does not request deletion of the server account. Delete in the app first or keep your anonymous support ID. Firebase authentication IP logs may be retained for weeks, and authentication data may take up to 180 days to be removed from operational and backup systems under Google's policies. Infrastructure security logs follow Google Cloud retention policies.
Google LLC (Firebase and Google Cloud) provides authentication, storage, server functions, integrity checks and invitation website hosting. Data is sent over encrypted internet connections. The Firestore database is in the United States (nam5); server functions run in Seoul, South Korea (asia-northeast3). Managed authentication and security services may process data in the United States and other Google operating regions. Retention follows section 4 and Google's service policies: https://firebase.google.com/support/privacy
If you do not want this processing, do not join a church, or delete your account and stop using the service. Church features require this processing. We do not sell or share information for advertising.
Settings lets you edit your nickname, leave a church, read this policy, copy your anonymous support ID, and delete personal data and your anonymous account. If you cannot use the app, email rollcake.company@gmail.com with the subject 'GidoTree data deletion request'. Provide your anonymous ID and church information if known; we will explain the minimum verification needed and respond with the result. Do not send passwords or authentication tokens.
Because accounts are not linked to names or email addresses, a nickname alone cannot identify an account. Additional verification may be needed. Deletion information: https://gidolog-praytime.web.app/delete-account/
We use HTTPS, Firebase anonymous authentication, App Check, Firestore access rules and server validation. Other members cannot view your private history, nickname, UID list or transfer balance. Existing local totals are accepted once as an estimate with the user's agreement. Invitation links and codes grant membership access; share them with people you trust. GidoTree is for users aged 14 or older and does not provide features to collect information from children under 14.
Changes to processing categories or purposes are announced in the app and on the public privacy page with an effective date. Contact: rollcake.company@gmail.com.
Violence, hate, harassment, sexual content and disclosure of other people’s personal information are prohibited. A baseline harmful-language filter is applied before publication. Members can report a room or owner and block the owner’s posts from the room topic screen. Block lists stay on the device. A report stores the reporter’s anonymous UID, room code, owner anonymous UID, reason, a snapshot of the room name/topic and report time. Only operators can read reports and may remove content or restrict features after review. Reports become eligible for deletion after 90 days. Account deletion removes reports submitted by that account. Contact: rollcake.company@gmail.com