Oratio
Privacy policy
Last updated: October 12, 2026
Oratio is a Christian app for daily prayer and for learning to explain the faith. Faith is personal, so we built Oratio to collect as little as possible: your prayer journal is encrypted on your iPhone, your tradition stays on your device, there are no ads and we never sell your data.
Who is responsible
Oratio is operated by Manuel Montiel, an individual based in Mexico (“Oratio”, “we”). Contact for any privacy matter: [email protected].
What stays only on your device
- Your tradition (Catholic, Orthodox, Lutheran or Anglican, Evangelical, or “prefer not to say”). It is sensitive information: we only use it with your explicit consent, only to personalize the calendar and the Bible, and it never leaves your device.
- Your progress: streak, goals, quests, XP, talents, badges, saved answers and review cards.
- Your journal in readable form. Before anything is saved or synced it is encrypted with AES-GCM using a key stored in your iCloud Keychain. We only ever receive the encrypted text and cannot read it.
What we process on our servers
| Data | Why | Basis |
|---|---|---|
| Your Sign in with Apple identifier and, if you share it, your first name | To create your account, sync your encrypted journal and run invitations | Contract |
| Your encrypted journal entries (ciphertext only) | To sync your journal between your devices | Contract |
| Purchase records sent by Apple (transaction IDs, product, dates, status) | To know which plan you have, for example to enable AI practice | Contract |
| Your invitation code, invitations and rewards | To run the invitation program and prevent fraud | Contract and legitimate interest |
| AI practice conversations (Oratio Pro) | To provide the debate practice and your coach's feedback | Contract |
| Searches that found no answer, without any identifier | To decide which answers to write next | Legitimate interest |
| Your email, if you join the waitlist on this website | To tell you once when Oratio launches | Consent |
| Technical logs (IP address, time, request), kept for up to 90 days | Security and to keep the service working | Legitimate interest |
We do not use advertising, analytics or tracking SDKs, and we do not combine your data with data from other companies.
AI practice
When you use AI practice (Oratio Pro), your messages in that conversation are sent to Anthropic, which provides the Claude model, to generate the replies and your coach's feedback. We do not send your name, your email, your Apple identifier or your tradition. Conversations are deleted from our servers after 30 days. Under its commercial terms, Anthropic does not use this data to train its models. If you report a response, we keep that report to review it. More in How we use AI.
Who else is involved
- Apple: Sign in with Apple, App Store payments, iCloud Keychain and notifications. Apple processes payments; we never see your card details.
- Anthropic: AI practice in Oratio Pro, as described above.
- Cloudflare: secure delivery of this website and our API (DNS, encryption in transit and protection against attacks).
- Our hosting provider: the private server where our database runs.
Some of these providers may process data outside your country, including in the United States. We use providers that offer appropriate safeguards, such as standard contractual clauses where required.
How long we keep data
- Account, encrypted journal and invitations: until you delete your account.
- AI practice conversations: 30 days.
- Purchase records: as long as required to provide your subscription and meet legal obligations.
- Waitlist email: until launch, or earlier if you ask us to delete it.
- Technical logs: up to 90 days.
Your rights
You can access, correct, delete or obtain a copy of your data, object to or restrict its use, and withdraw consent at any time. In Mexico these are your ARCO rights; in the EU and UK, your rights under the GDPR; in California, your rights under the CCPA. You can:
- Delete your account and data from the app: Profile → Delete account and data. See Delete your account.
- Remove your tradition anytime in Settings → Faith.
- Write to [email protected] for any other request. We answer within 20 business days.
If you believe we have not respected your rights, you can contact the data protection authority in your country.
Children
Oratio is not directed to children under 13, or under the age of digital consent in your country. If you believe a child has given us personal data, write to us and we will delete it.
Security
All connections are encrypted. Your journal is end-to-end encrypted. We store only a hash of session tokens, restrict access to our servers and keep the minimum data necessary.
Changes
If we change this policy in a meaningful way, we will tell you in the app before the change takes effect.