Privacy Policy

# AnonymouslyUrs.net Privacy Policy

Last updated: February 24, 2026

AnonymouslyUrs.net ("AnonymouslyUrs.net," "we," "us," or "our") provides a faith-based encouragement and prayer platform that allows users to create, receive, and share anonymous encouragement messages.

This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website, web application, SMS messaging program, and related services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

## 1. Scope and Who This Policy Covers

This Privacy Policy applies to:

1. Visitors to AnonymouslyUrs.net.
2. Users who create an account on AnonymouslyUrs.net.
3. Individuals who receive SMS notifications or emails from AnonymouslyUrs.net.

This policy does not cover how third parties (such as Stripe, AWS, or your email provider) handle your information; their privacy practices are governed by their own privacy policies.

We are based in the United States and primarily serve users located in the United States.

## 2. Information We Collect

### 2.1 Information You Provide Directly

We collect information you provide when you use our Services, such as:

1. Account information:
 - Email address.
 - Display name or nickname.
 - Password (stored in hashed form, not in plain text).
2. Recipient details for messages:
 - Recipient phone number (for SMS notifications).
3. Payment and subscription information (via Stripe):
 - Nickname and email associated with your billing profile.
 - Subscription plan details.
 - Limited billing metadata we receive from Stripe (such as the last four digits of your card, card type, customer ID, and transaction history).
 - We do not collect or store full card numbers, CVV codes, or sensitive payment authentication data; Stripe processes these directly.
4. Support and communication:
 - Messages you send to our support email or through contact forms.
 - Feedback, survey responses, and other communications.

### 2.2 Information We Collect Automatically

When you use the Services, we may automatically collect:

1. Device and browser information (for example, browser type, operating system, device type).
2. IP address and approximate location (city/region level, not precise GPS).
3. Log data (pages viewed, referring/exit pages, timestamps, and other usage information).
4. Basic cookie or similar identifier data, used for session management, authentication, and basic analytics.

If we implement analytics tools (for example, a privacy-focused analytics service or standard web analytics), we will use them only to understand usage patterns and improve the Services, not to build advertising profiles.

### 2.3 Information Related to SMS and Email

For our SMS program and email notifications, we collect:

1. Mobile phone number.
2. SMS consent status (for example, whether you replied YES or STOP).
3. Inbound SMS content limited to simple keywords (for example, YES, STOP, HELP) and any other messages you send.
4. Outbound SMS message type and timing (notification, confirmation, STOP confirmation, HELP).
5. Delivery and error status as provided by our SMS provider.
6. Email address and email subscription preferences (for any email notifications you choose to receive).

We use AWS services (such as AWS SNS for SMS and AWS SES for email) to send and receive messages on our behalf.

## 3. How We Use Your Information

We use the information we collect for the following purposes:

1. To provide and maintain the Services:
 - Enable you to create and manage an account.
 - Create, store, and deliver encouragement messages and reflections through secure web links.
 - Send one-time SMS notifications with a secure link to view an anonymous encouragement message.
2. To manage SMS subscriptions and consent:
 - Process YES, STOP, and HELP SMS replies according to our SMS Engineering Specification.
 - Enforce a one-notification-per-number rule until explicit consent is received.
 - Maintain audit logs of consent, opt-outs, and system behavior for compliance and safety.
3. To process payments and manage subscriptions:
 - Work with Stripe to process one-time and recurring subscription payments.
 - Manage billing, invoicing, and subscription lifecycle (including cancellations).
4. To communicate with you:
 - Send service-related emails (for example, account changes, security alerts, subscription updates).
 - Respond to your support requests and questions.
 - Send optional encouragement-related email notifications, if you choose to receive them.
5. To improve and secure the Services:
 - Monitor performance, usage, and trends to improve design and functionality.
 - Detect, investigate, and prevent fraud, abuse, or security incidents.
 - Enforce our terms, policies, and acceptable use standards.
6. To comply with legal obligations:
 - Maintain records required for tax, accounting, and regulatory compliance.
 - Respond to lawful requests from public authorities, where required.

We do not use your SMS consent data or prayer content to build marketing profiles or sell your information to advertisers.

## 4. Legal Basis for Processing (U.S.-Focused Explanation)

Although we are not presenting ourselves as a GDPR controller, it can be helpful to explain our legal reasoning in plain language.

We generally process your information because:

1. It is necessary to provide the Services you request, such as operating your account, sending SMS notifications, and processing payments.
2. You have given consent, for example when you opt in to SMS notifications by replying YES or choose to receive email communications.
3. We have a legitimate interest in operating, improving, and securing the Services in a way that does not override your privacy rights, such as preventing abuse, measuring performance, or retaining limited logs for security and compliance.

## 5. How We Share Your Information

We do not sell your personal information, SMS lists, or prayer content. We share information only in the following limited ways:

### 5.1 Service Providers

We share information with trusted third-party service providers who help us operate the Services, including:

1. Stripe (payments and subscriptions).
2. Amazon Web Services (AWS) for hosting, SMS (for example, AWS SNS), and email (for example, AWS SES).
3. Cloud hosting, logging, monitoring, and error tracking providers.
4. Analytics providers (if implemented) to understand usage and improve the Service.

These providers are authorized to use your information only as necessary to provide services to us, and they are bound by appropriate contractual and security obligations.

### 5.2 Legal and Safety Requirements

We may disclose information if we believe in good faith that it is reasonably necessary to:

1. Comply with any applicable law, regulation, legal process, or governmental request.
2. Enforce our terms and policies and protect the integrity of the Services.
3. Protect the rights, property, or safety of AnonymouslyUrs.net, our users, or others.

### 5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction, subject to continued protections consistent with this policy.

## 6. SMS and Email Communications

### 6.1 SMS Messaging

1. We send a single, neutral SMS notification with a secure web link when someone sends you an encouragement message.
2. You may choose to opt in to receive future SMS notifications by replying YES.
3. You can opt out at any time by replying STOP; we will send a confirmation message and stop sending SMS messages to that number.
4. STOP applies only to SMS messages and does not affect any separate email subscriptions or other channels you may have with us.

We do not share or sell SMS consent data or phone numbers to third parties for their own marketing purposes.

### 6.2 Email Communications

1. We may send you service emails (for example, account notices, security alerts, or payment confirmations); you cannot opt out of critical service emails while still using the Services.
2. We may also send optional encouragement-related or informational emails; you can opt out of those at any time by using unsubscribe links or contacting us.

## 7. Data Retention

We retain information only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

### 7.1 Prayer Content and Message Bodies

1. SMS-delivered web links remain active for 7 days, after which the link expires.
2. Message content and associated reflections are retained for 30 days from creation, for user access, reliability, and support.
3. After this period, we delete or irreversibly anonymize prayer and message content, except where we are required to retain limited data for legal or security reasons.

### 7.2 SMS Consent and Audit Logs

1. We retain SMS consent records, STOP/HELP logs, and related audit data for approximately 2-3 years to demonstrate compliance, investigate abuse, and maintain system integrity.

### 7.3 Account and Subscription Data

1. We retain account information for as long as your account is active and for a reasonable period afterward (for example, up to 2 years) in case you choose to reactivate or we need to resolve disputes or enforce our agreements.
2. You may request deletion of your account as described in Section 8. Some information may be retained as required by law.

### 7.4 Payment and Billing Records

1. We retain payment-related records (for example, transaction history, invoices, customer IDs) for approximately 7 years, consistent with common tax and accounting requirements.

When information is no longer needed, we will delete it or anonymize it so that it can no longer be linked to an identifiable user.

## 8. Your Rights and Choices

We aim to provide meaningful choices and control over your information.

### 8.1 Access, Update, and Deletion

Depending on how you use the Services, you may be able to:

1. Access and update your account information directly within your account settings.
2. Delete specific prayers or messages you have created, where this feature is available in the product.
3. Delete your account via in-app controls (once available) or by contacting us.

You can also contact us at our support email (listed in Section 11) to:

1. Request access to the personal information we hold about you.
2. Request correction or deletion of your personal information.
3. Request a copy/export of certain personal information, where technically feasible.

We may need to verify your identity before fulfilling certain requests. We may retain limited information where necessary for security, fraud prevention, legal obligations, or dispute resolution.

### 8.2 SMS and Email Preferences

1. To opt out of SMS, reply STOP to any SMS from us.
2. To get help regarding SMS, reply HELP.
3. To opt out of marketing or encouragement emails, use the unsubscribe link in those emails or contact us.

## 9. Cookies and Similar Technologies

We may use cookies and similar technologies to:

1. Keep you signed in to your account.
2. Remember your preferences.
3. Perform basic analytics to understand how the Services are used.

You can control cookies through your browser settings. If you disable some or all cookies, parts of the Services may not function properly.

If we add additional cookie-based tools (such as analytics or error tracking), we will update this policy or our cookie disclosures to describe them.

## 10. Security

We take the protection of your information seriously and use a combination of technical and organizational measures designed to safeguard it.

These measures include:

1. Encryption in transit (HTTPS) for web traffic.
2. Secure token-based access for SMS-linked pages, with expiration and rate limiting.
3. Limited access controls so that only authorized personnel and systems can access production data.
4. Audit logging of critical operations (such as SMS consent changes and administrative actions).
5. Regular monitoring and review of system logs for suspicious activity.

However, no system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you believe your account has been compromised.

## 11. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it as soon as possible. If you believe a child has provided us with personal information, please contact us using the details in Section 12.

## 12. State-Specific Notices (U.S.)

Residents of certain U.S. states may have additional rights regarding their personal information under applicable privacy laws (for example, the California Consumer Privacy Act (CCPA) and similar state laws).

Depending on your state of residence, these rights may include the ability to:

1. Request access to, or deletion of, certain personal information we hold about you.
2. Request information about how we collect, use, and disclose personal information.
3. Opt out of certain types of data sales or sharing as defined by state law.

We do not sell personal information as "sell" is typically defined under these laws.

To exercise applicable rights, please contact us using the information in Section 13 and indicate that your request relates to state privacy rights; we will verify and respond in accordance with applicable law.

## 13. International Users

Our Services are operated from the United States, and your information may be processed and stored in the United States or other countries where our service providers operate.

If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

## 14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

If we make material changes, we may also provide additional notice (such as by sending an email or displaying a banner on the site) as required by law.

Your continued use of the Services after any changes become effective means that you accept the updated Privacy Policy.

## 15. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, you can contact us at:

1. Email: `info@anonymouslyurs.net`

We will do our best to respond promptly and in accordance with applicable laws.