1. Who we are
Pray4me (“Pray4me”, “we”, “us”) runs the prayer platform at p4me.ng (also reachable at pray4me.ng) and its mobile and desktop apps. We are the data controller for the personal data described in this policy.
Our software, hosting administration and email are provided by Plovtech Solutions IRL, 77 Lower Camden Street, Dublin, D02 XE80, Ireland, acting on our instructions.
For anything about privacy, including exercising your rights, contact our data protection contact at hi@p4me.ng.
2. The laws we follow
We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the directives of the Nigeria Data Protection Commission (NDPC). Where you are in the European Union, the European Economic Area or the United Kingdom, we also follow the General Data Protection Regulation (GDPR / UK GDPR); see our GDPR & your rights page.
3. What we collect
| Type | Examples | Where it comes from |
|---|---|---|
| Account details | First and last name, email address, phone / WhatsApp number, country, password (stored only as a secure one-way hash) | You, when you join |
| Google sign-in | Your name, email address and Google account ID | Google, only if you choose “Continue with Google” |
| Prayers and content | Audio prayers you record, titles and descriptions, comments, prayer requests and messages you send us | You |
| Sign-in codes | One-time 6-digit codes we email you (stored only as a secure hash, valid for 10 minutes) | Created by us |
| Technical and security data | IP address, the country it belongs to, browser and device type, pages requested, date and time, sign-in attempts | Your device, automatically |
| Payment details (when payments start) | Amount, region and the payment reference; card details are handled by the payment provider, not stored by us | You and our payment provider |
4. Prayers are sensitive information
What you pray about can reveal your religious beliefs and sometimes your health or family situation. Both the NDPA and the GDPR treat these as sensitive personal data. We therefore only process them with your explicit consent, which you give when you choose to share a prayer, and you can withdraw it at any time (see section 10).
- Every audio prayer and comment is checked by a person on the Pray4me team before it appears on the site.
- Audio prayers are available to signed-in members only, not to the public internet.
- Please don't include phone numbers, addresses, bank details or other private details of yourself or others in prayers; our reviewers remove content that does.
5. How we use your information
| Purpose | Lawful basis |
|---|---|
| Create and run your account, sign you in, send sign-in and password-reset codes | Performance of our contract with you (the Terms of Service) |
| Publish, review and play prayers and comments you choose to share | Your explicit consent |
| Answer messages you send through Contact us | Our legitimate interest in replying to you, or steps you asked us to take |
| Keep Pray4me safe: detect abuse, block attacks, limit repeated sign-in attempts, keep security and audit logs | Our legitimate interest in protecting members and the service; legal obligations on data security |
| Process payments and keep financial records (when payments start) | Contract; legal obligations (tax and accounting) |
| Comply with the law and respond to lawful requests from authorities | Legal obligation |
We do not use your data for advertising, we do not build marketing profiles, we do not make decisions about you by automated means alone, and we never sell personal data.
6. Who we share it with
- Other members — only the prayers and comments you choose to share, after review, shown with your first name and last initial.
- Pray4me team and prayer partners — reviewers, and (when prayer requests start) the pastor or prayer partner assigned to pray for your request, who see only what they need.
- Service providers who work on our behalf under contract: Plovtech Solutions IRL (software and administration), our server hosting provider, Google (only for “Continue with Google”) and, when payments start, our payment provider.
- Authorities — only where the law requires it.
Our sign-in and password-reset emails are sent from our own mail server; we do not use a third-party marketing email service.
7. International transfers
Our servers and some service providers may be located outside Nigeria (for example in the European Union or the United States). When your data is transferred outside Nigeria (or outside the EU/UK), we rely on an adequate level of protection — such as the recipient country's data protection law, standard contractual clauses, or another mechanism recognised by the NDPC or the GDPR — and we keep a record of the basis for the transfer.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account details | While your account exists; deleted within 30 days after you ask us to close it (unless the law requires us to keep something longer) |
| Audio prayers and comments | Until you or we remove them, or your account is deleted |
| Sign-in and reset codes | 10 minutes (then they stop working) |
| Website traffic records (IP, country, page, browser) | 30 days by default, then deleted automatically |
| Security and audit records (sign-ins, changes made by staff) | As long as needed to protect the service and meet legal obligations |
| Contact messages | Up to 24 months after the conversation ends |
| Payment and tax records (when payments start) | As long as Nigerian tax and accounting law requires |
9. How we protect it
Encrypted connections (HTTPS) everywhere; passwords and one-time codes stored only as secure hashes; private audio stored outside the public web folder and streamed only to signed-in members; staff access protected by a two-step authenticator and restricted to approved network addresses; a web application firewall; limits on repeated sign-in attempts; and an audit log of staff actions. If a personal data breach is likely to put your rights at risk, we will notify the NDPC within 72 hours and tell you without undue delay.
10. Your rights
You have the right to:
- be informed about how we use your data (this policy);
- access your data and receive a copy in a common electronic format;
- correct inaccurate or incomplete data — you can also edit your details in My account;
- delete your data (“right to be forgotten”) where there is no reason for us to keep it;
- restrict or object to processing, including processing based on our legitimate interests;
- withdraw consent at any time, for example by asking us to remove a prayer — this does not affect what was done before you withdrew;
- data portability, where it applies;
- complain to the Nigeria Data Protection Commission (ndpc.gov.ng), or to your local data protection authority if you are in the EU/EEA or UK.
To use any of these rights, email hi@p4me.ng from the address on your account. We may ask you to confirm your identity, and we will reply without undue delay and within one month at the latest.
11. Cookies and similar technology
We use only the cookies needed for the site to work: a session cookie that keeps you signed in, and a security cookie that protects forms against forgery. We do not use advertising or third-party tracking cookies. The TrustedAudios recorder keeps unsent drafts on your own device until you submit them. Because these are strictly necessary, no cookie banner is needed; you can still clear cookies in your browser at any time (you will be signed out).
12. Children
Pray4me accounts are for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as Pray4me grows (for example when payments or the mobile apps launch). We will change the effective date above and, for important changes, tell members by email or on the site before they take effect.
14. Contact
Pray4me · Data protection contact: hi@p4me.ng · Website: p4me.ng
Software by Plovtech Solutions IRL, 77 Lower Camden Street, Dublin, D02 XE80, Ireland.