Cana
← Back to home

Your data

Privacy Policy

This Policy explains what data Cana needs, why it is used, who may receive it, and which choices remain in your hands.

Last updated August 16, 2026

1. Scope

This Policy applies to the Cana website, Android app, and server-side features. Cana is the service operator and controller responsible for the processing described here. Privacy questions can be sent through “Settings → Contact support” in the app.

2. Data we process

Technical account and device data

On first launch, Cana creates technical account and installation identifiers. The server may receive a device identifier, device type and model, Android and app versions, language, time zone, push-notification token, and session data. These are used to sign you in, synchronise the app, protect access, and deliver notifications.

Profile and religious preferences

If you provide them, Cana stores your name, username, avatar, language, Christian tradition, stage of spiritual journey, selected topics, prayer reminder times, and chosen parish. This information may be sensitive personal data. We use it only to personalise the features you select and never for advertising.

Location

The app requests approximate location only with device permission and only to show nearby parishes. You can withdraw that permission in Android settings. Nearby search may then become unavailable, but the app’s other core features will continue to work.

Content and communications

We process messages in parish rooms and conversations, support requests, messages sent to the AI spiritual guide, prayer intentions, candle activity, photos, voice messages, and transcripts only when you use the relevant features. Community messages are visible to members of the selected space; private conversations are available to their participants and the systems needed to process them.

Reading and activity

Cana stores reading-plan progress, streak data, virtual-altar balance and activity, notification choices, and a limited history of feature use. Bookmarks and downloaded offline materials may be stored only on your device.

Payments

When you make a purchase, we receive the information needed to confirm and manage the subscription, such as the product, status, date, and transaction identifier. Full card details are processed by Google Play or another payment provider and are not shared with Cana.

Consent-based analytics and diagnostics

Firebase Analytics and Firebase Crashlytics remain disabled until you make a choice in the app. You can separately allow anonymous usage analytics and crash reports, then change either choice at any time in settings. When analytics consent is withdrawn, collection stops and the local analytics identifier is reset.

Analytics are not permitted to contain your tradition, parish, name, avatar, location, topics or goals, searches, prayer text, messages, intentions, or transcripts. Cana also disables advertising identifiers and ad personalisation.

3. Why we use data

  • to create and protect your account and maintain sessions;
  • to provide personalised content, a Bible translation, and a calendar;
  • to find nearby parishes and support communication within a community;
  • to process AI spiritual-guide requests and voice messages;
  • to deliver reminders and notifications that you choose;
  • to confirm subscriptions and restore purchases;
  • to respond to support requests, prevent abuse, and protect the service;
  • with separate consent, to understand feature use and diagnose crashes.

4. Legal bases

Depending on your country, we process data to perform our agreement with you, with your consent, to comply with law, and for legitimate interests in operating Cana safely and reliably. Sensitive religious data and optional analytics are processed only where an appropriate legal basis exists, including explicit consent where required.

5. Who receives data

We do not sell personal data. To operate Cana, limited information may be received by:

  • hosting, storage, and technical-infrastructure providers;
  • Google Firebase, for technical identity, push notifications, and — only with consent — analytics and diagnostics;
  • OpenAI, to generate AI spiritual-guide responses, create embeddings, and transcribe voice messages you submit;
  • Google Play and payment providers, for purchases and subscriptions;
  • community members and moderators, within the audience for which you publish content;
  • public authorities, when disclosure is legally required.

Providers receive only the data needed for their task and must process it under contractual and legal safeguards.

6. International transfers

Cana infrastructure and providers may operate in other countries. Where data is transferred internationally, we use safeguards required by applicable law, such as contractual data-protection clauses and provider assessments.

7. Retention

Data is kept while your account is active and while it is needed for the relevant feature. The exact period depends on the data type, security needs, and legal requirements. After account deletion, associated data is deleted or anonymised, except for information that must be temporarily retained for legal obligations, dispute resolution, fraud prevention, and backup recovery.

8. Security

We use access controls, protected transmission, short-lived tokens with rotation, request rate limits, and other organisational and technical safeguards. No storage or transmission method can guarantee absolute security, so please do not submit information that is not needed for the feature you are using.

9. Your rights and choices

Depending on applicable law, you may:

  • request information about and a copy of your data;
  • correct inaccurate profile data;
  • withdraw consent for analytics or crash reports in settings;
  • disable location, camera, microphone, and notification permissions through Android;
  • object to processing or ask for it to be restricted;
  • delete your account through the app settings;
  • complain to the relevant data-protection authority.

To make a request, contact support from the app. We may ask you to confirm that the request relates to your account.

10. Children

Cana is not intended for independent use by children below the age of digital consent in their country. If you believe a child has provided data without the required permission, please contact support.

11. This website

The public landing page does not require registration and currently sets no advertising or analytics cookies. Hosting infrastructure may technically process an IP address, request time, and browser information to deliver, secure, and diagnose the site.

12. Changes to this Policy

We may update this Policy as the product and the law develop. A new version will be published here with a new revision date, and material changes will be announced in the app where required.

13. Contact

For questions about data or privacy, open “Settings → Contact support” in Cana. State that your request concerns privacy and briefly describe what you need.