Last Updated: 30th April 2026

1. Introduction

Doxa Foundation ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites and use our services. This policy applies to all users of our websites, including both public visitors and registered users.

By using our websites, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our websites.

2. Information We Collect

We collect the following categories of information:

• Contact Information — Name, email address, phone number — To communicate with you and respond to inquiries

• Organization Information — Church name, role/position — To manage adoptions and partnerships

• Account Information — Email, password, timezone — To create and manage your account

• Preferences — Notification settings, mailing list opt-in — To personalize your experience

• Payment Information — Billing details, donation amounts — To process donations (Give Portal)

• Message Content — Form submissions, inquiries — To respond to your requests

• Verification Data — Cloudflare Turnstile data — To prevent spam and abuse

2.1 Main Website (doxa.life)

When you visit our main website, we use a first-party visitor identifier (stored as a cookie scoped to .doxa.life) to understand how visitors move between our marketing site (doxa.life) and our prayer campaign site (pray.doxa.life). This identifier is generated on your device, is not shared with third parties, and is described further in Section 4.3. We also collect information when you voluntarily submit forms, including:

• Contact forms: Contact information and message content

• Adoption forms: Organization information and contact information for designated representatives

• Give Portal: Payment information and contact information for donations

2.2 Prayer Campaign Website (pray.doxa.life)

When you create an account on our prayer campaign website, we collect:

• Account information: Contact information for account creation

• Preferences: Timezone, notification settings, and mailing list preferences

2.3 Automatically Collected Information

We may automatically collect certain information about your device and how you interact with our websites, including:

• IP address

• Browser type and version

• Operating system

• Pages visited and time spent on pages

• Referring website addresses

• Date and time of access

We use our own self-hosted analytics service to understand how visitors interact with our content on both doxa.life and pray.doxa.life. This is a first-party service that runs on our own infrastructure — your activity data is not sent to any third-party analytics provider (such as Google Analytics or Meta). See Section 4.3 for details on what is collected and how it is used.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Contact Form Submissions

• To respond to your inquiries and messages

• To provide customer support

• To communicate with you about your requests

3.2 Adoption Form Submissions

• To process and confirm your church's adoption of a people group

• To connect with your designated Prayer Champion

• To send prayer updates and resources related to the adopted people group

• To manage our adoption program

3.3 Prayer Campaign Accounts (pray.doxa.life)

• To create and manage your account

• To send prayer notifications at times appropriate for your timezone

• To send mailing list emails (if you have opted in)

• To personalize your prayer campaign experience

• To communicate with you about your account and our services

3.4 General Uses

• To improve our websites and services

• To ensure security and prevent fraud

• To comply with legal obligations

• To enforce our terms and conditions

4. Third-Party Services

4.1 Cloudflare Turnstile

We use Cloudflare Turnstile, a service provided by Cloudflare, Inc., to protect our contact form from spam and abuse. When you submit the contact form, Cloudflare Turnstile may collect certain information about your device and browser to verify that you are a human user. This service may set cookies or use other tracking technologies.

For more information about Cloudflare's privacy practices, please visit: Cloudflare Privacy Policy

4.2 Mailgun

We use Mailgun to send emails to users of our prayer campaign website (pray.doxa.life). When you sign up for prayer notifications or the mailing list, your email address is shared with Mailgun for the purpose of delivering emails. For information about Mailgun's privacy practices, please visit: Mailgun Privacy Policy

4.3 Self-Hosted Analytics

We operate our own analytics server on Doxa Foundation infrastructure. This service collects:

• A randomly generated visitor identifier (UUID), stored as a cookie scoped to .doxa.life and in browser localStorage. The same identifier is used across doxa.life and pray.doxa.life so we can understand how a single visitor moves between the two sites.

• Pages visited, time spent on each page, and the page that referred you to us.

• UTM campaign parameters (when present in URLs).

• Browser language, screen size, and your approximate location (country/region) derived from your IP address.

This data is never shared with third parties and is never used for advertising, profiling, or cross-site tracking beyond our own two websites. It is used solely to understand visitor journeys — for example, whether someone who reads about a people group on doxa.life goes on to subscribe to prayer notifications on pray.doxa.life — so we can improve the experience.

5. Data Storage and Retention

5.1 Storage Location

Your information is stored in:

• Our website databases (for form submissions and user accounts)

• Our self-hosted analytics database (for visitor activity, on Doxa Foundation infrastructure)

• Mailgun's systems (for email delivery)

5.2 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Form submissions (contact and adoption forms) are retained until you request deletion

• Prayer campaign account information is retained for as long as your account is active

• We will delete your information upon your request, subject to any legal obligations to retain certain data

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

6.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as:

• Mailgun (for email delivery)

• Cloudflare (for spam protection)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

6.3 With Your Consent

We may share your information with your explicit consent or at your direction.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a portable format.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request deletion of your personal information. We will honor such requests, subject to any legal obligations to retain certain information.

7.4 Opt-Out

For prayer campaign users (pray.doxa.life), you can:

• Update your notification preferences at any time

• Unsubscribe from the mailing lists

• Delete your account

7.5 Objection to Processing

You have the right to object to our processing of your personal information in certain circumstances.

7.6 Restriction of Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

7.7 Withdraw Consent

Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in Section 12 (Contact Us).

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our websites are not intended for children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete that information.

10. International Data Transfers

Our websites and services are hosted in the United States. If you are accessing our websites from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Your continued use of our websites after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: https://doxa.life/contact-us

For users in the European Union, you also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.

13. Additional Information for Specific Jurisdictions

Users in certain jurisdictions (including the European Union under GDPR and California under CCPA/CPRA) may have additional rights regarding their personal information. The rights outlined in Section 7 apply to all users regardless of location.

We do not sell personal information. Our legal basis for processing includes your consent, legitimate interests (website security, service improvement, and first-party analytics), and compliance with legal obligations.

If you have questions about your rights under your local privacy laws, please contact us.