Effective date: September 5, 2026 · Last updated: September 5, 2026
Xult (“Xult,” “we,” “us,” or “our”) operates xult.ltd and xult.com, publishes Rosary Guide at rosaryguide.app, and is the developer of the Rosary Guide application distributed through the Apple App Store (together with related pages and support channels, the “Services”).
This Privacy Policy applies to Personal Data we process as a controller when you visit our websites, use Rosary Guide, contact us, or otherwise interact with the Services. It does not govern Apple, Formsubmit, Google, hosting providers, or other independent third parties, each of which processes information under its own terms and policies.
We do not sell Personal Data. We do not share Personal Data for cross-context behavioral advertising. We do not use prayer activity to build advertising profiles. We do not require an account to pray with the current web experience.
Questions and privacy requests: use the Contact form.
1. Definitions
“Personal Data” means information that identifies, relates to, describes, or could reasonably be linked with an individual, and includes “personal information” and “personally identifiable information” under applicable law.
“Process” means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
“Service Providers” (also called processors) are parties that Process Personal Data on our behalf under instructions, solely to provide services to us.
2. Categories of Personal Data we collect
The categories below describe Personal Data we collect and have collected in the preceding twelve (12) months, the purposes, typical examples, and the categories of recipients.
Identifiers and contact data
Examples: name, email address, and the contents of a support or contact message, if you write to us or use the contact form. Purpose: to respond, keep a record of the correspondence, and handle privacy or legal requests. Recipients: Service Providers that host email or process forms (including Formsubmit, which receives submissions from the contact form); Xult personnel who handle the request.
Internet, device, and technical data
Examples: IP address, browser or operating-system type, device type, language, referring URL, requested pages, and timestamps. Purpose: to operate, secure, and diagnose the Services, prevent abuse, and keep hosting available. Recipients: hosting and content-delivery Service Providers. Our sites load fonts from Google Fonts; Google may receive your IP address and related technical data when those fonts are requested, under Google’s policies.
Device preferences stored locally
Examples: a light- or dark-theme preference stored in your browser’s local storage on xult.ltd and xult.com. Purpose: to remember your display preference. Recipients: none. This value remains on your device and is not used to identify you across sites.
On-device application state
Examples: prayer progress and similar state that Rosary Guide is designed to keep on your device. Purpose: to provide the guide. Recipients: none, unless a future version transmits such data, in which case we will update this Policy before collecting new categories.
Commercial and transaction data (if you purchase through Apple)
Examples: limited purchase or subscription status (for example, that a product was purchased) that Apple may provide so we can honor entitlements. Purpose: to fulfill and restore App Store purchases. Recipients: Apple. We do not receive your full payment-card number. Apple’s processing is governed by Apple’s terms and privacy policy.
Inferences, advertising, and precise location
We do not collect precise geolocation. We do not create advertising profiles. We do not sell or share Personal Data with data brokers or advertising networks.
Sensitive Personal Data
We do not require you to provide religious affiliation, health information, or other sensitive Personal Data as a condition of using Rosary Guide. If you include religious, spiritual, or other sensitive details in a message to us, we Process that content only to handle your request. We do not collect or Process sensitive Personal Data for the purpose of inferring characteristics about you, and we do not use or disclose sensitive Personal Data except for purposes permitted under applicable law (including California Civil Code regulations section 7027(m), where applicable).
3. Sources
We collect Personal Data:
- directly from you, when you submit the contact form or otherwise communicate with us;
- automatically from your device and browser when you use the Services (and from Service Providers that operate our infrastructure); and
- from Apple, if you download, purchase, or use the iOS application through the App Store.
4. How we use Personal Data
We use Personal Data to:
- provide, operate, maintain, and secure the Services;
- respond to support, privacy, press, and other inquiries;
- honor App Store purchases and restore entitlements;
- detect, investigate, and prevent fraud, abuse, and security incidents;
- comply with law, enforce our Terms of Use, and protect the rights, property, and safety of Xult, users, and others; and
- establish, exercise, or defend legal claims.
If we intend to Process Personal Data for a new purpose that is materially different, unrelated, or incompatible with the purposes described here, we will provide notice as described in Section 14 and, where required, obtain consent.
We do not engage in automated decision-making that produces legal or similarly significant effects concerning you.
5. Legal bases (EEA, United Kingdom, and Switzerland)
Where the GDPR, UK GDPR, or Swiss law applies, we Process Personal Data on the following bases:
- Contract. To provide the Services you request and to respond to support you initiate (Art. 6(1)(b) GDPR).
- Legitimate interests. To operate and secure the Services, prevent abuse, improve reliability, and communicate about requests you have made, where those interests are not overridden by your rights (Art. 6(1)(f)).
- Legal obligation. To comply with applicable law, including responding to lawful requests (Art. 6(1)(c)).
- Consent. Where we ask for it, or where you voluntarily send us information that we would not otherwise collect (Art. 6(1)(a)). You may withdraw consent at any time without affecting the lawfulness of Processing before withdrawal.
If a message you send includes special-category data (for example, information about religious belief), we Process it only as needed to handle your request, typically on the basis of your explicit consent by sending the communication, or as otherwise permitted by Art. 9 GDPR.
6. Disclosure
We disclose Personal Data only as follows:
- Service Providers. Hosting, content delivery, email, and form-processing providers, including Formsubmit for the website contact form. They may Process Personal Data only to perform services for us.
- Apple. When you download, purchase, or use the iOS application through the App Store.
- Professional advisers and authorities. Counsel, auditors, or public authorities where we are legally required to disclose information, or where disclosure is necessary to protect against serious harm, fraud, or abuse.
- Business transfers. If we sell, merge, reorganize, or transfer all or part of our business, Personal Data may transfer to the successor as part of that transaction, subject to this Policy or a successor policy providing equivalent protection. We will use reasonable efforts to provide notice before your information becomes subject to a materially different policy.
We may create aggregated, de-identified, or anonymized data that cannot reasonably identify you, and we may use and disclose that data for lawful purposes, including analysis and improvement of the Services.
7. Retention
We retain Personal Data only as long as reasonably necessary for the purposes described in this Policy, including to complete a support conversation, comply with legal or security obligations, resolve disputes, and enforce agreements.
As a general practice: support emails and form submissions are retained for the duration of the matter and typically up to two (2) years thereafter, unless a longer period is required by law or needed to address a security or legal issue; server logs are retained on our host’s ordinary rotation schedule; local-storage preferences remain until you clear site data; and on-device application state remains on your device until you delete the application or clear its data.
When retention ends, we delete or de-identify Personal Data, except where we must keep a limited record to comply with law.
8. Security
We implement administrative, technical, and organizational measures appropriate to the nature of the Personal Data we Process, including transmission over HTTPS and access limited to personnel and Service Providers who need it. No method of transmission or storage is completely secure. You use the Services at your own risk. If we become aware of a breach affecting your Personal Data, we will notify you and regulators as required by applicable law. If you believe your information has been compromised, use the Contact form.
9. Children
Rosary Guide may be used by families for personal devotion. We do not knowingly collect Personal Data from children under thirteen (13) years of age in the United States (or under sixteen (16) in the European Economic Area or United Kingdom, or the age of digital consent in the child’s country) for marketing, profiling, or account creation. The current web experience does not require an Xult account.
If you are a parent or guardian and believe a child has provided Personal Data to us, use the Contact form. We will delete the information, except where we must retain a limited record to comply with law. We do not sell or share the Personal Data of consumers we know to be under sixteen (16).
10. Your privacy rights
Depending on where you live, you may have the right to know, access, correct, delete, and export Personal Data, to opt out of sale or sharing (we do not sell or share), and to lodge a complaint with a supervisory authority. Use the Contact form.
11–15.
International transfers, cookies, third-party services, changes, and contact details are stated in the complete policy at xult.ltd/privacy. The data controller is Xult. Support.