BrachotA small place for gratitude

Privacy policy

Last updated: September 28, 2026

100 Brachot works without signing up or creating an account. By default, everything you enter stays on your device. We never sell data, and the app shows no ads.

Data leaves your device only for features you choose to use — phone reminders, cloud backup (by signing in), groups and messages you send with the contact form — and for anonymous usage statistics, which you can turn off at any time. Besides that, as with any website, the hosting servers receive the technical details of each request (see "Hosting and service providers"). Each section below explains what is stored and how to delete it.

This data is kept in your browser's storage, on this device:

  • Your blessing log: for each day, which blessings you marked, how many and when, with totals by category. When the device's storage runs low (or the log grows very large), days from more than about two years ago are condensed on the device to their totals: the sums, dedication and removals are kept, and the details of each blessing are dropped.
  • Dedications: the name and text you enter are stored with that day's blessings, and your last dedication is kept to suggest it again.
  • Your shortcuts (names, counts and categories) and settings: location, profile (nusach and custom, man or woman, which prayers you usually say, where you live for the days of Yom Tov — automatic, Israel or abroad — and, for women, whether you say the Shema blessings, Baruch She'amar and Yishtabach), text size, language, color theme and reminder preferences.
  • What the app works out for you: achievements and when you earned them, and a short list of Shabbat and holiday dates you already completed or chose not to complete, so it won't ask again.
  • Random identifiers the app creates on the device, used only for groups, the anonymous statistics, messages from the contact form and deletion requests (see below). If you signed in, also the sign-in token and the account's details (id, email and name) for syncing; after signing out, only which account synced last and when is kept, so you are asked before its data is merged with another account.
  • A copy of the app's files so it also works offline, marks made from a notification that are waiting to be added to your log, and technical settings such as the app's id.

Streaks, achievements, year summaries, daily times (zmanim) and the Hebrew date are all calculated on the device itself (using the Hebcal library), without sending anything out.

Your location is used only to calculate times (such as nightfall, when the counting day changes) and to know when Shabbat and holidays fall. You can pick a city from a list. The number of Yom Tov days (one in Israel, two abroad) follows the location, or the place of residence you chose in your profile.

"Use my current location" asks for your browser's permission and stores on your device the nearest listed city, or an approximate position (rounded to about 5 km) and time zone — never your exact position. With reminders on, it is sent to our server for that purpose only, and when you are signed in it syncs to your account.

Reminders are off by default. Only if you turn them on, our server keeps what it needs to send them:

  • The notification subscription address your browser creates for this device, and its encryption keys.
  • Your reminder preferences — types, times, quiet hours, daily maximum and language — and your device's time zone.
  • The location you chose (the city's coordinates or the approximate position), and whether you keep one or two days of Yom Tov — to calculate times and to avoid sending reminders on Shabbat and holidays.
  • How many blessings were counted today (and on the previous day), which prayers were marked, the names and counts of prayer shortcuts still open, and ids of the latest marks made from a notification — so you are reminded only when needed, can mark them with one tap from the notification, and no mark is counted twice. If the daily base is on, also how many blessings it counts on a weekday and which prayers it marks — so reminders take it into account on a day the app has not been opened yet.
  • When reminders were sent and how many per day over the last 60 days — to avoid duplicates, keep to the daily limit, send fewer, and for aggregate statistics.

None of this includes your name, phone number or email address. The notification itself is delivered by your browser's push service (for example Google, Apple or Mozilla). A mark made from a notification is saved on your device first. Turning reminders off deletes all of this from our server, and a subscription the app has not been in touch with for 60 days is deleted automatically (after 7 days if it never reported a day, and 30 days after notifications to it kept failing). We never send reminders by email.

Signing in is optional, and the app works fully without it. Sign-in goes through the hosting provider's login system, with your Google account, and from it we receive only your email address and full name.

While you are signed in, your account stores: your blessing log (for each day: which blessings, how many and when, including shortcut names, and dedications with the names you entered), your shortcuts, and the settings that sync between devices — location (including an approximate position you chose, rounded to about 5 km), profile and custom, language, text size, kavana mode, the daily base (which blessings are counted automatically every day), your last dedication, achievements and when you earned them, the shortcuts you deleted, and the list of Shabbat and holiday dates you completed or chose not to complete — together with the change times that syncing needs.

Through the app, only you can see this data. The app operator has technical access to data stored on the server and uses it only for operation, security and support. It is kept until you delete it: "Delete cloud backup" removes all the records and keeps only the time of deletion, so your other devices stop syncing; deleting all your data while signed in (see "Deleting your data") also removes that time and the account record itself (email and name). Signing out keeps your data on the device.

Reminders, groups and usage statistics are separate from your account: they are not stored in it, and their requests are sent without your sign-in details. Device identifiers are not stored in your account either. Only the contact form sends your sign-in together with the device's details, while you are signed in: a message is stored with both the device id and the account's email (see "Contact"), and a deletion request uses both so that everything is deleted at once, without storing any link between them.

You can also save a backup file on your device and restore from it. The file stays with you and is never sent to us.

Only if you create or join a group, our server stores your chosen display name, your daily totals for the last 62 days and their sum since joining, on how many different days you counted blessings (to know when totals may be shown, see below), when you joined and last reported, whether you manage the group, a random device id and a SHA-256 hash of a secret created on your device (never the secret itself), plus the group's details (name, type, code, dedication, description, goal and dates).

Members see only your name, whether you completed 100 today, and whole-group totals — never your own count. Totals are shown only while the group has at least three active members (who joined more than a day ago and counted blessings on at least three different days), and each total only when at least three of them counted in it; a chavruta shows no totals at all. Anyone with the invitation code sees the group's name, dedication, description and number of members, and for a campaign its total — under the same rule.

Leaving a group deletes your membership (blessings already counted stay in the group total, unlinked); deleting a group deletes all its data. Deleting all your data (in Settings or with the contact form) also takes you out of every group.

To help us improve the app, it sends our server a short, anonymous daily summary of how it is used: the date (halachic day) it describes, how many times the app was opened, how many times blessings were added and how many, how many blessings were counted that day and whether you reached 100, the length of your streak, how blessings were added (tap, manual, shortcut, notification, or completing a past day or a Shabbat or holiday), the time from opening the app to the first blessing, whether the app was opened from the home screen as an installed app and whether it was just installed, whether reminders are on, turning them on or off, whether the daily base is on, and how often the app was opened from a reminder and of which kind, how many times you shared (the app, a group invitation or an image) or joined a group, whether you finished the welcome steps, since which day you have used the app, the language and the device type (iOS, Android or computer). In Settings you can see today's summary exactly as it is sent.

The summary is identified only by a random id, derived by one-way hashing from a secret key of your device (the key itself is never sent with the summary), and the server also records when it arrived. We store no other identifying detail with it and never link it to you, your account, your groups or your reminders. It is always sent without sign-in details, cookies or the address of the page you are on — also when you are signed in. It never includes your name, email, phone, which blessings you said, shortcut names, dedications, your location or city. Your IP address is not stored in the statistics records: as with any website, the hosting server sees it during the request, and our server uses it only in memory, as a one-way hash, to limit excessive requests.

The data is used only to compute aggregate metrics that help us improve the app, and for the counter "… blessings counted in the app today", which shows a total only: a device is counted in it only about 20 hours after its first report, and for at most 300 blessings a day. It is never sold or passed to anyone except our hosting provider, which stores it for us, and it is deleted automatically after 6 months at most — or right away, by a request to delete all your data from the same device, which finds the records by the same hash of the secret key.

It is on by default, and you can turn it off at any time in Settings, under "Privacy & usage data". From then on, the app no longer collects or sends usage data and no longer asks for the "… blessings counted in the app today" counter. The app has no other usage statistics: the hosting provider's built-in statistics are turned off. Standard server logs (see "Hosting and service providers") do not depend on this setting.

Share images (of a completed day, an achievement or a year summary) are created on your device and leave it only if you choose a share target. Share links and group invitations open in the service you pick (such as WhatsApp, Telegram or email), under that service's own privacy policy.

We do not sell, rent or pass on data to anyone for advertising, and the app has no ads or third-party trackers.

The app and its server run on a cloud hosting provider, which processes the data only on our behalf. As with any website, the hosting servers receive the technical details of each request — IP address, browser type, page address and time — and may keep standard server logs for a limited time. Requests for usage statistics, groups, reminders and the contact form are sent without cookies or the address of the page you are on, and without sign-in details — except a message or deletion request sent while you are signed in (see "Contact" and "Deleting your data"). Messages from the form reach our mailbox through the hosting provider's mail service. Notifications themselves go through your browser's push service, and signing in goes through the hosting provider's login system with your Google account — only if you choose to use them.

  • In Settings ("Delete data") or with the contact form ("Delete my data") you can delete all your data. The request is carried out right away and automatically: first everything on our server that belongs to you — your membership in every group, your reminder subscription, this device's usage statistics and the messages kept from the contact form, and, if you are signed in, your cloud backup (including the time of deletion) and the account record itself (email and name) — and only then all the data on your device, including marks from notifications waiting for your log, the random identifiers and the offline copy (when online). Finally you are signed out.
  • So that only your data is deleted, the request proves ownership: it carries your device's secret key (the server compares only one-way hashes of it and doesn't store it), your device's notification subscription keys, and, if you are signed in, your sign-in. Records that don't match are not deleted.
  • Groups, reminders, statistics and messages belong to the device they came from, so only a request from that device, before its app data is cleared, can delete them (a message sent while signed in is also deleted by a request sent while signed in to the same account); the cloud backup and the account are deleted only by a request sent while you are signed in, from any device. If the server part fails (for example, without a connection), the data on your device is kept and you can try again, or choose "Delete from this device only" — then these may stay on our server: the reminder subscription (up to 60 days), the usage statistics (up to 6 months) and group memberships (until the group's manager removes you or the group is deleted), and if you were signed in, also the cloud backup and the account, until you sign in and delete them.
  • The account record is deleted automatically along with everything else. If the login system doesn't allow it to be deleted automatically (or doesn't confirm it was), we get an automatic notice (with the account's email and id) and delete it manually. Until then the account keeps only an empty marker with the time of the request, so that other devices signed in to it do not upload data to it again; the marker is deleted automatically once the account record is gone. Everything else has already been deleted.
  • Afterwards only a minimal record is kept: the request number, its time, where it was sent from, how many records of each kind were deleted and whether the account record was — no name, email or message — and it is deleted after 12 months. For a request from the contact form we get an e-mail notice with these details, the email, name and reason you entered, and the device id; they are not stored in the app. If the account record couldn't be deleted, the record holds its internal id until the notice reaches us (12 months at most). Copies of messages already e-mailed to our mailbox are not deleted by themselves — you can ask for that in the reason.
  • Turning reminders off deletes your subscription from the server; leaving a group deletes your membership; "Delete cloud backup" deletes your blessing log, shortcuts and settings from the cloud (only the time of deletion stays).
  • Anonymous usage statistics are deleted automatically after 6 months at most, or right away by a deletion request from the same device. Otherwise the records of a particular person can't be found in them, because they aren't linked to you.
  • You can also clear the site's data in your browser settings — that deletes only what is on the device.

Request deletion of your data

Data on your device is protected by the security of your browser and device, so avoid sharing the device if you want your data to stay private. Communication with the server is encrypted (HTTPS), and the server keeps only a one-way hash of your device's secret.

If we change this policy, the updated version will be posted here with its date, and significant changes will also be announced in the app.

You can reach us about anything — including privacy questions and deletion requests — with the contact form in the app (in Settings, or at the link here). We don't publish an email address: your message comes to our mailbox, and we answer personally from it to the address you entered. The app never sends anything automatically to that address.

A message is stored on our server with a reference number, the topic, the reply email, your name (if you gave one), the message, the app's language, the random device id (the same one used for groups), a deletion key — a one-way hash of your device's secret key, so that a deletion request from the same device deletes the message too — and, if you are signed in, your account's email and id (taken from your sign-in). A problem report also carries the language, the device type (iOS, Android or computer), whether the app is installed and its version. The time of the message and whether it reached us are stored too. Before you send, the form shows exactly what will be attached.

The message is e-mailed to us through the hosting provider's mail service, kept in the app for 12 months and then deleted automatically; the e-mail copy stays in our mailbox. You can have it deleted sooner with a deletion request from the same device, or while signed in to the same account. To prevent abuse, the server uses your IP address only in memory, as a one-way hash, and limits the number of messages per device and in total.

Open the contact form

A hundred blessings. Endless reasons to give thanks.