Release Notes

Web OAuth (PKCE) — Sessions use secure cookie-based PKCE with Supabase; Google and Apple sign-in redirect through a server **`/auth/confirm`** flow so login is reliable in Next.js (no more “PKCE code verifier not found”).
Google & Apple buttons — Sign-in controls follow Google Identity and Apple HIG styling on both web and mobile (layout, typography, and artwork fixes—including a clearer Apple logo).
Sign in with Apple (iOS) — Native Apple sign-in on supported iPhones with Supabase token exchange; OAuth remains available where native is not.
Sessions — More resilient storage and fallbacks on mobile (including after app restarts and on newer iOS versions).
Sign-in experience — Updated aurora / “sacred sky” visuals on login and related flows.

Web reminders hub — Dedicated **`/prayer-reminders`** page to view, create, edit, and manage reminders (localized).
Request-linked reminders — Add or edit reminders from a prayer request on the web, including **one-time** reminder dates as well as repeating schedules.
Mobile — Reminder flows tolerate brief service hiccups; iOS **AlarmKit** integration improved for real scheduled alarms (including one-shot alarms).
Outage resilience — Softer handling when alarm APIs are temporarily unavailable so you can still set or adjust reminders.

Cross-platform activation — Web **`/activate`** flow closer to mobile; liturgy **classic** vs **cinematic** variants; analytics for onboarding experiments.
Audio & narration — Clearer activation audio, background music controls (including persistent mute), and fixes for overlapping narration and prayer audio during onboarding and prayer.

iOS — Many startup and TestFlight-focused fixes for newer OS versions (lazy-loaded modules, safer push and OAuth setup, prayer overlay edge cases).
Android — OAuth deep links and launcher icon refinements; continued parity groundwork.
Web — Signup and confirmation flows hardened; prayer timer and welcome/language-picker polish.

Privacy Policy — New Section 2 explains how we use **Google** account data when you choose Sign in with Google, per the Google API Services User Data Policy.
Terms of Service — Google APIs terms acceptance and a dedicated **Google Sign-In** section; **generousprayer.org** Privacy and Terms updated (effective April 1, 2026).
Disclosure — Clearer separation of **Google** vs **Apple** in sub-processor descriptions.

CI — GitHub Actions workflow for tests and builds.
Foundation — Early monetization and admin plumbing (entitlements, billing-related APIs, admin tooling) in support of future offerings.

Prayer Feed — See and pray for real requests from people you care about
Prayer Timer — Focused prayer sessions with automatic request queuing
Groups — Create and join prayer groups to stay connected
Organizations — Church and community profiles with group coordination
Discovery — Find people, groups, and organizations to pray with
Prayer Alarms — Schedule daily reminders to build a prayer habit
Privacy Controls — Choose visibility for every request: public, group, inner circle, or anonymous
Real-time Notifications — Get notified the moment someone prays for you
Voice Requests — Record audio prayer requests for a more personal touch
Urgent Requests — Flag time-sensitive needs to alert your community
User Profiles — Customize your profile and manage your prayer activity

Updates since launch — auth, reminders, onboarding, and more