The pope's prayer app has been leaking its users' info for months