Privacy Policy

Lampway · Last updated: September 7, 2026

1. What we collect

Information you provide

• Names and birthdays you enter for the people in your Circle during setup (birthdays are used only to pick age-appropriate quiz content).
• Avatar choices you pick for people in your Circle — an icon color and up to two display initials — stored so every device shows the same roster.
• Admin PIN you set to lock owner-only actions.
• Reflections, journal entries, prayer requests, gratitude notes, letters, and discussion responses you and others in your Circle type into the app.
• Quiz scores, reading progress, saved verses and highlights, memory-verse practice, streaks, and badges.
• Private Solo archive (signed-in Solo plans). Personal progress, notes, memories, reflections, searches, and related Solo records may be stored in a separate account-level archive. It is private to that signed-in account and is not the same as a solo Circle or shared Circle data.
• Voice dictation (optional). If you use device dictation to enter text instead of typing, your browser or operating system may process a short audio snippet through its own speech service. Lampway receives the resulting text, which is saved like anything you type. Device dictation is optional, and you can always type instead.
• Family Audio and Memory Helper recordings (optional beta/paid features). If an entitled owner or admin chooses to record a family conversation, discussion, or gathering, Lampway uploads the temporary raw audio to private object storage so it can be transcribed. Recording laws differ by place; in many places, including California, every person in a private conversation must agree before it is recorded. The person who starts a recording is responsible for getting that agreement first. The transcript is shown for review before anything becomes a saved memory. Raw audio is deleted after transcription succeeds, when you cancel or discard, after retry exhaustion, or by the storage lifecycle backstop if cleanup fails.
• Transcripts and approved memories. Approved transcripts, summaries, saved memories, reflections, and related metadata are stored in your Circle so you can search and revisit them. Unapproved temporary transcript assets are deleted after the review flow is saved, discarded, or expires.
• Ask Lampway questions (including Pull this together). If you use Ask Lampway, Lampway sends your question plus a bounded set of already-visible source snippets to our server-side answer provider. It does not send your whole Circle archive, does not search every private item, and should cite the sources it used.
• Optional recovery email address (opt-in only). If you choose to add one, we store it so you can send yourself a recovery link if you ever lose your join code. We store both the plaintext address (so you can view and remove it in settings) and a hashed version used as a lookup key. It is used only for recovery — never for marketing — and is not shared with anyone except the email-delivery service that sends the message (Resend) and the database that stores it (Google Firebase), both acting only on our instructions.
• Account sign-in. If you create an account to own a Circle, you can sign in with Apple, with Google, or with an email address and a password you create. We receive your email address — with Sign in with Apple this may be Apple’s private relay address — and, if you share it, your name, to create your account and let you recover it across devices. A password you create is stored only as a one-way hash by Firebase Authentication; we never see it, and we never receive your Apple or Google password. Your email is used only to operate your account — never for marketing — and is handled only by Firebase Authentication and the services listed in Section 5, acting on our instructions.
• Purchases. If you subscribe, Google Play or the Apple App Store takes the payment. We never receive your card number. We receive a purchase record (which plan, when it started, renews, or ended, and a store transaction identifier) through RevenueCat so the app can unlock what you paid for.

Information collected automatically

• Anonymous device identifier (a Firebase-issued random ID) so your Circle can sync between devices. Not linked to your real-world identity.
• Crash and error reports (via Sentry) so we can fix problems. These do not include the content of your journal entries, reflections, prayers, or names.
• Usage events (via PostHog) — which screens you visit, which features you use. We mask text inputs and sensitive fields so the content you type is not recorded.
• Notification token (if you opt in) so we can send daily-reading reminders.

2. What we do NOT collect

• You can join a Circle by code without any account. Creating a Circle requires an account — Apple, Google, or email and password (see Section 1); joining never does. We do not require your phone number, and a separate recovery email is always optional.
• We do not use your email for marketing, and we do not give it to anyone for their own use. It passes only through the services in Section 5 that run Lampway for us.
• We do not collect your location.
• We do not access your contacts, photos, or camera.
• We do not sell any data to advertisers or third parties.
• We do not show third-party ads.

3. How we use your data

• To provide the app: syncing your Circle’s progress across devices, picking age-appropriate content, tracking streaks and badges.
• To send daily-reading and streak reminders (only if you opt in to notifications).
• To transcribe optional recordings, create reviewable memory drafts, and delete temporary raw-audio assets according to the lifecycle described here.
• To answer Ask Lampway questions from bounded, already-visible Scripture, waymark, memory, transcript, and reflection snippets.
• To fix bugs and improve the app, using anonymized crash reports and usage analytics.

4. Children

Lampway can be used solo, as a family, or as a small group. When a Circle includes children, it is meant to be used under parental supervision. We do not knowingly collect information directly from a child under 13. A parent or legal guardian, signed in to their own account, enters a child’s first name and birthday, and the child uses the app inside that parent’s Circle. Before the Circle is saved, the adult confirms they are the parent or legal guardian of each child listed and agrees to the limited collection described in this policy on their behalf. That confirmation is recorded with the account that made it. If you believe a child’s information reached us without a parent’s agreement, write to support@onelampway.com and we will delete it.

Children’s data (names, birthdays, reflections, quiz scores, and any approved family memories that include them) is stored only within your Circle’s private account. We do not sell it, do not use it for advertising, and do not make it public. Children do not create separate public accounts — all data stays under the parent-controlled Circle.

If you use Family Audio in a Circle that includes children, the adult owner/admin is responsible for confirming that they are the parent or legal guardian, that children are supervised, and that everyone present has agreed to be recorded. Do not use Family Audio to record anyone who has not agreed to it.

Parents can, at any time:

• Review what the Circle stores in the app on the device a child uses. Children in a family Circle use a parent’s signed-in device, so a parent can see what a child writes there.
• Edit or delete individual members from the app’s settings.
• Delete your entire Circle and all its data directly in the app, from Settings → “Delete Circle & all data” (you confirm by typing your join code). You can also request deletion by contacting us (see Section 10).

5. Where data is stored

• Google Firebase (Realtime Database) — your Circle’s data (names, birthdays, reflections, quiz progress, Personal Scroll lighting state, optional recovery email) and, for signed-in Solo plans, the separate private Solo archive. Circle access is gated to authorized members; the private Solo archive is scoped to its signed-in account. Access rules on both are intended to enforce the same private scope.
• Cloudflare R2 or equivalent private object storage — temporary raw-audio and transcript assets for optional Memory Helper / Family Audio flows.
• AssemblyAI or equivalent transcription provider — temporary access to optional recording audio so it can be transcribed.
• Anthropic or equivalent answer-processing provider — bounded Ask Lampway questions and source snippets, when you choose to use Ask.
• RevenueCat — subscription status and entitlement records if paid plans are enabled for your platform.
• Google Play / Apple App Store — process subscription payments under their own terms; we never see payment card details.
• Sentry — anonymized crash reports.
• PostHog — anonymized usage events (text inputs masked).
• Your device — a local cache so the app works offline. Cleared when you uninstall.

6. Your join code and security

When you set up the app you receive a join code (for example, a3k7p2qm). Anyone with this code can join your Circle and see what the Circle shares — the roster, progress, Gathering results, and anything a member chose to share. A member’s own private answers and reflections are readable only by the account that wrote them. Treat it like a password: only share it with people you want in your Circle. If you believe your code has been shared outside your Circle, contact us to reset.

7. Data retention

Your Circle’s saved data stays in our database until you delete it. Uninstalling the app clears your local cache but does not automatically delete cloud data — other devices with your join code can still access it. Temporary raw-audio assets are deleted after transcription succeeds, cancel/discard, retry exhaustion, or the storage lifecycle backstop. Approved transcripts and memories remain saved until you delete them or delete your Circle. To fully delete your Circle and all its data, use Settings → “Delete Circle & all data” in the app, or contact us as described in Section 10.

Your private Solo archive has a separate deletion lifecycle. When you request its deletion in Settings, the archive becomes unavailable in the app and you have a 30-day recovery period in which to restore access. If you do not restore it, its active-database copy is deleted after 45 days. Cleanup runs daily, so actual deletion may occur near day 46. Deleting the private Solo archive does not delete any Circle or shared Circle records.

Deleting your account. Settings → Delete account removes your sign-in and your personal data. Circles you own are moved to a trash archive, recoverable only by writing to support within 180 days, then deleted by the same daily cleanup; Circles you joined keep going without you. We keep a content-free record of the deletion (which account, when, what scope) for five years so we can prove it happened; it holds nothing you wrote.

Crash reports are kept for 90 days. Usage events are kept only for as long as we use them to improve the app, and never hold the text you typed.

System backups follow their normal retention cycle: we keep the last 30 nightly snapshots, the last 12 monthly snapshots, and the last 5 yearly snapshots. Backups are not selectively purged for one account, so data you delete stays inside any snapshot taken before you deleted it, and leaves our systems when that snapshot expires — which for a yearly snapshot can be up to five years. Snapshots are encrypted, access-restricted, and used only to recover from a failure or data-loss incident; we do not read them to answer questions about your data.

8. Third parties

We use the following third-party services only for the purposes described in Section 5. We use Resend, an email delivery service, to send account and recovery emails, notes from the founder, and messages you send us through in-app feedback or support. Specifically, that covers: recovery links if you have opted in and request one, weekly family reports if you have opted in, inactivity notices before an account is archived, notes we send you as the people who make Lampway, and feedback you send us together with the internal summaries we send ourselves.

• Google Firebase Privacy
• Sentry Privacy
• PostHog Privacy
• Resend Privacy — used to deliver our email: account and recovery emails (opt-in), weekly family reports (opt-in), inactivity notices, notes from the founder, and feedback you send us along with our own internal summaries.
• Cloudflare Privacy — used for private object storage.
• AssemblyAI Privacy — used for optional transcription when recording is enabled.
• Anthropic Privacy — used for optional Ask Lampway answers and memory draft processing when enabled.
• RevenueCat Privacy — used for subscription entitlement management when paid plans are enabled.

9. Where your data lives, and your rights

Lampway is operated from the United States and your data is stored there, on the services listed in Section 5. If you use Lampway from the European Economic Area, the United Kingdom, or Switzerland, we rely on the standard contractual clauses those services offer for the transfer.

Our legal basis for handling your data is the contract you make with us when you use the app (Sections 1 and 3) and, for crash reports and product analytics, our legitimate interest in keeping the app working. Reminders, recordings, and Ask Lampway run only when you turn them on, which is your consent, and you can turn each one off.

Wherever you are, you can ask us to show you the data we hold about you, correct it, delete it, or send you a copy. Most of this you can do yourself in the app (Sections 4 and 7). For the rest, write to support@onelampway.com; we answer within 30 days. If you are in the EEA, UK, or Switzerland and believe we have not handled your data lawfully, you can complain to your local data-protection authority. We do not sell personal information and have not sold it in the past twelve months, and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of under California law.

If you are under 16 and in a country where that is the age of digital consent, join a Circle by code only with your parent or guardian’s agreement.

10. Contact and data deletion requests

To request deletion of your Circle or private Solo archive, access the data we hold about you, or ask any privacy question, contact us at: support@onelampway.com

We respond to verified requests within 30 days.

This website (onelampway.com)

The App Store release list form on this site asks for an email address, the device you are on, the pathway you are interested in, an optional group size, and an optional note. We store that with our email provider (Resend, as a contact list) and email it to our operator mailbox, and we use it only to tell you when Lampway reaches the App Store. Write to support@onelampway.com to be removed. The testimonial form sends your quote, the name you want shown, and your email to our operator mailbox; nothing is published without your consent. This site uses Plausible, a cookieless analytics service that records page views without identifying you.

11. Changes to this policy

If we make material changes, we will post the updated policy here and update the "Last updated" date at the top. Continued use of the app after changes means you accept the updated policy.