Privacy Policy

Lampway · Last updated: October 9, 2026

1. What we collect

Information you provide

• Names and birthdays you enter for the people in your Circle during setup (birthdays are used to pick age-appropriate content and to apply the age-based protections described in Sections 1 and 4).
• Avatar choices you pick for people in your Circle — an icon color and up to two display initials — stored so every device shows the same roster.
• Admin PIN you set to lock owner-only actions.
• Reflections, journal entries, prayer requests, gratitude notes, letters, and discussion responses you and others in your Circle type into the app.
• Quiz scores, reading progress, saved verses and highlights, memory-verse practice, streaks, and badges.
• Private Solo archive (signed-in Solo plans). Personal progress, notes, memories, reflections, searches, and related Solo records may be stored in a separate account-level archive. It is private to that signed-in account and is not the same as a solo Circle or shared Circle data.
• Voice dictation (optional). If you use device dictation to enter text instead of typing, your browser or operating system may process a short audio snippet through its own speech service. Lampway receives the resulting text, which is saved like anything you type. Device dictation is optional, and you can always type instead.
• Family Audio and Memory Helper recordings (optional beta/paid features). If an entitled owner or admin chooses to record a family conversation, discussion, or gathering, Lampway uploads the temporary raw audio to private object storage so it can be transcribed. Recording laws differ by place; in many places, including California, every person in a private conversation must agree before it is recorded. The person who starts a recording is responsible for getting that agreement first. The transcript is shown for review before anything becomes a saved memory. Raw audio is deleted after transcription succeeds, when you cancel or discard, after retry exhaustion, or by the storage lifecycle backstop if cleanup fails.
• Transcripts and approved memories. Approved transcripts, summaries, saved memories, reflections, and related metadata are stored in your Circle so you can search and revisit them. Unapproved temporary transcript assets are deleted after the review flow is saved, discarded, or expires.
• Ask Lampway questions (including Pull this together). If you use Ask Lampway, Lampway sends your question (up to its first 600 characters) plus a bounded set of already-visible source snippets to our server-side answer provider. In a Circle, before anything is sent, Lampway replaces the names of the people in that Circle — the account holders and the reader profiles in your household, children’s included — and any email addresses with placeholders, and puts the names back into the answer on our own server. This replacement is automatic and works from the names saved in your Circle, so it can miss a nickname, a different spelling, or the name of someone outside your Circle; leave out names and details you do not want sent. It does not send your whole Circle archive, does not search every private item, and should cite the sources it used. Lampway keeps the answer it showed you, with names put back, and the search terms it used to find sources, on our server so that a repeated request is not charged twice. It is kept for at least 72 hours, then removed the next time Ask Lampway or Pull this together is used in the same Circle or account; deleting the Circle or account also removes it, as Section 7 describes. A question that reads as a crisis — self-harm, suicide, abuse, or an overdose — is never sent to the answer provider. Lampway shows a fixed safety message instead and, for adults, a set of Bible verses chosen in advance. Lampway’s own rules decide from a question’s wording whether it reads as a crisis; they cannot recognize every crisis, and a question they do not recognize is handled like any other question. A younger child’s question (12 and under) is never sent to the answer provider either (Section 4). A safety check before any answer. When this check is switched on, a question that Lampway’s own rules do not read as a crisis is first checked by the answer provider for signs of harm to you or to someone you name — abuse, violence, threats, sexual abuse, neglect, controlling behavior, self-harm, or an overdose — before any answer is shown. The check is sent the same question the answer would be, with the same names replaced. If it finds any sign of harm, you get exactly what a question that reads as a crisis gets, and no answer written by the provider; if the check cannot finish, you get Lampway’s own answer and no answer written by the provider either. The result of the check is not saved with your question or your account. This safety check is currently switched off.
• Help improve Ask (optional, 18+ only). If you separately confirm that you are 18 or older and turn on “Help improve Ask with my searches” in Settings, Lampway may keep general question text (up to 600 characters), the verse references actually shown, fit or didn’t-fit marks, and the answer status to improve and train a Lampway model. This is separate from sharing fit-mark counts. Automated filters are designed to refuse questions with first-person or other personal pronouns and family relationship wording, harm or safety topics, or medical decisions, checking the whole question before truncating it, and to remove detected household names, emails, phone numbers, and numeric identifiers. These filters can miss identifying or sensitive details, so do not include names or identifying information. We do not keep AI-written answers, Scripture text, source snippets, memories, or a link to your account in the training record. The feature is unavailable while a child or teen reader is active, in the EU/EEA, UK or Washington, or when the server cannot verify your region. Your region is estimated from your network connection by our hosting service and can be wrong, for example when you use a VPN. Collection is not monitored and is not an emergency channel. You can turn it off to stop future collection; account or private-archive deletion also stops future collection. Retained records cannot be individually located by account for early deletion. They expire after 30 days and are rescanned daily for harm and personal wording.
• Verse fit marks and answer feedback. On an answer you can mark a verse as a fit or not, and say whether the way the answer was laid out helped. These marks are stored with your own account, are used to improve your own results, are not shown to anyone else in the app, and are removed with your account (Section 7).
• Shared fit marks (optional, adults only). If you turn on “Share my fit marks” in Settings, Lampway also adds your marks to counts combined with other households’ marks, to choose better verses for everyone. Only the counts are shared — never your name, your words, your family, or your Circle — and children’s marks are never counted. It is off until you turn it on, and you can turn it off at any time.
• Shared explanations of Bible passages. When an adult’s Ask answer explains Bible passages in general — not their question, not their memories, and not a sensitive topic — Lampway may keep that general explanation without the question and without any account, and, once someone at Lampway has reviewed it, show it to other readers who ask about the same passages. Names are replaced before the answer is written, and an explanation that our checks or our reviewer find still points back to a particular person or household is refused. These checks can miss things, so do not put names or identifying details in a question.
• Optional recovery email address (opt-in only). If you choose to add one, we store it so you can send yourself a recovery link if you ever lose your join code. We store both the plaintext address and an encoded copy used as a lookup key. The address is shown in the app only to your Circle’s owner and admins, so it can be viewed and removed in Settings; the lookup copy cannot be read through the app, and neither is shown to other members or to other users. We use it for recovery and for messages about your Circle: the inactivity notices and the one-time note from Lampway’s founder described in Section 8, and notices about changes to our Terms of Service or this policy. We do not use it for advertising. We share it only with the email-delivery service that sends the message (Resend) and the database that stores it (Google Firebase), both acting only on our instructions, or as Section 8 describes.
• Account sign-in. If you create an account to own a Circle, you can sign in with Apple, with Google, or with an email address and a password you create. We receive your email address — with Sign in with Apple this may be Apple’s private relay address — and, if you share it, your name, to create your account and let you recover it across devices. A password you create is stored only as a one-way hash by Firebase Authentication; we never see it, and we never receive your Apple or Google password. Your email is used to operate your account and to send you messages about it, such as notices about changes to our Terms of Service or this policy — never for marketing. It is handled by Firebase Authentication and the services listed in Section 5, acting on our instructions, and disclosed to others only as Section 8 describes.
• Purchases. If you subscribe, Google Play or the Apple App Store takes the payment. We never receive your card number. We receive a purchase record (which plan, when it started, renews, or ended, and a store transaction identifier) through RevenueCat so the app can unlock what you paid for.
• Problem reports (optional). If you use “Report a problem” or “Report this answer” and choose to send the report to us, we receive your comment, the picture of the screen Lampway takes when you open the report (you can remove it before sending) or a screenshot you attach, and the short list of technical details shown to you before you send it (such as the screen, Waymark, reader tier, Circle type, app build, and recent error messages). A screenshot shows whatever was on your screen, which can include names, what people wrote, or an answer written by AI, so check it before sending. If you share a report through your own device’s share sheet or email instead, it goes wherever you send it and does not pass through Lampway.

Information collected automatically

• Device identifier (a random ID issued by Firebase) so your Circle can sync between devices. On its own it does not identify you; if you sign in, it is tied to your account.
• Crash and error reports (via Sentry) so we can fix problems. We set them up to leave out what you type, and to remove email addresses, join codes, account identifiers, and long numbers they recognize. That removal is automatic and can miss things: a report can still include text shown on screen, such as a name in a button label.
• Usage events (via PostHog) — which screens you visit, which features you use. We set PostHog to mask text inputs, on-screen text, and element labels, which is designed to keep what you type and what is shown on screen out of the events. Events are pseudonymous: they are tied to a hashed Circle code and a member slot, not to a name or email. Session replay (a recording of what is on screen) is switched off in the app.
• Connection data — your IP address and browser or device type are received by the services that host and run Lampway (Netlify, Google Firebase, PostHog, Sentry) as part of serving any request, and by the services that deliver fonts, Bible audio, and code libraries to your device (Google Fonts; Cloudflare; the Internet Archive and eBible.org, which host public-domain chapter audio; and the unpkg and jsDelivr code libraries some features load). We do not build profiles from them. PostHog may estimate an approximate city and country from your IP address.
• Reminder settings — if you turn reminders on, we keep your device's timezone and your quiet-hours choice alongside the push token so reminders arrive at the right hour.
• Search-gap counts — when a search or an Ask finds nothing useful, we record that it happened so we can fill the gap in Lampway’s Scripture coverage. What is stored is a one-way hash of the term and a per-day tally against a one-way hash of the account — never the words you typed, never your question, never your account id, and nothing you wrote.
• Notification token (if you opt in) so we can send daily-reading reminders.

Sensitive information

What you read, ask, and write in Lampway can reveal your religious beliefs, and prayers, reflections, and questions can include information about health or family circumstances. We use this information only to provide the features you use, as this policy describes. We do not sell it or use it for advertising.

2. Limits on what we collect

• You can join a Circle by code without any account. Creating a Circle requires an account — Apple, Google, or email and password (see Section 1); joining never does. We do not require your phone number, and a separate recovery email is always optional.
• We do not use your email for marketing, and we do not give it to anyone for their own use. It passes through the services in Section 5 that run Lampway for us, and to others only as Section 8 describes.
• We do not collect your precise location, and the app does not ask for location permission. Our hosting service tells our servers the approximate country (and, in the United States, the state) a request comes from, based on its network address. We use that only for rules that depend on where you are: which Bible translation can be shown, and whether Help improve Ask is available. It is not saved to your account or your Circle; the app may remember your country on your device. Separately, our analytics service may estimate an approximate city and country from your network address (Section 1).
• We do not access your contacts. The app opens your camera or photo library only when you choose to add a picture: a photo you add to a keepsake page stays on your device in the page you export, and a screenshot for a problem report reaches us only if you choose to send the report to us (Section 1).
• We do not sell any data to advertisers or third parties.
• We do not show third-party ads.

3. How we use your data

• To provide the app: syncing your Circle’s progress across devices, picking age-appropriate content, tracking streaks and badges.
• To send daily-reading and streak reminders (only if you opt in to notifications).
• To transcribe optional recordings, create reviewable memory drafts, and delete temporary raw-audio assets according to the lifecycle described here.
• To answer Ask Lampway questions from bounded, already-visible Scripture, waymark, memory, transcript, and reflection snippets.
• To choose better verses for everyone, from the fit marks adults choose to share, and to reuse reviewed general explanations of Bible passages between readers (Section 1). Once a week the people who run Lampway receive a summary of the changes these suggest, to approve or reject; it holds counts and passage explanations, never names, words you wrote, or accounts.
• To fix bugs and improve the app, using pseudonymous crash reports and usage analytics.
• To answer problem reports and support requests you send us.
• To keep Lampway secure and working: to prevent abuse and fraud, enforce our Terms of Service, and meet our legal obligations.

4. Children

Lampway can be used solo, as a family, or as a small group. When a Circle includes children, it is meant to be used under parental supervision. Children under 13 may not sign up for their own Lampway account, and only adults can create a Circle. We do not knowingly collect a child’s information except inside a Circle set up by a parent or legal guardian, as described here. A parent or legal guardian, signed in to their own account, enters a child’s first name and birthday, and the child uses the app inside that parent’s Circle, where what the child writes is stored like anything else in the Circle. Before the Circle is saved, the adult confirms they are the parent or legal guardian of each child listed and agrees to the limited collection described in this policy on their behalf. That confirmation is recorded with the account that made it. If you believe a child’s information reached us without a parent’s agreement, write to support@onelampway.com and we will delete it.

Children’s data (names, birthdays, reflections, quiz scores, and any approved family memories that include them) is stored in your Circle’s private space and is handled by the service providers in Section 5 only to run the features described in this policy. We do not sell it, do not use it for advertising, and do not make it public. Children do not create separate public accounts — all data stays under the parent-controlled Circle.

If a teen uses Ask Lampway on a parent’s device, the question is handled the way an adult’s is: it goes to our answer provider with the names of the people in the Circle replaced, as described in Section 1. A younger child’s question (12 and under) is never sent to the answer provider: the child gets Lampway’s own answer, built from the Bible verses. A child’s question that reads as a crisis gets the safety message only. Children’s fit marks are never added to shared counts, and answers to a child’s questions are never kept as shared explanations. These age-based protections rely on the birthday entered for each reader, so enter it accurately.

If you use Family Audio in a Circle that includes children, the adult owner/admin is responsible for confirming that they are the parent or legal guardian, that children are supervised, and that everyone present has agreed to be recorded. Do not use Family Audio to record anyone who has not agreed to it. Recordings in a Circle with children can include their voices: the audio goes to our transcription provider (AssemblyAI), and the transcript goes to Anthropic to draft the memory page (Section 5). Saved memories and transcripts can later be used as sources for Ask Lampway, as Section 5 describes.

Parents can, at any time:

• Review what the Circle stores in the app on the device a child uses. A child usually reads on a parent’s signed-in device, where a parent can see what the child writes. If you give a child your join code, the child can also join on their own device once an owner or admin approves; what the child writes privately there can be read in the app only on that device.
• Edit or delete individual members from the app’s settings. Removing a child from the Circle, or deleting the Circle, stops further collection about that child.
• Delete your entire Circle and all its data directly in the app, from Settings → “Delete Circle & all data” (you confirm by typing your join code). Section 7 explains the trash archive and backups that follow a deletion. You can also request deletion by contacting us (see Section 10).

5. Where data is stored

• Netlify (hosting, Functions and Blobs) — hosts the app and runs our server functions, which process the requests described in this policy, such as Ask Lampway questions, recordings, problem reports, and recovery requests. For optional Help improve Ask, Netlify processes the requests and stores the filtered training records in Netlify Blobs for 30 days. Firebase stores the separate opt-in choice. A daily account pseudonym is used only for a 50-request daily limit; its random key is destroyed at the next daily cleanup and it is never stored with a training question. Country and state information supplied by the hosting service is used only to refuse collection in excluded regions and is not added to a training record. These services act only on our instructions.
• Google Firebase (Realtime Database) — your Circle’s data (names, birthdays, reflections, quiz progress, Personal Scroll lighting state, optional recovery email), your verse fit marks, the shared counts and reviewed passage explanations described in Section 1, the recent Ask Lampway and Pull this together answers kept to prevent double charges (Section 1), and, for signed-in Solo plans, the separate private Solo archive. Circle access is gated to authorized members; the private Solo archive is scoped to its signed-in account. Access rules on both are intended to enforce the same private scope.
• Cloudflare R2 or equivalent private object storage — temporary raw-audio and transcript assets for optional Memory Helper / Family Audio flows.
• AssemblyAI or equivalent transcription provider — temporary access to optional recording audio so it can be transcribed.
• OpenAI, Anthropic, or an equivalent answer-processing provider — bounded Ask Lampway questions and source snippets, when you choose to use Ask, and the text a Memory Helper page is drafted from. A page drafted from a recording made by a member of a family Circle, which can carry children’s voices, is sent only to Anthropic. Ask Lampway and Pull this together can use excerpts of saved memories and transcripts, including ones drafted from family recordings, as sources; those excerpts go to whichever of these providers answers the question, with names replaced as described in Section 1.
• RevenueCat — subscription status and entitlement records if paid plans are enabled for your platform.
• Google Play / Apple App Store — process subscription payments under their own terms; we never see payment card details.
• Sentry — pseudonymous crash reports (set up to leave out typed text, email addresses, and join codes).
• PostHog — pseudonymous usage events (text inputs masked, session replay off).
• Resend — sends our email, and delivers problem reports you send us to our support mailbox (Section 7).
• Your device — a local cache so the app works offline. Cleared when you uninstall.

6. Your join code and security

When you set up the app you receive a join code (for example, a3k7p2qm). Anyone with this code can join your Circle and see what the Circle shares — the roster, progress, Gathering results, and anything a member chose to share. A member’s own private answers and reflections are readable in the app only by the account that wrote them (Section 4 explains what this means for children). Treat it like a password: only share it with people you want in your Circle. You are responsible for keeping your join code, admin PIN, and sign-in details private. If you believe your code has been shared outside your Circle, contact us to reset.

We use reasonable administrative, technical, and organizational measures designed to protect your data, but no method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. The people who run Lampway can access stored data when needed to operate, secure, or support the service, or when the law requires it. If we learn of a security breach that affects your personal information, we will notify you as the law requires. Lampway is a devotional tool, not pastoral care, counseling, or medical, mental-health, legal or financial advice. It is not an emergency service and does not monitor what you type; if you or someone else may be in danger, call your local emergency number, or in the U.S. or Canada call or text 988. The disclaimers, the limitation of our liability, and the other terms that govern your use of Lampway are set out in our Terms of Service, which apply alongside this policy.

7. Data retention

Your Circle’s saved data stays in our database until you delete it. We may also archive a Circle that has been inactive for a long time, after sending the inactivity notices described in Section 8. Uninstalling the app clears your local cache but does not automatically delete cloud data — other devices with your join code can still access it. Temporary raw-audio assets are deleted after transcription succeeds, cancel/discard, retry exhaustion, or the storage lifecycle backstop. Approved transcripts and memories remain saved until you delete them or delete your Circle. To delete your Circle and all its data, use Settings → “Delete Circle & all data” in the app, or contact us as described in Section 10. A deleted Circle is removed from the app right away; a copy is kept in a restricted trash archive that the app cannot open, recoverable only by writing to support within 180 days, and is then deleted by daily cleanup. Backups follow the cycle described below.

Your private Solo archive has a separate deletion lifecycle. When you request its deletion in Settings, the archive becomes unavailable in the app and you have a 30-day recovery period in which to restore access. If you do not restore it, its active-database copy is deleted after 45 days. Cleanup runs daily, so actual deletion may occur near day 46. Deleting the private Solo archive does not delete any Circle or shared Circle records.

Deleting your account. Settings → Delete account deletes your sign-in right away and removes your personal data from the app. A copy of that data, including what you wrote privately in Circles you joined, is kept in a restricted trash archive, recoverable only by writing to support within 180 days, and is then deleted by the same daily cleanup. Circles you own are moved to the trash archive on the same terms; Circles you joined keep going without you. Backups follow the cycle described below. We keep a content-free record of the deletion (which account, when, what scope) for five years so we can prove it happened; it holds nothing you wrote.

Crash reports are kept for 90 days. Usage events are kept only for as long as we use them to improve the app, and are set up not to hold the text you typed.

An Ask Lampway or Pull this together answer kept to prevent double charges (Section 1) is held for at least 72 hours, then removed the next time either feature is used in the same Circle or account. If the Circle or account is deleted first, the answer goes with it into the trash archive described above.

Problem reports you send us are emailed to our support mailbox as soon as you send them, with any screenshot attached, through our email service (Resend). Lampway keeps no other copy of the report. The delivered email stays in our mailbox with our other support correspondence, and Resend keeps its own delivery record for a limited time under its terms.

Optional Help improve Ask records expire after 30 days. Daily cleanup checks every retained record using the current harm and personal-wording rules and removes refused records earlier. If cleanup or previous-day key destruction cannot be verified, new collection stops until cleanup succeeds. Each save first establishes an anonymous erasure intent containing a random record key, day and temporary lease times; interrupted saves and failed erasures are retried by daily cleanup, and unresolved intents also stop new collection. These records are stored separately from the RTDB backup described below; we do not export them into account backups or retain a training corpus beyond this period. Turning sharing off, freezing or deleting the private archive, or deleting the account stops new collection. It cannot identify previously kept questions for early deletion.

Your own fit marks are removed with your account, kept in the trash archive described above for 180 days, and then deleted by daily cleanup. Shared fit-mark counts, the shared counts of search terms that found nothing, and reviewed passage explanations hold nothing that identifies who contributed to them, and are kept for as long as Lampway uses them to choose verses and fill gaps. The per-day search-gap tally kept against a one-way hash of an account (Section 1) is deleted after 90 days.

System backups follow their normal retention cycle. We take a snapshot of the database every night, and we may also keep one snapshot per month and one per year in a separate archive. Our intended schedule keeps only the last 30 nightly snapshots, the last 12 monthly snapshots, and the last 5 yearly snapshots, so that data you delete stays in a backup for up to five years. That schedule is not yet enforced automatically: today nightly snapshots are deleted after about 13 months, and monthly and yearly archive copies are not yet deleted, so until the schedule is in place a deleted record can stay in an archive copy for longer. Backups are not selectively purged for one account, so data you delete stays inside any snapshot taken before you deleted it until that snapshot is deleted. Snapshots are encrypted, access-restricted, and used only to recover from a failure or data-loss incident; we do not read them to answer questions about your data.

8. Third parties

We use the following third-party services only for the purposes described in Section 5. We use Resend, an email delivery service, to send account and recovery emails, a note from the founder, and messages you send us through in-app feedback or support. Specifically, that covers: the message that asks you to confirm your email address when you sign up with an email and password, and, if you own a Circle and have not confirmed it yet, occasional reminders to do so; recovery links if you have opted in and request one; inactivity notices, sent to the recovery email, before an inactive Circle is archived; a one-time note from Lampway’s founder, sent to the recovery email when a Circle finishes its Lampway; notices about changes to our Terms of Service or this policy; and problem reports and other feedback you send us, together with the internal summaries we send ourselves, including the weekly summary of suggested verse changes described in Section 3.

• Google Firebase Privacy
• Sentry Privacy
• PostHog Privacy
• Resend Privacy — used to deliver our email: account and recovery emails (opt-in), inactivity notices, the founder’s note, notices about policy changes, and problem reports and feedback you send us along with our own internal summaries.
• Cloudflare Privacy — used for private object storage.
• AssemblyAI Privacy — used for optional transcription when recording is enabled.
• Anthropic Privacy — used for optional Ask Lampway answers and memory draft processing when enabled.
• OpenAI Privacy — used for optional Ask Lampway answers and memory draft processing when enabled, except drafts from family Circle recordings (Section 5).
• RevenueCat Privacy — used for subscription entitlement management when paid plans are enabled.

We advertise Lampway on Google. Google Play tells Google Ads when someone installs the app after seeing one of our ads. That comes from Google’s own records, not from the app, and Lampway sends nothing to Google Ads.

Apart from that install measurement, which Google does in its own records, Lampway does not track you across other companies’ websites or apps, and does not let advertising or tracking companies collect information about you through Lampway. Because we do not do that kind of tracking, Lampway does not change how it works when your browser sends a Do Not Track signal.

Apart from the services above, we disclose personal information only when we believe in good faith that the law requires it (for example, a valid court order), when it is needed to protect someone’s safety or our legal rights, or as part of a merger, acquisition, or sale of Zeno One’s assets, in which case the information stays covered by this policy.

9. Where your data lives, and your rights

Lampway is operated from the United States and your data is stored there, on the services listed in Section 5. If you use Lampway from the European Economic Area, the United Kingdom, or Switzerland, we rely on the standard contractual clauses those services offer for the transfer.

Our legal basis for handling your data is the contract you make with us when you use the app (Sections 1 and 3) and, for crash reports, product analytics, and keeping Lampway secure, our legitimate interest in keeping the app working and safe; where the law requires us to keep or disclose information, our legal obligation. Reminders, recordings, Ask Lampway, Help improve Ask, and sharing your fit marks run only when you turn them on, and problem reports are sent only when you choose to send one; that is your consent, and you can turn each feature off. Some of what you enter can reveal your religious beliefs or information about health (Section 1); we handle it only to provide the features you choose to use.

Wherever you are, you can ask us to show you the data we hold about you, correct it, delete it, or send you a copy. Most of this you can do yourself in the app (Sections 4 and 7). For the rest, write to support@onelampway.com; we answer within 30 days. If you are in the EEA, UK, or Switzerland and believe we have not handled your data lawfully, you can complain to your local data-protection authority. We do not sell personal information and have not sold it in the past twelve months, and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of under California law.

If you are under 16 and in a country where that is the age of digital consent, join a Circle by code only with your parent or guardian’s agreement.

10. Contact and data deletion requests

To request deletion of your Circle or private Solo archive, access the data we hold about you, or ask any privacy question, contact us at: support@onelampway.com. You can also write to us or call us at the mailing address and telephone number given under “Data controller” at the top of this policy.

We respond to verified requests within 30 days.

This website (onelampway.com)

The App Store release list form on this site asks for an email address, the device you are on, the pathway you are interested in, an optional group size, and an optional note. It also records the page you came from, any campaign tags in the link you followed (such as utm_source), the page you landed on, and whether you ticked the box about helping test optional voice features. We store that with our email provider (Resend, as a contact list), email it to our operator mailbox, and send you a confirmation email. We use it to tell you about Lampway’s App Store release, which can include an invitation to try a test version first, and, if you ticked the voice-testing box, to invite you to help test those features. Write to support@onelampway.com to be removed. The testimonial form sends your quote, the name you want shown, and your email to our operator mailbox; nothing is published without your consent. This site uses Plausible, an analytics service that counts page views without cookies and is designed not to identify individual visitors. Like any website, our hosting service (Netlify) and the services that deliver this site’s fonts and audio (Google Fonts, Cloudflare) receive your IP address and browser type when you visit (Section 1).

11. Changes to this policy

If we make material changes, we will post the updated policy here, update the "Last updated" date at the top, and tell you in the app or by email before the changes take effect. Where the law requires your consent to a change, we will ask for it. Continued use of the app after changes take effect means you accept the updated policy.