Privacy Policy

Lampstead Prayer (the "app") is published by Montgomery Appworks LLC ("we"). This policy explains what happens to your information when you use the app.

The short version

• Your prayers, journal entries, reminders, categories, prayer history, name, settings, reading-plan progress, saved Scripture prayers and fasts are stored on your device. You can use the whole app without an account.
• If you choose to sign in and turn on sync, that content is end-to-end encrypted on your device before it is uploaded. We store only encrypted data we cannot read, plus your account identifier, email address (or Apple private relay address) and timestamps.
• We do not sell or share your information. There are no ads, no tracking pixels, no cookies for tracking and no third-party advertising SDKs. On the website only, we may count visits anonymously without cookies (see Website analytics below); this never includes prayer content.

Information stored on your device

Everything you enter is kept in the app's storage on your device. If you clear your browser data, uninstall the app, or use More → Delete my data, it is erased from that device. If you use Export backup, the file is saved where you choose and is under your control.

Optional sign-in and encrypted sync

Sync is optional and off unless you turn it on. To sync, you sign in with Apple or Google. When you do:

• What we receive from Apple or Google: a sign-in token that tells us a stable account identifier and your email address. With Sign in with Apple you can hide your email, in which case we receive an Apple private relay address. We don't receive your password, contacts or profile photo. For Sign in with Apple we also keep a token that lets us revoke the app's access when you delete your account.
• What we store on our sync server: your account identifier, sign-in provider, email or relay address, session records, the times your account and records were created or updated, your encrypted records (prayers, journal entries, reminders, categories, prayer times, settings (including audio settings), reading-plan progress and passages read, saved Scripture prayers and fasts), and the locked copy of your encryption key described below.
• End-to-end encryption: your records are encrypted on your device with AES-256-GCM using a random encryption key created on your device. Your encryption key never leaves your device unencrypted. So you can unlock sync on another device, the server stores a copy of that key that is itself encrypted (locked) twice: once with a key derived from your sync passphrase (PBKDF2-SHA256, 600,000 iterations) and once with a key derived from your one-time recovery code. We never receive your passphrase, your recovery code or the unlocked key, so we cannot read your synced content. It also means we cannot recover your synced data if you lose both your passphrase and your recovery code. On your device, the unlocked key is kept in the iOS Keychain (iPhone app) or in your browser's IndexedDB storage (web), so you don't have to re-enter it. Signing out removes it from the device.
• Hosting: the sync server runs on Cloudflare (Workers and D1). Cloudflare processes this data on our behalf and may keep standard technical logs (such as IP address and time) for security and operation.
• How long we keep it: until you delete your account. Signed-out sessions expire after 90 days.

Deleting your account

In the app, open More → Sign in & sync → Delete account. This permanently deletes every record we store for your account (encrypted data, protected key, sessions and your account row) right away, and revokes the app's Sign in with Apple or Google access. You can choose to keep or also delete the data on your device. Signing out does not delete anything: your data stays on the device and in your encrypted account. You can also email us to request deletion.

Notifications

Reminders, including the optional daily prayer reminder, are off unless you turn them on. If you allow notifications, they are scheduled and shown by your device in your local time zone. We don't use a push server, and your reminder times and content aren't sent to us (if you turn on encrypted sync, your settings are synced end-to-end encrypted like the rest of your data).

Network requests

To load and update the app, your device requests the app's files from the server that hosts it. Like most web servers, that server may keep standard technical logs (such as IP address, time and requested file) for security and operation. We don't use these logs to identify you or build profiles. Links to other websites (such as our website or Lampstead) are covered by those sites' own policies.

Subscriptions and purchases

In the iPhone app, Premium and the Lampstead Collection (Premium in all Lampstead apps) are optional auto-renewing subscriptions sold by Apple through the App Store. Apple processes the payment, and Apple's privacy policy covers the information Apple collects for it. We do not receive your name, email address, or payment details.

To check whether Premium is active, the app reads your purchase status on your device using Apple's StoreKit. This status (for example, which plan is active and when it renews or ends) is kept on your device. Purchases are not sent to our sync server, and we don't link purchases to your journal or any other information about you. Apple may share aggregated or de-identified sales reports with us through App Store Connect.

RevenueCat (subscription status service). A future version of the app may check subscription status through RevenueCat, Inc., acting as our service provider, so that a Lampstead Collection subscription can unlock every Lampstead app. If it does, RevenueCat receives your App Store purchase receipts and transaction history (purchase history) and an app user ID: a random ID, or your Lampstead account ID if you sign in to a Lampstead account. RevenueCat never receives your prayers, journal, reminders or any other content, or your email address. RevenueCat's privacy policy is at revenuecat.com/privacy. You can ask us to delete this purchase record by emailing us.

Deleting your account doesn't cancel a subscription. Cancel it in Settings → your name → Subscriptions.

The web version of the app has no purchases.

Children

Website analytics

On the website (not in the iPhone or Android app) we may use Cloudflare Web Analytics for anonymous, cookieless visit counts: which public pages are viewed, country and device type. It sets no cookies and receives no prayer content and no personal identifiers.

Founding-tester launch offer (web beta)

If you choose to enter your email in the founding-tester sign-up on the web beta, we receive only that email address, the app name and the time you signed up. It is kept separately from your prayers and journal (which never leave your device unencrypted) and is used only to send you launch codes and offers for our apps. We delete it on request: email [email protected].

The card also has an optional, unticked box for occasional Lampstead updates. Only if you tick it may that email also receive occasional Lampstead updates; you can unsubscribe or ask us to delete your email at any time.

The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information (for example, by signing in to sync), contact us at [email protected] and we will delete it.

Changes

If this policy changes, we'll update the effective date above and, for significant changes, note it in the app.

Contact

Montgomery Appworks LLC
9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159
[email protected]