Privacy Policy
Lamplight is a quiet place to sit and work. We built it to know as little about you as possible. This page says what the app does with data, in plain words.
The short version
- You can use Lamplight without signing up, giving a name, or sharing an email.
- Other people in a room never see who you are. There are no profiles, no chat, and no social graph.
- We keep no diary of your focus. Your desk stores simple totals, like how far your plant has grown.
- We don't sell data, show ads, or track you across other apps and websites.
- You can delete your account and its data from inside the app.
What the app stores, and why
An anonymous account. When you first open Lamplight, our backend creates an anonymous account with a random ID. It exists so your desk can remember you between visits. It carries no name, no email, and nothing that identifies you.
Your email address, only if you choose to sign in. Signing in is optional. If you do, we store your email and use it for exactly two things: sending you a one-time sign-in code, and letting you return to your desk from a new phone. No marketing email, ever.
Your desk. The state of your desk in each room: how far the plant has grown (a total that reflects time spent in that room), the species you chose, and small personalizations. Stored against your account ID so it's there when you come back. Each desk also carries the date it was created and the date it last changed, so we know roughly when you were last in that room. There is no session history stored with your desk: no start times, no durations, no calendar.
Presence. While you sit in a shared room, the room shows others an anonymous occupied desk, a lit lamp, and whether you're at a laptop, a book, or a journal. Underneath, your device shares your random account ID and the time you sat down with the other people in the room, so everyone's desk stays in the right place. That ID is a string of random characters. It carries no name and no email, and nothing in the app turns it back into a person. This signal is momentary: it exists while you're in the room and disappears when you leave. It is never written to a database. In private rooms, the display name you enter is shared the same way, only with the people in that room, only while you're there.
Private room codes. Codes are how friends find each other's rooms. We treat them like secrets: they are never recorded in our analytics.
Anonymous usage signals. We count things like "a room was opened" or "a session finished" so we can tell whether the app is healthy. These events carry no account ID, no device identifier, and no advertising identifier, so there's nothing in them that points back to your account. What they do carry is the event name, the room (private rooms are counted simply as "private"), the length of a session preset when there is one, your phone's OS version, the app version, and a random ID that groups one run of the app together. We use Aptabase, an analytics service built for exactly this kind of minimal counting. Like any internet request, sending these shares your device's IP address with Aptabase. It isn't used to identify you.
What never leaves your phone
- Photos you place in the desk frame. Picking a photo copies that one photo into the app's own storage on your device. It is never uploaded anywhere, and the app never reads the rest of your library.
- The way you hold your phone. Lamplight reads the motion sensor to turn the room the way you turned the phone. That reading stays on the device.
- Music you've already downloaded, your sound mix, room and weather choices, and app settings.
Music and sounds
Music streams from our content server, hosted on Cloudflare. Like any internet request, fetching a track shares your device's IP address with the server for the duration of the request. We don't use IP addresses to identify or profile you. The list of available tracks comes from our Supabase database when the app opens. By default, downloading new tracks waits for Wi-Fi. On cellular, the app plays the music it already has, unless you turn on cellular downloads.
Who processes data for us
- Supabase hosts accounts, presence, the desk database, and the music track list.
- Cloudflare stores and delivers the music files.
- Aptabase counts the anonymous usage signals.
These providers process data only to run the service. We don't sell personal data, and we don't share it for advertising.
What Lamplight doesn't do
There are no ads and no advertising or tracking software in the app, so it never asks to track you across other apps and websites. It doesn't use push notifications, crash reporting, or your location.
Deleting your account
Open the lobby, tap the account card, and choose delete. This removes the account and everything stored against it, including your desks, for anonymous and signed-in accounts alike. It also clears the app's own data on this device: your frame photos, downloaded music, and settings. If anything goes wrong, email us at hello@lamplight.place and we'll take care of it.
Children
Lamplight is not directed at children under 13, and we don't knowingly collect personal information from them.
Changes
If this policy changes, the current version will always live at this page, with its effective date above.
Contact
Questions about any of this: hello@lamplight.place