Privacy Policy

Effective 29 October 2026

Lampfold (the website and the Android and iOS apps) is operated by CiteDash Inc, 1111B S Governors Ave, STE 54769, Dover, DE 19904, United States (“we”, “us”), which is responsible for your personal data. This policy explains what we collect, why, who processes it for us, and the choices you have. We do not sell your personal data and we do not show ads.

1. Using Lampfold without an account

You can use Lampfold without signing up. Your sermons, notes, highlights, saved studies, chats, plans and settings are then stored only on your device (in your browser's storage or the app's files) and are lost if you clear them or uninstall the app.

To run the free daily AI allowance for guests, we give each browser or app install a random device identifier and count requests per device and per network (IP) address. We store only one-way scrambled (hashed) versions of these, never the raw identifier or IP address, and the counts are deleted after about two days.

Anonymous usage counts: whether or not you are signed in, we count a few actions as daily totals — for example which tools are opened and how often their AI features are used (split only into signed-out, free and Premium), how often search is used, how often something is shared (and to which app), and how often the Premium plans are shown or chosen. These totals contain no account, device or network identifiers, use no cookies and include no search or question text, so they can't be linked to you. We use them to run and improve the service. If your browser sends a Do Not Track or Global Privacy Control signal, we don't count your activity. The mobile apps count the same anonymous totals, whether or not you are signed in.

2. If you create an account

Account details: your email address and a password (stored only in hashed form by our authentication provider), or, if you use “Continue with Google”, the name, email address and profile picture Google shares with us.
Your content, synced: your sermons, notes and highlights, saved studies, chat history, reading plans and progress, memorization cards, study notes, settings and last reading position, so they are available on all your devices.
Subscription status, if you subscribe (see section 6).

3. AI features

When you use an AI feature, what you entered (for example the passage or question, recent messages in that chat, and your chosen tradition and language) is sent to Google Cloud Vertex AI (Gemini models) to generate the answer. Google processes it under its Google Cloud terms, which do not allow Google to use it to train its models. Requests may be processed in Google data centers outside your country. If our main AI provider is temporarily unavailable, the request may instead be answered by a backup AI service from Cloudflare, under Cloudflare's terms. Please don't enter sensitive personal information you wouldn't want processed this way.

For each AI request we log the tool used, the model, the number of tokens, and (if you are signed in) your account ID, to monitor costs and prevent abuse. We do not keep a separate server-side copy of your questions beyond the content you choose to save or sync.

4. Audio

Listen (website): the text you choose to hear is sent to Google Cloud Text-to-Speech to produce the audio. This requires a free account.
Listen (Android and iOS apps): when you are signed in, the text you choose to hear is sent to Google Cloud Text-to-Speech for the natural voice, as on the website; otherwise, or if that service is unavailable, your phone's built-in voice reads it on the device.

5. Invite links and rewards

Opening an invite link: if you arrive through someone's invite link, we keep their invite code in your browser for up to 30 days and record one visit with the code, the channel it was shared through (for example WhatsApp) and the page you landed on. No other personal details are recorded for a visit.
Invites in the apps: if you install the Android app from an invite link, Google Play passes the invite code (and the channel) to the app, which keeps it only until you create an account; on any phone you can also type an invite code when you sign up. The code is then handled exactly as above.
Joining through a link: if you then create an account, it is linked to the inviter's code so they can be credited. Inviters see only totals (how many people opened their link, joined or subscribed) — never who you are.
Counting toward a reward: for up to 14 days after you sign up we check whether your email is confirmed and whether you used Lampfold on two different days (from your sign-in sessions, AI use, listening and reading activity). If you subscribe, we note the plan type (weekly, monthly or yearly) — never payment details.
Preventing abuse: we compare the network (IP) addresses recorded with the inviter's and the new account's sign-in sessions; a match is flagged for our team to review and is not used for anything else. Our team can see who invited whom, and can withdraw rewards gained through fake accounts.
If you invite others: we create a random invite code for your account and store the free Premium months you earn and when they start and end.

6. Subscriptions and payments

If you subscribe, payment is handled by Stripe (website), Google Play (Android) or the Apple App Store (iOS). We never see or store your card details. We receive and store your subscription status (plan, trial and renewal dates) and the payment provider's transaction records, which we keep as long as tax and accounting law requires.

7. Who processes data for us

Google Cloud: hosting (Belgium, EU), AI models (Vertex AI) and website text-to-speech (Cloud Text-to-Speech).
Supabase: accounts and the database for synced content (Ireland, EU).
Cloudflare: the network every visit passes through on its way to our servers; it protects the site and keeps copies of public pages (such as Bible chapters) close to you so they load faster. Like any network, it sees your IP address. It also tells us your approximate country, which we use once to suggest your Country in Settings (so local church traditions are listed first); we don't store it, and you can change it at any time. It also provides a backup AI service if our main AI provider is unavailable.
Resend: sending account emails (sign-up confirmation, password reset), the daily verse, weekly recap and seasonal journey emails, invite-reward notices, and delivering feedback you send us to our team.
Google: “Continue with Google” sign-in, if you use it.
Stripe, Google Play, Apple: payments, if you subscribe.

8. How long we keep data

Account and synced content: until you delete it or delete your account.
Guest allowance counts: about two days.
Anonymous daily usage totals: about 13 months.
Optional daily reminders (website): if you turn them on, we store your browser's push subscription endpoint and keys plus the hour and time zone you chose (and your account ID if you are signed in), only to send the reminder. Turning reminders off deletes it.
Emails: new accounts start with the daily verse, weekly recap and seasonal journey emails switched on; turn any of them off in Settings or with the unsubscribe link in every email. We use your account email, the time zone you chose, and your reading activity (days read, streak, starred verses, notes, memorize count, milestones and journey progress) to write them. Unsubscribing or deleting your account stops them. If you earn a free month through invites, we send one email to tell you.
Invite records: while your account exists; deleting your account removes your invite code and the link between your account and the person who invited you.
AI, listening and email usage logs: kept for cost reporting; deleting your account removes the link to you.
Feedback: if you send a message from Settings or the Help page, we store it with its category, the email you give (or your account email if you are signed in), and your device type and app version, and email it to our team so we can read and reply. Deleting your account deletes messages you sent while signed in; ask us to delete any other message at any time.
Payment records: as long as the law requires.

9. Your choices and rights

Delete individual items at any time; deletions sync to your other devices.
Delete your account and all synced data yourself: on the website under Account, or in the app under Settings → Account. See how account deletion works.
To ask for a copy of your data, a correction, or anything else about your privacy, email support@citedash.ai. We reply within 30 days and never treat you differently for using your rights.

Why we use your data (UK and EU): to provide the service you asked for (your account, syncing, the AI answers you request, emails you can switch off, and subscriptions); for our legitimate interests in keeping Lampfold secure, preventing abuse, running the free allowance and invite rewards fairly, and improving the service with anonymous totals; with your consent for optional reminders (which you can withdraw at any time); and to meet legal obligations such as keeping payment records.

United Kingdom and European Union: you can ask to access, correct, delete, restrict or move your data, object to our use of it, and withdraw consent. You can also complain to the UK Information Commissioner's Office (ICO) or your local data protection authority.
United States (including California and other states with privacy laws): you can ask to know, access, correct and delete your personal information. We do not sell or share your personal information for targeted advertising.
Canada: you can access and correct your information and withdraw consent, and complain to the Office of the Privacy Commissioner of Canada.
Australia: you can access and correct your information, and complain to the Office of the Australian Information Commissioner (OAIC).

10. Cookies and storage on your device

We use only what the service needs to work, and no advertising or analytics cookies. On the website these are: the sign-in cookie that keeps you signed in, a random device cookie used for the free daily AI allowance, and a time-zone cookie so dates and reminders match your day. Your settings, offline work and any invite code you arrived with are kept in your browser's storage. The anonymous usage counts in section 1 use no cookies at all.

11. Data stored outside your country

Our main servers and database are in the European Union (Belgium and Ireland). Some providers, such as Google, Cloudflare, Resend and Stripe, may process data in the United States or other countries. Where personal data leaves the UK or EU, we rely on those providers' standard contractual clauses (with the UK Addendum where needed) or other approved safeguards.

12. Children

Lampfold is not directed at children under 13, and we don't knowingly create accounts for them. If you believe a child has created an account, contact us and we will delete it.

13. Security

Data is encrypted in transit (HTTPS), access to synced content is restricted so each account can only read its own rows, and server secrets are kept in a managed secret store.

14. Changes

We'll update this page when our practices change and revise the effective date above.

15. Contact

CiteDash Inc, 1111B S Governors Ave, STE 54769, Dover, DE 19904, United States — support@citedash.ai