Privacy Policy
Lamp is a Bible app for iPhone made by Dogs in Boots LLC. This policy explains, in plain words, what Lamp collects, why, who receives it, how long it’s kept, and how you can delete it. It covers the Lamp app, its widgets and this website.
The short version
- You don’t need to give us your name or email. Lamp creates an anonymous account for you, and signing in is optional.
- Your answers to Lamp’s welcome questions, such as what’s on your heart, stay on your iPhone.
- We use analytics, linked to your account, to see how Lamp is used and to fix problems. They include which screens you open, never which passages. You can turn them off in Lamp’s Settings › Privacy.
- For study notes, our AI provider, Anthropic, receives only the Bible reference you chose and a coded ID. Ask sends Anthropic the questions you type.
- No ads. We don’t sell your data, and we don’t track you across other companies’ apps or websites.
- You can delete your account in the app, in Settings › Delete account. Section 9 lists what that deletes and what it doesn’t.
1. Who we are
Lamp is made by Dogs in Boots LLC (“we”, “us”). We decide how the information described here is used, and you can reach us at lamp@nookpages.com. Lamp is available in the United States, Canada, Australia and New Zealand.
2. What stays on your iPhone
Much of Lamp works on your iPhone alone. This stays there, and we don’t receive it:
- Your answers to the welcome questions, such as what’s on your heart and how often you read the Bible.
- How your daily verses are chosen: the verses you’ve seen in the last 60 days, and the topics Lamp leans toward based on what you save and explain.
- Your reminder times, and the reminders themselves. Lamp schedules them on your iPhone; we don’t use push notifications.
- What your widgets show: the day’s verse and your streak, which Lamp writes for them on your iPhone.
- Your settings, such as text size, appearance and whether you share usage analytics.
- The study notes you’ve opened (up to 500), so they reopen instantly, even offline.
- Your Ask conversations, for up to 30 days after your last question.
Your saved verses, the days you’ve read and your place in the reader are kept on your iPhone. If you sign in with Apple or email, Lamp also copies them to our servers with your account (see Saved verses and reading history).
Like other apps’ data, what Lamp keeps on your iPhone is included in your iCloud or computer backups, except the study notes you’ve opened and your Ask conversations, which Lamp keeps out of backups. Deleting Lamp from your iPhone deletes what it stored there.
3. What we collect, and why
Your account
The first time you open Lamp, it creates an account for you automatically: a random account ID, with no name, email or phone number. Your subscription and your allowance of study notes are kept with this ID, and RevenueCat and PostHog, which help us run Lamp, know you by it too. Until you sign in, your saved verses and reading history stay on your iPhone.
Signing in is optional. If you sign in, so that you can keep your data on another iPhone:
- With Apple: Apple gives us an identifier for you and an email address: your own, or a private relay address if you choose Hide My Email. Lamp doesn’t ask Apple for your name. We also keep a token from Apple so that, when you delete your account, we can ask Apple to end Lamp’s Sign in with Apple access.
- With email: we store your email address and send you a 6-digit code to confirm it. We use your email only to sign you in. We don’t send newsletters or marketing email.
To keep accounts secure, our sign-in system keeps a security log of sign-ins and session refreshes (about once an hour while Lamp is open), with the time, the IP address and device type of each request and, if you signed in, your email address. We keep this log for about 7 days. The sign-in system also limits how many accounts can be created from one IP address.
We also store the date you finished Lamp’s welcome screens, but not your answers.
Saved verses and reading history
If you sign in with Apple or email, Lamp copies the following to our servers with your account, so they can come back on a new iPhone or after you reinstall Lamp:
- your saved verses: which passages, when, and where in the app you saved them;
- the days you read, and how many of your daily verses you read each day;
- your place in the reader.
Until you sign in, they stay on your iPhone only, and an account that never signed in can’t be recovered. If you’ve been using Lamp without signing in and then sign in to an account you already had, what you saved and read joins that account. When you sign out, Lamp first tries to send anything not yet copied, then removes these from your iPhone; what was copied comes back when you sign in again. When you remove a saved verse, our servers keep a note that it was removed, so your other devices remove it too, until you delete your account.
Subscriptions
If you subscribe to Lamp Pro, Apple handles the payment. We never see your card or your Apple Account details.
RevenueCat manages subscriptions for us, so that Lamp can give you Pro, show your trial and renewal dates, and remind you before a free trial ends. Each time Lamp opens, even if you’ve never bought anything, it asks RevenueCat whether you have Pro. That request carries your account ID, your App Store country, your IP address and technical details: your iPhone model, iOS and app versions, your language settings, and an identifier Apple gives apps from the same developer on your iPhone. When you buy or renew, RevenueCat receives the purchase from Apple: the plan, price and currency, dates, whether it’s a free trial, whether it will renew, and transaction numbers.
Our servers keep a copy of your subscription status, which sets your allowance of study notes, and a log of the purchase notifications RevenueCat sends us.
How Lamp is used, and errors
We use PostHog to understand how Lamp is used and to find and fix problems. Lamp sends PostHog, linked to your account ID:
- What you do in Lamp: when you open it, the screens you view, and actions such as saving a verse, sharing a verse card, finishing your daily verses, reaching a streak milestone, opening or rating a study note, asking a question in Ask or reporting an answer (never what you typed or what Ask answered), agreeing to or declining an AI feature, viewing the subscription screen, starting a trial, or signing in.
- Screen views, without the passage: which kinds of screen you open (a verse, a chapter, a study note), never which passage, chapter or book.
- Your progress through the welcome screens: which step you reached, never your answers. Some events do reflect choices you made: how many verses you finish each day, which shows the daily goal you picked, and whether you turned on reminders for the morning, midday or evening (never the exact time) and allowed notifications.
- A random ID that PostHog creates when Lamp is installed. It isn’t your iPhone’s advertising identifier. It stays on your iPhone until you delete your account or delete Lamp, even if you sign out.
- Device details: your iPhone model (such as “iPhone 16 Pro”, not your iPhone’s name), iOS version, app version, language and region settings, time zone and screen size.
- Your IP address, which PostHog keeps with each event. Lamp asks PostHog not to work out a location from it.
- Error reports: what went wrong, technical details such as the date or the Bible translation that failed to load (never which passage, chapter or book), the kind of screen you were on, and a short trail of earlier technical messages. They don’t include your name or email.
PostHog doesn’t record your screen, what you type or where you tap, and we don’t use it for advertising. You can turn analytics off in Lamp’s Settings › Privacy, or on its subscription screen when that’s all Lamp shows; see Your choices. Lamp says so on its first screen, with a link to this policy.
When you contact us
If you email us, we receive your email address and what you write, and use them only to help you.
This website
This website uses no cookies, analytics or scripts. Cloudflare, which hosts it, processes visitors’ IP addresses and request details to deliver and protect it.
4. AI features: Explain and Ask
Lamp’s study notes and Ask use Claude, an AI made by Anthropic. Lamp asks your permission before you first use each feature, and sends nothing to our server or to Anthropic for it until you agree.
Explain
- When you open a study note, Lamp sends our server only the reference you chose (for example, Philippians 4:6–7). Once a day, after you’ve agreed, it also asks for the Verse of the Day’s note ahead of time, so it’s ready when you open it.
- Each passage gets one study note, which is saved and shown to everyone who opens that passage. When a passage has no note yet, our server asks Claude to write one. It sends Anthropic Lamp’s own material for that passage (the Bible text around it, background on its book, and its cross-references) and a coded ID. The coded ID is a one-way code made from your account ID: it stays the same, so Anthropic can tell users apart to prevent abuse, but it doesn’t tell Anthropic who you are.
- Never sent to Anthropic: your name, email, account ID, IP address, device details, your welcome answers or your saved verses.
- We save the note without any account information. Our server counts the notes you use, for your allowance, without recording which passages they were for.
- If you rate a note or report a problem with it, we store your rating or the reason you picked, the passage, your translation and the note’s summary as you saw it, with your account ID. You don’t type anything.
Ask (Lamp Pro, for adults)
- Ask is for adults 18 and older. Before your first question, Lamp asks you to confirm your age, and asks your permission to send your questions to Anthropic. If you answer that you’re under 18, or a question says so, Lamp remembers it on this iPhone until you delete Lamp, even if you sign out or delete your account.
- Each time you ask, Lamp sends your question, the earlier questions and answers in that conversation, the passage and your translation to our server, which sends them to Anthropic with the same coded ID. Please leave out names and private details, yours or anyone else’s.
- Our servers don’t keep your questions or the answers. They record only that you asked, for your allowance, and delete that record after 30 days. When our server gives Lamp’s own crisis response instead of an answer, the record shows it, because that response is free the first 3 times in any 24 hours.
- Your conversations stay on your iPhone, outside backups, for up to 30 days after your last question, and you can delete them at any time. If a question says in plain words that you may be in danger, such as that you want to die or to hurt yourself, Lamp doesn’t send it: it shows its own words and crisis lines instead. Such a question never goes to Anthropic, and reaches our servers only if you choose to include it in a report. Other questions that mention suicide, self-harm, an overdose, a medical emergency or someone hurting you are sent to Anthropic like every question (see What Anthropic does with it), and Lamp shows crisis lines at once. Neither kind is kept on your iPhone. Lamp recognizes both by their words, so a question that says it another way is treated like any other.
- If you report an answer or one of Lamp’s own responses, we receive the reason you pick, the passage, your translation and the app version, with your account ID, and your question and the reply only if you choose to include them. The Lamp team reads reports to fix problems. Each report is deleted after 90 days at most, or sooner if you delete your account.
What Anthropic does with it
Anthropic is our service provider for these requests. It stores and processes them in the United States. Under its commercial terms, it doesn’t use them to train its models, and it deletes them within 30 days, unless they’re flagged for breaking its usage policy, in which case it may keep them for up to 2 years, and its safety classification scores for up to 7 years.
AI can be wrong. Every verse Lamp shows comes from the Bible text built into the app, never from the AI.
Turning AI features off
You can turn Explain or Ask off at any time in Lamp’s Settings › AI. That withdraws your permission, and Lamp sends nothing more for that feature until you agree again. Signing out or deleting your account also clears your permissions.
5. Who receives your data
These companies run parts of Lamp for us, and each receives what its part needs, for the purposes in this policy:
- Supabase
- Hosts our database, sign-in and server code, and so stores everything we keep on our servers.
- RevenueCat
- Manages subscriptions (see Subscriptions).
- PostHog
- Analytics and error reports (see How Lamp is used, and errors).
- Anthropic
- Writes study notes and answers Ask questions (see AI features).
- Resend
- Delivers sign-in code emails. It receives your email address and the message.
- Expo
- Delivers updates to the Lamp app. When Lamp starts, it asks Expo’s servers whether an update is ready. That request carries your IP address, a random ID for this installation of Lamp (not your account ID), technical details about the version of Lamp you have and, if an update failed to start, the error it caused.
- Cloudflare
- Hosts this website.
These companies act on our behalf, under agreements that limit their use of your data to providing their service to us, and they protect it at least as well as this policy does.
Apple processes App Store purchases, refunds and Sign in with Apple, and shows Lamp’s rating prompt, under its own terms and privacy policy. If you’ve chosen in iOS to share analytics with app developers, Apple also gives us crash reports and app usage statistics that don’t identify you.
We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.
6. What we never do
- Show ads in Lamp.
- Sell your personal information, or share it for targeted advertising.
- Track you across other companies’ apps or websites. Lamp doesn’t use your iPhone’s advertising identifier and never shows Apple’s tracking prompt.
- Send you marketing email.
- Use your data to train AI models, or let our AI provider do so.
7. Where your data is processed
Our service providers store your data in the United States, and process it there, with one exception: some requests may first be handled by servers closer to you. If you live in Canada, Australia or New Zealand, this means your data is transferred to the United States, where it is protected as this policy describes but may be accessed by authorities under local law.
8. How long we keep it
- On your iPhone
- Until you delete it in Lamp, sign out (what synced comes back when you sign in again), delete your account, or delete the app. Your settings, such as text size, reminder times and whether you share usage analytics, stay until you delete the app. Ask conversations: up to 30 days after your last question.
- Your account
- Your account ID, email, Apple sign-in, profile, subscription status and, if you signed in, your saved verses and reading history: until you delete your account. Allowance records (the AI features you used, and when): 30 days.
- Accounts you can no longer reach
- If you delete Lamp from your iPhone without having signed in, the anonymous account Lamp was using stays on our servers, at RevenueCat and at PostHog, without a name or email, and it can no longer be deleted from Lamp. That includes the new anonymous account Lamp starts right after you delete your account, if you then delete Lamp. When you sign in to an account you already had, Lamp deletes the anonymous one it was using, with its data, once your purchases have moved to that account. If that can’t happen within an hour (for example, Lamp is offline or closed, or you sign out of that account first), the anonymous account stays too.
- Study note ratings and reports
- While your account exists. They’re deleted with it.
- Ask reports
- Up to 90 days, and deleted with your account.
- Subscription records
- RevenueCat keeps your purchase history until you delete your account, when we ask it to delete your record. Our log of purchase notifications for your account is deleted with it.
- Analytics and error reports
- Up to 7 years, depending on our PostHog plan. When you delete your account, we ask PostHog to delete them, and it does within about a week.
- After you delete your account
- We keep its account ID for 48 hours, only to ask RevenueCat and PostHog a second time to delete anything that reached them meanwhile. If one of them couldn’t be reached, or a person has to review the deletion, we keep the ID until that’s done.
- Server logs and backups
- About 7 days, our sign-in security log included. Server logs include IP addresses, device types and account IDs and, when a study note or an answer in Ask fails our quality checks, which Bible passages were involved, never your question.
- Anthropic
- Up to 30 days, or up to 2 years if flagged for misuse, when Anthropic may also keep its safety classification scores for up to 7 years.
- Sign-in code emails
- Resend keeps a delivery log for 30 days.
- Support emails
- As long as we need them to help you and to keep a record of our conversation.
9. Deleting your account and data
To delete your account, open Lamp and go to Settings › Delete account, at the bottom. Any account can be deleted, including an anonymous one. This deletes:
- From our servers: your account and email, your Apple sign-in (we also ask Apple to revoke it), your profile, your allowance records, your subscription status, your saved verses and reading history, your study note ratings and reports, your Ask reports, and our log of purchase notifications for your account.
- At RevenueCat: your customer record, which we ask RevenueCat to delete.
- At PostHog: your analytics and error data, which we ask PostHog to delete. Lamp also replaces PostHog’s random ID on this iPhone, so what it sends afterwards isn’t linked to your deleted account.
- From this iPhone: your welcome answers, saved verses, reading days and streak, your place in the reader, your daily verse history, the study notes you’ve opened, your AI permissions and your Ask conversations.
Two days later, we ask RevenueCat and PostHog again, for anything that reached them meanwhile. If either can’t be reached when you delete your account, your account is still deleted, and we keep asking until it confirms (soon at first, then once a day). If your analytics data at PostHog is also linked to another account’s ID, a person reviews it before it’s deleted, so that nobody else’s data is deleted with yours. If your connection drops while you delete your account, Lamp checks with our servers as soon as it can, at the latest the next time you open it, and finishes deleting your data from this iPhone once your account is gone.
Deleting your account doesn’t remove:
- Your App Store subscription. Cancel it separately in your iPhone’s Settings › your name › Subscriptions; deleting your account doesn’t stop Apple from charging you.
- Copies in our backups and server logs, including our sign-in security log, until they expire after about 7 days.
- What Anthropic received, until Anthropic deletes it within 30 days (or 2 years, if it was flagged, with its safety classification scores kept up to 7 years).
- What another iPhone still signed in to your account sends after the deletion, if Lamp isn’t opened there, or that iPhone stays offline, for more than two days: RevenueCat and PostHog keep what they receive before it learns the account is gone. An iPhone with Lamp open and online stops sending as your account within an hour.
- Any other Lamp account, such as an anonymous one left on our servers when you deleted Lamp without signing in (see How long we keep it).
- Your settings on this iPhone, such as your translation, text size, themes, reminder times and whether you share usage analytics, and, if you told Ask you’re under 18, that answer. Delete Lamp from your iPhone to remove them.
You can also email us to ask for a copy of your data, to correct it, or to delete it. We’ll ask for details to confirm the account is yours.
10. Your choices
- Signing in with Apple or email is optional.
- Reminders: turn them on or off in Lamp’s Settings › Reminders, or turn off all of Lamp’s notifications in your iPhone’s Settings › Notifications › Lamp.
- AI features: turn Explain or Ask off in Lamp’s Settings › AI.
- Analytics: turn off Share usage analytics in Lamp’s Settings › Privacy. If Lamp shows only its subscription screen, tap Analytics at the bottom of that screen instead. From then on, until you turn it back on, Lamp sends PostHog nothing: no usage data, no error reports and no other requests, and what it hadn’t sent yet is discarded. Turning it off doesn’t delete what PostHog already has; deleting your account does.
- Photos: when you save a verse image, Lamp asks only to add images to your photo library. It can’t see your photos.
11. Children
Lamp isn’t directed to children under 13, and we don’t knowingly collect personal information from children under 13. If you think a child under 13 has given us personal information, email us and we’ll delete it. Ask is only for adults 18 and older.
12. Your rights
Wherever you live, you can ask us what information we hold about you, for a copy, to correct it, or to delete it, and you can withdraw your permission for AI features, or turn analytics off, at any time. Email lamp@nookpages.com. We’ll confirm the request is yours and reply within the time your local law requires. We won’t treat you differently for using these rights.
United States
If you live in California or another state with a consumer privacy law, you also have the right to opt out of the sale of personal information, targeted advertising and certain kinds of profiling. We don’t do any of these. In the categories California law uses, we collect identifiers (account ID, installation ID, IP address and, if you sign in, email address), commercial information (purchase history), internet or other electronic network activity (how you use Lamp) and, if you use Ask, the text you send. Which Bible passages you read may reveal religious beliefs; we use that only to provide and improve Lamp. You can use an authorized agent to make a request. If we decline a request, you can appeal by replying to our answer.
Canada
Under PIPEDA and, in Quebec, the Act respecting the protection of personal information in the private sector, you can access and correct your information and withdraw your consent. The person in charge of protecting personal information at Dogs in Boots LLC can be reached at lamp@nookpages.com. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
Australia
Under the Privacy Act 1988 and the Australian Privacy Principles, you can access and correct your information. If you aren’t satisfied with how we handle a complaint, you can contact the Office of the Australian Information Commissioner.
New Zealand
Under the Privacy Act 2020, you can access and correct your information. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner.
13. Security
Lamp’s connections are encrypted, and on our servers each account can reach only its own data. Our providers encrypt stored data and limit who can access it. No system is perfectly secure; if a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
14. Changes to this policy
When we change this policy, we’ll update this page and the date at the top. If a change is significant, we’ll also let you know in Lamp or on this page before it takes effect.
15. Contact us
Dogs in Boots LLC
lamp@nookpages.com