Privacy Policy

1. Data Controller

Lamplit ("we", "us", "our") is the data controller responsible for your personal data collected through the Lamplit web and mobile applications. For privacy enquiries, contact us at privacy@lamplit.ai.

2. Personal Data We Collect

We collect and process the following categories of personal data:

• Account data: email address, display name, profile picture (optional), authentication tokens
• Sign-in provider data: when you sign in with Google or Apple, we receive your email address, display name, profile picture URL, and a provider-issued user ID. We do not request access to any other Google or Apple data (no Gmail, Drive, Calendar, Photos, iCloud, etc.)
• Journal data: daily reflections, mood selections, secondary feelings, life impact areas, and long-term vision statements
• Health data: workout logs (exercise type, duration, intensity), sleep tracking (hours, quality, bed/wake times), nutrition logs (meal type, description, calories, macro- and micronutrients), fasting records, supplement intake, meditation sessions, lab test results (biomarker values, units, and reference ranges), recipes, and shopping list items
• Menstrual-cycle data (special category): period and flow logging, cycle symptoms, personal notes, cycle settings (including hormonal-contraception and perimenopause-mode settings), and hormone-therapy intake — processed only with your explicit consent. Cycle predictions are computed on your device, and cycle entries can never be shared with other users
• Health profile: age range, optional date of birth, biological sex, height, weight, BMI, dietary approach, stress level, activity level, sleep patterns, energy patterns, health goals, and domain health scores
• Body metrics from wearables: if you connect Apple HealthKit or Health Connect, biomarkers such as heart-rate variability (HRV), VO₂ max, weight, BMI, body fat, and lean mass, alongside imported workouts, sleep, nutrition, and mindfulness sessions
• Location data: if you use the Skin & UV feature, your device's GPS position and the places you save for UV forecasts. Coordinates are sent to the weather service Open-Meteo (forecasts, place search) and OpenStreetMap Nominatim (reverse geocoding) to resolve forecasts and place names; they are not used for advertising
• Photos you submit for AI analysis: food photos, supplement labels, and lab-report photos (used to prefill entries), and an optional skin photo for skin-type estimation — the skin photo is analyzed in real time and never stored
• Community data: group memberships, chat messages, friend connections, online status
• Media: voice recordings (for transcription), images shared in chat
• Device data: push notification tokens, platform type, notification preferences
• Usage data: error logs and performance metrics collected for service reliability (see Section 8)

3. Health Connect and Apple HealthKit

Connecting Lamplit to Health Connect (Android) or Apple HealthKit (iOS) is optional and never enabled by default. When you connect, we read only the data types you approve on the platform's own permission screen, and we use them solely to power the in-app features listed below — never for any other purpose:

• Workouts: imported exercise sessions appear in your Health history and analytics, alongside the workouts you log by hand
• Calories burned and distance: read for the time span of an imported workout and shown on that workout's detail card; energy burned also feeds the automatic intensity estimate
• Heart rate: the average and maximum heart rate of an imported workout, shown on that workout and used to estimate its intensity. We do not display or store continuous heart-rate streams
• Steps: your step count for the day, shown in the Today summary on the Health tab
• Sleep: imported sleep sessions populate your sleep history and your duration and quality trends
• Nutrition and hydration: imported meals and drinks populate your nutrition log, its macro- and micronutrient totals, and your daily water intake
• Height, weight, body fat, lean body mass, VO₂ max and heart-rate variability: these fill in the Body Metrics and Biomarkers cards of your health profile (height and weight also derive your BMI) and give the AI coach an accurate baseline, instead of asking you to re-enter measurements you have already taken
• Menstrual-cycle records: read only if you have turned on cycle tracking and given your explicit consent, and used only to populate your cycle history and the predictions computed on your device. This connection is read-only and cycle data is never shared with other users
• What we write back: workouts, sleep, meals and water you log in Lamplit can be written back to Health Connect or Apple HealthKit so your other apps stay in step. Body composition, biomarkers, heart rate and cycle records are read-only — Lamplit never writes to them

Data from Health Connect and Apple HealthKit is used only to provide the features above. We do not sell it, share it with data brokers, use it for advertising, retargeting or any form of profiling for marketing, or use it to train AI models. We do not transfer it to anyone other than the processors named in this policy who store or process it on our behalf. If you enable background sync, Lamplit may read new records while the app is closed so your history stays current; you can turn that off at any time.

You can revoke access whenever you like — in Health Connect on Android, in the Health app's privacy settings on iOS, or by disconnecting under Settings in Lamplit — and revocation stops all further reading and writing immediately. Records already imported stay in your Lamplit account until you delete the individual entries or your account; deleting your account erases them.

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b)): processing necessary to provide the Lamplit service, including storing journal entries, health data, and syncing across devices
• Legitimate interest (Art. 6(1)(f)): error monitoring and performance analytics to maintain service reliability
• Explicit consent (Art. 6(1)(a) / Art. 9(2)(a)): processing health data (special category under Art. 9), including menstrual-cycle data, AI-powered analysis of your data, and push notifications. You may withdraw consent at any time

5. How We Use Your Data

• Provide and maintain the Lamplit service across web and mobile platforms
• Sync your data securely between devices when you are authenticated
• Generate AI-powered insights and advice when you explicitly request them
• Send push notifications based on your configured preferences
• Calculate streaks, badges, and analytics from your journal and health entries
• Monitor application errors and performance to improve reliability

6. AI-Powered Features and Third-Party Data Sharing

When you use AI-powered features (journal advice, analytics insights, health insights), your data is processed by our AI providers, and answers are grounded in a curated library of peer-reviewed medical research:

• Mistral AI — a European AI provider headquartered in Paris, France, processing exclusively within the EU. Processes journal entries, mood data, health metrics, lab test results, photos you submit for analysis, and health profile data to generate personalized insights
• ElevenLabs — a US-based voice AI provider. Processes voice recordings for speech-to-text transcription and generates spoken audio for voice features, under a data-processing agreement incorporating the EU Standard Contractual Clauses
• Content moderation — to keep the community safe, posts and chat messages are automatically screened by Mistral AI (our EU-based AI provider) before they are published. This safety check is not optional and runs independently of the opt-in AI features above; it is not used for any other purpose.

Your data is never used to train AI models, sold to third parties, or shared with advertisers. AI processing of your text, photos, and health data occurs within the EU; voice audio for voice features is processed by ElevenLabs in the United States under contractual safeguards. The AI insight and advice features above require explicit opt-in consent before first use. AI processing of menstrual-cycle data has its own dedicated consent switch, which is OFF by default — cycle data is only included in AI features if you explicitly enable it, and only as aggregates, never your notes or per-day entries. You can revoke AI consent at any time through the Settings page without affecting your use of other app features. Data sent to AI processors is not stored by them beyond the duration of the request.

7. Third-Party Processors

We use the following sub-processors to operate the service:

• Cloud infrastructure provider (EU-based) — database hosting, authentication, file storage, and serverless functions
• Web hosting provider — web application hosting and CDN
• Error tracking provider — error tracking and performance monitoring (see Section 8)
• Mistral AI — AI-powered advice, analytics, and photo analysis (opt-in only)
• ElevenLabs — voice transcription and text-to-speech for voice features (opt-in only)
• Google — sign-in / identity provider (only when you choose “Continue with Google”)
• Apple — sign-in / identity provider (only when you choose “Continue with Apple”)
• Apple Push Notification Service (APNs) — iOS push notification delivery (separate from Apple sign-in)
• Web Push — browser push notifications

All sub-processors are bound by data-processing agreements that require them to protect your data to the same standard as this policy, including the EU Standard Contractual Clauses where processing occurs outside the EU.

8. Third-Party Sign-In and Limited Use

Lamplit offers optional sign-in with Google and Apple. We request only basic profile scopes (openid, email, profile for Google; name, email for Apple). Lamplit's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google and Apple user data solely to authenticate you, populate your Lamplit profile, and keep you signed in. We do not sell, rent, share for advertising, use for retargeting, transfer for credit-worthiness assessment, or transfer Google or Apple user data to any third party except as necessary to provide the service (for example, our authentication infrastructure provider).

9. Error Tracking and Session Replay

We use a third-party error tracking service for error monitoring and performance analytics. The service collects error reports, stack traces, and limited session replay data when errors occur. Text content is masked and media is blocked in session replays. We apply PII scrubbing to prevent personal data from being sent. Error tracking data is retained for 90 days. No journal content, mood data, or health metrics are intentionally sent to this service.

10. Data Storage and Security

Your data is stored as follows:

• Authenticated users: data is stored in our managed cloud database with row-level access controls ensuring only you can access your data. All data is encrypted in transit (TLS) and at rest (AES-256)
• Unauthenticated users: data is stored locally on your device using the platform's standard local storage. Local data is not encrypted at the application layer — we recommend creating an account for cloud-based encrypted storage
• Media files: profile pictures and chat media are stored in our managed object storage with access controls
• Data ownership: your data is never sold to third parties or used to train AI models. You retain full ownership and can export or permanently delete your data at any time through Settings

11. Data Retention

We retain your personal data for as long as your account is active. Notification logs are retained for 90 days. AI-generated insights are retained for 1 year. When you delete your account, all associated data is permanently deleted via cascading deletion across all tables. You may also request data deletion without deleting your account by contacting privacy@lamplit.ai.

12. Your Rights

Under GDPR, CCPA/CPRA, and applicable data protection laws, you have the following rights:

• Right of access: request a copy of all personal data we hold about you
• Right to rectification: correct inaccurate data through the app or by contacting us
• Right to erasure: delete your account and all associated data through Settings > Delete Account
• Right to data portability: export your data in JSON format through Settings > Export My Data
• Right to restrict processing: request limitation of data processing by contacting us
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: withdraw consent for AI features or notifications at any time through Settings
• Right to non-discrimination (CCPA): you will not receive different service quality based on exercising your rights

To exercise any of these rights, use the in-app Settings page or email privacy@lamplit.ai. We will respond within 30 days.

13. Cookies and Local Storage

Lamplit does not use tracking cookies. We use the browser's local storage to store authentication session tokens and offline journal data. On mobile, we use the platform's standard local storage for the same purposes. No third-party advertising or analytics cookies are used.

14. International Data Transfers

Your data is stored and processed in the European Union. Our AI provider Mistral AI is a European company headquartered in France — AI inference on your text, photos, and health data runs on EU infrastructure. One exception: voice recordings for speech-to-text and text-to-speech are processed by ElevenLabs in the United States, under a data-processing agreement incorporating the EU Standard Contractual Clauses. No other personal data is routinely transferred outside the EU.

15. Children's Privacy

Lamplit is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact privacy@lamplit.ai.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through in-app notifications or email. Continued use of the service after changes constitutes acceptance of the updated policy.

17. Contact and Complaints

For privacy questions or to exercise your data rights, contact us at privacy@lamplit.ai. If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.