Privacy Policy
1. Who we are
Lampstep: Bible Verse Widget ("Lampstep", "the app") is published by EXO Studio, Hanoi, Vietnam ("we", "us"). This policy explains what information the app handles on iPhone, including its Home Screen and Lock Screen widgets, and why. Contact: exostudio.feedback@gmail.com.
2. Information we collect
Your prayers stay on your device. Lampstep has no account or sign-in. The prayers you write in the journal, the verse you attach to them, when you mark a prayer as answered, your favorite verses, and your preferences (topics, verse cadence, widget theme, reminder time) are stored locally and are never sent to us or to any service provider.
The app includes third-party SDKs that collect limited technical information automatically:
| Category | Examples | Collected by |
|---|---|---|
| Device and app information | Device model, iOS version, app version, language, time zone, approximate country/region derived from IP address | Firebase, AppMetrica, Google Mobile Ads and mediation partners |
| Identifiers | Firebase installation ID and app instance ID, AppMetrica device ID, Identifier for Vendors (IDFV); Advertising Identifier (IDFA) only if you allow tracking | Firebase, AppMetrica, Google Mobile Ads and mediation partners |
| Usage data | Screens opened, features used (for example saving a prayer, changing a widget theme), session length, ad impressions and clicks | Firebase Analytics, AppMetrica, Google Mobile Ads |
| Diagnostics | Crash logs, stack traces, device state at the time of a crash | Firebase Crashlytics, AppMetrica |
These SDKs do not receive the text of your prayers, the verses you save, or your journal history.
3. How your information is processed
On-device only:
- Prayer journal — stored in the app's private on-device database. It is not synced to iCloud or any server.
- Widget settings — your topics, cadence, theme, and favorites are kept in a shared container (App Group) on your iPhone so the Lampstep widgets can show the same verse and theme as the app. This container never leaves your device.
- Verses — Scripture text (World English Bible, Public Domain) is bundled inside the app, so choosing and displaying a verse does not require a network request.
- Daily reminder — scheduled as a local notification by iOS on your device. We do not operate a push server and do not collect a push token.
- Share images — when you share a verse, the image is generated on your device and passed to the iOS share sheet. It goes only where you choose to send it.
Sent to service providers: the technical data listed in section 2 is sent to Google (Firebase and Google Mobile Ads), to the ad networks that compete to serve ads through AdMob mediation, and to AppMetrica, to measure usage, fix crashes, adjust features remotely, and show ads.
4. Purposes and legal bases
- Provide the app, its widgets, and the reminder you turn on — performance of our agreement with you.
- Analytics and crash diagnostics to improve stability and quality — legitimate interests.
- Remote configuration of features and ad frequency — legitimate interests.
- Showing ads that keep Lampstep free, including rewarded ads you choose to watch to unlock widget themes — consent where required (personalized ads, tracking) or legitimate interests (non-personalized ads).
5. Service providers and SDKs
| Provider | Purpose | Policy |
|---|---|---|
| Google Firebase (Analytics, Crashlytics, Remote Config) | Usage analytics, crash reports, remote settings | firebase.google.com/support/privacy |
| Google Mobile Ads SDK (AdMob) and User Messaging Platform | Ads, ad mediation, and consent management | policies.google.com/technologies/partner-sites |
| AppMetrica (YANDEX LLC) | Usage analytics, install measurement, crash reports | yandex.com/legal/appmetrica_sdk_agreement |
| Meta Audience Network | Ad network via AdMob mediation | facebook.com/privacy/policy |
| AppLovin | Ad network via AdMob mediation | applovin.com/privacy |
| Mintegral | Ad network via AdMob mediation | mintegral.com/en/privacy |
Which mediation partners are active can change over time; the ad networks above receive only the technical ad data described in section 2.
6. Ads, consent, and tracking
Lampstep is free and supported by ads (for example banner, native, interstitial, and optional rewarded ads). Where required (for example in the EEA, UK, and Switzerland), we show a consent form from Google's User Messaging Platform before ads are requested. iOS may also ask whether Lampstep may track you across other companies' apps and websites (App Tracking Transparency). If you decline, the IDFA is not shared and ads may be less relevant. You can change these choices at any time in iOS Settings → Privacy & Security → Tracking, and through the privacy options in the app where available.
Rewarded ads are always optional: you choose to watch one to unlock an extra widget theme.
7. Sharing and sale
We do not sell your personal information and we never share your prayers or journal. Technical data is shared only with the providers listed above for the stated purposes, or when required by law.
8. Retention
Your journal, favorites, and settings remain on your device until you delete them in the app or remove the app. Firebase Analytics data is retained for up to 14 months; Crashlytics crash reports for up to 90 days; AppMetrica and ad providers retain data according to their own policies linked above.
9. Security
Local data is stored in the app's sandbox and App Group container and is protected by iOS, including device encryption when your iPhone is locked with a passcode. Data sent to providers is transmitted over encrypted connections. No method of storage or transmission is completely secure.
10. Device permissions
- Notifications: optional, used only to deliver the daily verse reminder at the time you choose. You can turn it off in the app or in iOS Settings.
- Tracking (App Tracking Transparency): optional, used only for ad personalization and measurement.
Lampstep does not request access to your contacts, location, camera, microphone, or photo library.
11. Children
Lampstep is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will help remove it.
12. Your rights (GDPR, UK GDPR, CCPA)
Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal information, object to processing, withdraw consent, and not be discriminated against for exercising these rights. California residents may opt out of the sale or sharing of personal information; we do not sell it. Because Lampstep has no accounts, your journal can be deleted inside the app and all local data is removed when you delete the app. For requests about data held by our providers, email exostudio.feedback@gmail.com.
13. International transfers
EXO Studio is based in Vietnam, and our providers may process data in other countries, including the United States. They rely on safeguards such as Standard Contractual Clauses where required.
14. Changes to this policy
We may update this policy, for example when the app adds or removes a service provider. We will change the date above and, for material changes, notify you in the app.
15. Contact
EXO Studio, Hanoi, Vietnam — exostudio.feedback@gmail.com