Last updated and effective: October 25, 2026.
LampLit is a phone app for iPhone and Android. You turn on your porch light when you’re up for company, and friends who see it can knock. Red Finch Advisory LLC, the company that makes LampLit, runs the app ("we"). On Google Play, LampLit is published by Red Finch Enterprises LLC on behalf of Red Finch Advisory LLC. This policy, at https://mylamplit.com/privacy, says what we collect, who sees it, and how long we keep it.
Only friends you accept see your light. We don’t sell your data, show ads or use outside analytics.
What we collect
Your account
Your mobile phone number (required, confirmed by a texted code). An email address, if you add one. Your Apple or Google sign-in, if you link one. Your first and last name, the name friends call you, your @handle, and how your house looks. Your friends, streets, requests, blocks, timers, plans and settings.
Where you live
You type where you live: a town, a city or a street address. As you type, what you’ve typed goes to Mapbox, which suggests matching US addresses and towns. Mapbox doesn’t keep those lookups for us. You can also save an address, but you never have to.
When you save a street address, you can tick “Keep this address’s exact spot”. Only then do we look the address up once more with Mapbox and keep its exact map point, for a map and distances later. Without that yes, we keep only the text you typed and its town. Friends never see the point, and untick it any time in Settings to delete it. Your data download includes it.
LampLit does no location tracking unless you turn it on. It doesn’t use your phone’s location (GPS) today. If a feature such as a map ever uses it, the feature stays off until you turn it on, and this policy will say first what is kept. When you change your location, we delete the old one, its exact point too. We keep no location history. We never sell your address or where you live.
Lights and knocks
While your light is on, it holds what you set: kind, length, note, door, step item, yard, ride, scene, place, and which streets see it. When the light ends, the note clears. We keep your last scene and place for reuse.
We keep a record of each light for 90 days. It holds only the start, the end, the kind, and the audience size as a range (1, 2 to 5, 6 to 20, or 21 or more). It never holds the note, scene or place. A knock record holds only who knocked, who hosted, the time, and how it ended. These records run your sort order, Regulars suggestions and support. After 90 days, we keep only daily totals with no account in them.
Your contacts
If you allow it, LampLit checks which of your contacts are already here. Their numbers are sent for a one-time compare, and we store none of them. To keep a daily limit, we keep one number, how many contacts you sent that day, and for each batch you sent a random id and a short scrambled fingerprint of the batch, so a batch sent twice counts once and a different list under the same id is refused. None of it is a phone number. Your phone makes a random salt for each batch and we never store it, so the fingerprint cannot be checked against any number, not even by us. We stop using it an hour after the day ends, and delete it at your next check or within 2 weeks. Your phone remembers, on the phone only, which contacts it already sent today, so it sends each one once a day. When you invite someone, we keep their number in scrambled (hashed) form, tied only to your account, until they join or for 90 days. Then we delete it. We never message a contact unless you tap to send it.
The App Clip
On an iPhone without LampLit, an invite link can open the LampLit App Clip. It looks up only the public name and house drawing on that link, the same ones the invite page shows. It keeps the link on the phone for 7 days so the full app can finish the invite, and sends nothing else.
Your phone
A random device ID the app makes, the platform, phone model, app version, time zone, a push token for notifications, and sign-in history for each phone.
What we measure
The app records a fixed list of named events (like "light turned on" or "onboarding step shown") into our own database, to see where people get stuck. Each event carries a random id used only for measuring, never your handle, number, email or device ID. An event never holds a location, anything you typed, a contact, or who you are with. Light and knock events keep their time only to the hour. A crash sends only a code and the screen name. Scene use and timer fires are only two daily totals across everyone.
Reports and support
We keep reports you send. If you agree, a report includes the person’s current note and place. We keep emails you send to support@mylamplit.com so we can help.
Beta reports
If you test LampLit early, you can send a bug or an idea from the app. A beta report holds your note, a picture of your screen if you add one, the screen’s name, your phone model, platform, app version, and what your light is doing. We file it as an issue in a private GitHub project that only LampLit staff can see. The picture is stored there with it. Email support@mylamplit.com and we remove a report and its picture.
Who sees what
- Only friends you accept see your light, house and note. Not friends of friends, not people with your number or handle.
- Your streets decide which friends see each light. A friend left out sees your house as if your light were off.
- Friends see the name friends call you, never your first and last name. Your full name only helps people who have your number find you.
- Friends get your phone number so they can Text and Call you.
- Friends see your town or city only if you choose. Never the street address you typed, and never its exact map point.
- Your saved address goes to a friend when you say "Come on over", for that visit, or to streets you pick.
- Your porch link page shows only your name and house, never your light.
- No counts about people. Nobody sees how often you light up or knock, or when your light was on in the past.
How long we keep each kind of data
| Data | How long |
|---|---|
| Account, profile, friends, streets, timers, settings | Until you delete your account, then a 30-day grace, then erased |
| Last scene and place | Until you clear them or delete your account |
| Light and knock records | 90 days, then totals with no account |
| Measured events, seconds in the app included | 90 days, then totals with no account |
| Invited numbers (scrambled), with the contact’s name | Until they join, or 90 days |
| A setup street pick for an invitee | As long as its invite |
| Daily contact-check count, with an id and a fingerprint of each upload (no phone numbers) | Until your next check after that day, at most 2 weeks |
| Invite codes | 14 days |
| Friend requests that were not accepted | 1 year after they were sent |
| No-notify mark after a second decline | Until either account is deleted |
| A request you sent by handle (your account, the handle you typed, the time) | 1 year after you sent it, or until you take it back, they accept it, or your account is erased |
| A request held for someone at the friend cap | 1 year after you sent it, or until you connect, take it back, or a block, remove or delete ends it |
| Withdrawn friend requests | 30 days after you take one back, or a block or a delete closes it; 1 year if it was ever declined |
| A removed friendship’s request | 30 days after the remove |
| Blocks | Until you unblock or delete your account |
| Mailbox notes (“joined”, “added you back”) | Until you clear them |
| “Plan made” marks on a friend’s timer | Until that day ends |
| Sign-in history per phone | 90 days |
| Server logs | 30 days |
| Reports | 1 year after closing |
| Beta reports in our database | 90 days after they are filed to GitHub |
| Beta reports and pictures in GitHub | Until staff delete them, or you ask us to |
| A note or place staff hid, or a name staff reset (the old name) | As long as its report |
| Phone number bans (keyed hash) | Until staff lift them |
| Phone mark after a No to the 18+ question | 30 days |
| Download my data file | 24 hours |
| Address cards | For the visit |
| Unfinished sign-up | 30 days |
| Let-go handle (one-way hash) | For good |
| Backups | A deleted account drops out within 30 days after erase |
Who we share data with
These companies help run LampLit, and handle data only for that. Each must protect your data at least as well as this policy does.
| Company | What they do |
|---|---|
| Amazon Web Services | Hosting and database |
| Resend | Sends LampLit’s emails, such as codes, email confirmations and password resets |
| Twilio | Texts your sign-in codes (Twilio Verify) |
| Mapbox | Suggests addresses and towns as you type where you live, and finds a saved street address’s exact point when you say yes |
| Zoho | Holds the support@mylamplit.com inbox (Zoho Mail) |
| Apple | Push notifications (APNs), Sign in with Apple |
| Push notifications (Firebase Cloud Messaging), Google sign-in | |
| GitHub | Holds beta reports in a private project, only for beta testers who send one |
No data goes to anyone else for analytics or ads. We may share data when the law requires it, such as a valid subpoena or court order, and to protect someone from serious harm. If a company takes over LampLit, your data moves with it under this policy, and we tell you first. Your agreement to get texts never moves or transfers to anyone.
We never sell or share your phone number, or your agreement to get texts, with any third party or affiliate, for marketing or any other purpose. We use your number only to send your sign-in codes and to run LampLit as this policy says. Our text provider, Twilio, uses it only to send your codes.
Your choices
- Find me switches. Turn off find by phone number or name. Suggestions to friends of friends start off.
- Notifications. Change them in Settings.
- Delete my light and knock records. In My data. This erases them at once, with your measured events, and keeps your account.
- See and correct your details. Your name, handle, email, number, house and location are in Settings, where you can change them. For anything else, email support@mylamplit.com.
- Download my data. A file of everything we keep about you, except four kinds of friend request: ones you took back, ones the other person took back, ones a block or an account delete closed, and ones with anyone you can’t see on LampLit (someone you blocked or who blocked you, a suspended account, or an account being deleted). We keep some of these only to apply the quiet rules for a request sent again, and the file leaves them out so it never shows how someone answered. A request you sent by handle is always listed by the handle you typed, until it is accepted, you take it back or a year has passed; the file shows nothing more about it.
- Delete your account. In the app, or at https://mylamplit.com/delete. Your house and light disappear for friends at once. For 30 days you can sign in and bring it back. Then we erase it.
Your rights
Wherever you live, you have these rights:
- Know what we keep about you. Download my data gives you a copy, except for the friend requests listed above.
- Correct it. Most of it is in Settings.
- Delete it. Delete your account, or delete your light and knock records.
- Take a copy with you, in a file you can read.
- Appeal. If we say no to a request, email support@mylamplit.com and a different person looks at it again.
Email support@mylamplit.com for anything the app can’t do. We answer within 45 days, and we may ask you to prove the account is yours. Someone you authorize can ask for you, with your written permission. Using these rights never costs you anything or changes how LampLit treats you.
We don’t sell your data, share it for ads, or use it to profile you. If you live in California, these are the rights the California Consumer Privacy Act gives you, and you can also contact the California Department of Consumer Affairs, 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or call (800) 952-5210.
Adults only
LampLit is not for anyone under 18. If you answer No to "Are you 18 or older?", sign-up stops. We keep only a mark for that phone for 30 days, so sign-up can’t restart right away. Then we delete it. If we learn that someone under 18 has an account, we delete it.
At sign-up and each time the app opens, LampLit asks Apple's App Store or Google Play whether you're 18 or older, where the store has that answer. If the store says you're under 18, LampLit stops the same way. The store's answer alone blocks the app on that phone; it doesn't delete an account. We keep only which store confirmed you're an adult, and when. We never keep your age or age range, and we never use the store's answer for anything else, such as ads or measuring how the app is used.
Safety
You can report a person, a note or a place. We never tell the reported person. Only LampLit staff see reports. Staff can hide a note or place, suspend an account, or ban a phone number. We keep a banned number only as a keyed hash, so the ban works after the account is erased. Names, handles, notes and places go through a word check.
Test and app review accounts are flagged and left out of every metric.
Security
We encrypt data in transit. Phone sign-in uses one-time codes. If you add an email and password, we store only a one-way hash of the password. Staff use separate staff logins with a one-time code at every sign-in. No system is perfectly secure.
Where LampLit works
LampLit launches in the United States only. LampLit does no location tracking unless you turn it on, and no tracking across other companies’ apps or sites, so the app shows no consent banner.
Do Not Track. LampLit doesn’t track you across other sites or apps, so it treats every visit the same whether or not your browser sends a Do Not Track signal. No other company collects information about your activity on LampLit to follow you across other sites or apps.
Changes and contact
We post changes at https://mylamplit.com/privacy and update the date above. If a change matters to you, the app tells you and asks you to read it before you go on.
Email support@mylamplit.com. We aim to answer within 3 days.