Privacy Policy
Lampstead Groups · Last updated October 17, 2026
DRAFT, pending legal review. Not final.
Who we are
Lampstead Groups is published by Emmaus Bible LLC (becoming Montgomery Appworks LLC), 9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159. Contact: justin@montgomeryappworks.com.
What we store
- Account: your name and email address. If you use a password, we store only a salted one-way hash of it, never the password itself.
- Group data: groups you create or join, your role, meeting time and place, attendance records, leader session notes, assigned readings, and whether you marked your weekly prep done.
- Prayer requests you post, which are visible to members of that group, and who marked “praying.” Prayer requests can reveal religious beliefs or personal circumstances; share only what you are comfortable with your group seeing.
- Group messages leaders post and replies members write, visible to that group, plus when you last opened Messages (for unread counts).
- Private notes: visible only to you, not to group leaders.
- Custom study weeks a leader writes for the group.
- Email invites: if a leader invites someone by email, we keep the invitee's address with the time and the leader who sent it for up to 90 days, to prevent abuse.
- Email settings (optional): if you turn on meeting reminders or the weekly leader recap (Account → Email), we store those choices, a random unsubscribe code, and a record of which reminder or recap we sent you (kept 60 days) so we never send it twice. To time reminders, we store your group's time zone, taken from the leader's device when they set the meeting time. These emails are off unless you turn them on. Each one has a one-tap unsubscribe link, and we never send marketing email.
- Answered prayers: if the person who asked, or a leader, marks a prayer request answered, we store when, plus an optional note that the group can see.
- Password resets: a one-way hash of each reset link, its expiry, and whether it was used.
- Notifications: if you turn on notifications, your browser's push address (an opaque URL from Google, Apple, or Mozilla) so we can alert you to new messages. Notifications carry no message text.
- Reports and blocks: if you report a prayer request or message, or block someone, we store the report (request, reason, time) and your block list so we can review reports and hide content for you.
- Sign-in sessions: a random token kept so you stay signed in (expires after 30 days).
Sign in with Apple or Google
If you choose Sign in with Apple or Sign in with Google, the provider sends us a signed token containing a stable account identifier for this app, your email address, and whether it is verified. Google may also include your name. Apple shares your name only the first time you sign in, and only if you allow it. We use these only to create or sign in to your account, and we link to an existing Lampstead Groups account that has the same verified email.
Apple “Hide My Email”: if you choose it, we receive an Apple private relay address (ending in @privaterelay.appleid.com) instead of your real email, and we never learn your real address. We do not get your Apple or Google password, contacts, or other account data.
For Apple, we also store a refresh token that Apple issues for this app. When you delete your account, we ask Apple to revoke it (ending the app's link to your Apple ID) and delete our record of your Apple or Google sign-in. You can also remove the app at any time in your Apple ID settings (Sign in with Apple) or your Google Account (Third-party connections).
Apple “Hide My Email”: if you choose it, we receive an Apple private relay address (ending in @privaterelay.appleid.com) instead of your real email, and we never learn your real address. We do not get your Apple or Google password, contacts, or other account data.
For Apple, we also store a refresh token that Apple issues for this app. When you delete your account, we ask Apple to revoke it (ending the app's link to your Apple ID) and delete our record of your Apple or Google sign-in. You can also remove the app at any time in your Apple ID settings (Sign in with Apple) or your Google Account (Third-party connections).
Linking your Lampstead account (optional)
If you choose to connect your Lampstead account (Account → Lampstead account), we send the Apple or Google sign-in token from that step to our Lampstead account service, run by the same company, to identify your Lampstead account. We store its account ID and a sign-in token for that service so we can check whether you have a Lampstead Collection subscription. We only keep whether Lampstead Groups Premium or the Collection is active, and when it expires. This does not change your Lampstead Groups sign-in or share your groups, notes, or prayer requests with other apps. You can unlink at any time in Account, and deleting your account removes the link.
On your device
The app keeps a copy of your current group data, your sign-in token, and the discussion timer in your browser's or app's local storage so it works offline.
Service providers
Cloudflare, Inc. hosts the app and its database (Cloudflare Workers and D1) and processes your data on our behalf to run the service, including standard request logs (such as IP address and time). Apple and Google process sign-in when you choose them, and handle payments if you subscribe through the App Store or Google Play; we do not receive your card details. Google Workspace (Gmail) sends password-reset and invite emails, and the reminders or weekly recaps you turn on, from our address when email is enabled. Browser push services (Google, Apple, Mozilla) deliver notifications if you turn them on; they receive only an empty alert, never message content. We do not sell your data, show ads, or share your information with advertisers. We do not use third-party analytics or tracking in this version.
Who can see what
Group members can see each other's names, prep status, prayer requests, and group messages and replies. Leaders can also see attendance, session notes, and attendance and prep trends (Insights). Nobody but you can see your private notes.
Deleting your data
In the app, open Account (⚙) → Delete my account… and confirm with your password (or, if you sign in only with Apple or Google, by typing DELETE). Deletion happens immediately. This removes your account, sessions, private notes, prep status, prayer requests, messages and replies you wrote, notification subscriptions, email settings and the record of emails sent, attendance records, and Apple/Google sign-in links, and revokes Apple sign-in tokens. Groups you were the only member of are deleted. If you led a group with other members, leadership passes to another member. You can also ask us by email (see how to delete your account).
Launch-offer email (optional)
If you submit your email in the founding tester offer, we keep it only to send you launch discount codes. We collect it only if you submit it. It is stored by Montgomery Appworks' shared Lampstead signup service on Cloudflare. To unsubscribe or have it deleted, email justin@montgomeryappworks.com.
Anonymous visit counts
On the website we count anonymous page visits with Cloudflare Web Analytics, which uses no cookies and collects no personal data. We use it only for aggregate visit counts. The iPhone and Android apps don't include it.
Children
This app is not directed to children under 13, and you must be at least 13 to create an account. If we learn that a child under 13 has created an account, we will delete the account and its data. Parents can contact us at justin@montgomeryappworks.com.
Changes
We will post updates here and change the date above.
Join the betaFree during beta. Coming soon to iPhone and Android.
Open the web app