Most of what you enter into Light Work never reaches us at all. Here's exactly where each type of information actually goes.
Stays only on your device - we never receive or store this:
Your first name, if you choose to enter it. Words, verses, passages, prayers, and devotionals you save, along with any personal notes you add. All of this lives in your browser's local storage - never transmitted to us, never visible to us - unless you sign in or turn on Cross-Device Sync, described below.
Stored on our servers only if you choose to sign in:
Signing in is optional - Light Work works the same without it. If you sign in, we store your email address (used to send your one-time sign-in code) and a copy of your saved items - saved words, verses, prayers and devotionals, memory verse decks, highlights, notes, custom reading plans, and the list of Circles you've joined - so they appear on every device where you sign in. This copy is stored with our database provider, Supabase, in ordinary, readable form: it is not end-to-end encrypted. Access rules let only your own signed-in account read or change it, and it travels over encrypted connections. If you choose to set a password, it's stored only in scrambled (one-way hashed) form - no one, including us, can read it. We use your email only to sign you in - we never sell or share it or use it for advertising. You can sign out any time (your saves stay on that device) or delete your account from "Your Account" in the Menu, which permanently removes your email and the stored copy of your saves.
Stored on our servers only if you turn on Cross-Device Sync (the older sync code):
If you generate a sync code, your saved items - including memory verse decks, highlighted verses, and notes you've written on a verse, Real Talk, or Kids section - are encrypted right in your browser before they ever leave your device, then stored in that encrypted form under your code. The encryption key never leaves your device or reaches us - it's included only in the code you save for yourself. Without it, the stored data is unreadable, including to us. This is entirely opt-in, and your code should be kept private like a password, since anyone who has the whole thing can decrypt what it protects.
Stored on our servers if you create or join a Circle:
Circles are small, private discussion spaces you create or join with a code - no account required. If you use this feature, the Circle's name and purpose, each member's chosen display name, and any messages and reactions posted inside it are stored on our servers in ordinary, readable form - this is different from Cross-Device Sync above, which encrypts your data before it ever reaches us. Circles instead use a "seat token": a random secret code generated for you when you create or join a Circle, shown to you once and never stored by us in raw form (only a one-way hash of it is kept, the same way a password would be). That token is how the app recognizes you on later visits - losing it means losing your seat, and we can't recover it for you. Membership is tracked only on your own device (the same local-storage pattern as the rest of the app), which is how the app remembers which Circles you're in. A Circle's owner can see who's asking to join (display name and request time) and can remove members or close the Circle entirely; closing is permanent and turns the Circle into a read-only archive for its existing members. A Circle also closes automatically after 30 days with no activity, or on an optional set end date its owner chooses when creating it.
Sent to our AI provider, only to generate your response, not stored by us:
Questions, prayer requests, topics, and anything else you type into Bible Q&A, Prayer Aid, Devotionals, or the "ask a question" boxes throughout the app. This is sent to Anthropic, the company behind the Claude AI models that power these features, to generate your answer, prayer, or devotional. We do not save this text on our own servers. For minor Jewish calendar dates, this may also use Anthropic's live web search to verify facts - only the date/observance name is sent, nothing personal.
Loaded from our video host, only if you choose to watch:
Tapping "Watch How It Works" (on the welcome screen or in this app's footer) loads a short welcome video from YouTube, in YouTube's privacy-enhanced "no-cookie" mode. Nothing is loaded from YouTube unless you actively tap to watch - the video isn't embedded or requested on any screen by default. Watching it may still send YouTube technical information like your IP address and device/browser type, governed by YouTube's own privacy policy, linked below.
Sent to a Jewish calendar data provider:
The current date, used to look up the corresponding Hebrew date and that month's observances via Hebcal.com's public calendar API. No personal information is included - just a calendar date.
Sent to a Bible text provider:
A Bible reference, sent when you tap "Compare WEB," add a verse in Memorize, or open a day in Reading Plans, to retrieve public-domain Bible text from bible-api.com. No personal information is included.
Sent to a Bible search provider:
The word or phrase you type into Search, sent to Bible SuperSearch's free King James Bible search API (api.biblesupersearch.com). No personal information is included.
Handled by your browser, only if you tap Speak:
The Speak button uses your browser's built-in speech recognition to turn your voice into text. Depending on your browser, your audio may be processed on your device or sent to the company that makes your browser (for example, Google for Chrome or Apple for Safari) to be transcribed, under that company's own privacy policy. Light Work never receives or stores your audio. Only the resulting text appears in the box, and it's handled exactly like anything you type.
Collected automatically:
Your IP address is used briefly, in server memory only, to enforce our daily usage limit - it's never written to a database. We also use Google Analytics for general usage patterns (pages viewed, engagement, device/browser type), plus which features get used - for example, that a devotional was created, which Bible book was looked up, or which Library resource was opened. We never send Google anything you type, like your questions, prayers, or topics.
What we don't collect:
No account required - signing in is optional. No email address, unless you sign in or email us directly. No payment information. No server-side storage of anything you save, unless you sign in (stored with access rules so only you can read it), turn on Cross-Device Sync (stored encrypted, unreadable to us) or use Circles (stored in ordinary, readable form, as described above).
Third-party services:
Content sent to Anthropic is governed by Anthropic's privacy policy. Google Analytics is governed by Google's privacy policy. If you sign in, your account and synced saves are stored with Supabase, our database and sign-in provider, on servers in the United States, governed by Supabase's privacy policy; sign-in code emails are delivered by Resend, governed by Resend's privacy policy. Our app, Cross-Device Sync storage, and Circles storage are all hosted on Netlify, governed by Netlify's privacy policy - Netlify never receives your Cross-Device Sync encryption key; Circles data, unlike Sync, is not end-to-end encrypted. Our welcome video is hosted on YouTube (in privacy-enhanced, no-cookie mode) and only loads if you tap to watch it, governed by YouTube's privacy policy. Jewish calendar lookups use Hebcal.com's public API. Bible text lookups use bible-api.com's public API. Bible search uses Bible SuperSearch's public API.
Children's privacy:
Light Work is family-friendly and includes optional "For Kids" content meant for use by or with children under a parent or guardian's guidance. We do not require accounts. The optional sign-in is intended for adults and teens 13 and older; children under 13 should use Light Work without signing in, or with a parent or guardian. We do not knowingly collect personal information from children under 13.
Not medical or mental health advice:
Light Work is a faith and prayer resource. It does not provide medical, mental health, or behavioral health advice, diagnosis, or treatment, and it is not a substitute for care from a qualified professional. If you are struggling with anxiety, depression, trauma, or thoughts of harming yourself, please reach out to a licensed provider or someone you trust. If you are in the U.S. and are in crisis or having thoughts of suicide, call or text 988 (Suicide & Crisis Lifeline) any time. If you or someone else is in immediate danger, call 911 or your local emergency number.
Your choices:
Clear your saved data anytime by clearing your browser's local storage for this site. If you've signed in, you can sign out any time, or delete your account from "Your Account" in the Menu to permanently remove your email and synced saves. If you've used Cross-Device Sync, you can delete your encrypted cloud copy yourself anytime from "Sync Code" at the bottom of the page - no need to contact us. If you're in a Circle, you can leave it at any time - removing just your own seat - or, if you created it, close it entirely; contact us if you'd like a Circle's stored content removed sooner than its automatic 30-day-inactivity close. Opt out of analytics through your browser's cookie settings. Questions? Email us at 100LightWork@gmail.com.
