Lamplight Home School
Privacy
Lamplight holds one family's school work and shows it to that family. It runs no analytics, sets no advertising cookie, and sells nothing to anybody. This page says exactly what is stored, why, and how to have it removed.
Last updated .
The short version
- Your schoolhouse is yours. Parents in it, and the child who is sitting at the table, are the only people who can see the work.
- There is no analytics, no advertising pixel, no session recording, no heatmap and no tag manager anywhere in this app.
- Nothing is sold, rented, or shared for advertising. There is no ad business here to share it with.
- Three companies process data on Lamplight’s behalf, and only when a specific feature is used. They are named below.
- Children’s details are entered by a parent, for that parent’s own family, and are never used to build a profile or to market anything.
Who is responsible
Lamplight Home School is published at lamplight.family.
- Operator: Rob Molina
- Postal address: not published yet
- Privacy and deletion requests: [email protected]
Where a detail above is marked as not published yet, it is genuinely unsettled rather than withheld, and it will be filled in here when it is. Lamplight is invite-only: until then, the person who invited you to your schoolhouse is the fastest route to whoever runs it.
What is stored, and why
This table is the whole list. It is written from the database itself rather than from a template, so it is what is actually there.
| What | Why it exists | How long |
|---|---|---|
| Parent account — email address, a hashed password, the display name you choose, and the invite code you signed up with | To sign you in, to tell two parents at one table apart, and to send a password-reset link if you ask for one | Until the account is deleted |
| Children in your schoolhouse — first name (or whatever you type), age, grade, the portrait they picked, and a 4-digit PIN | Age picks the reading level a lesson is written at. Grade appears on the record sheet. The PIN is what keeps one child out of another child's work, and out of the parent side, on a shared tablet | Until you remove that child or delete the schoolhouse |
| School work — assignments, answers, written work, marks, feedback, stars, reading log, attendance, and the year's records and transcript | This is the product. It is the reason the app exists | Until you delete it, or delete the schoolhouse |
| Family calendar — events, notes, locations, and who is attending | The family board | Until you delete the event or the schoolhouse |
| Scripture — references and reading-plan progress only | To keep a family's place. Lamplight stores no Bible text; the passage itself is read at LSBible.org | Until you delete the plan or the schoolhouse |
| Your own xAI API key, if you add one | So Grok-written lessons bill to your account rather than someone else's. It is encrypted before it is written to the database and is never shown back to you | Until you remove it |
| Housekeeping — how many AI lessons and hints your family used today, how many wrong PIN attempts a person has made in the last minute, and password-reset requests | Daily caps, the five-tries lockout that makes a 4-digit PIN meaningful, and stopping reset-email flooding | PIN lockouts clear in a minute. Reset records are deleted after 2 days, and AI counters after 35 |
| Session cookie | To keep a parent signed in. See the cookies page | Until sign-out or expiry; the record is deleted 7 days after it expires |
What is not here is as much the point: no phone number, no home address, no date of birth, no photograph of a child, no location, no device fingerprint, no advertising identifier, and no marketing-preference list — because Lamplight sends no marketing.
Who else sees it
Three companies, each doing one job, each only when the feature that needs them is used.
| Who | What reaches them | When |
|---|---|---|
| xAI (Grok) | The lesson text and the child's own question. Names, ages, email addresses and account details are not sent. The prompt is assembled field by field and every answer key is stripped out before it leaves | Only when a parent asks Grok to write a lesson, or a child asks for a hint |
| Resend | A parent's email address and the reset message | Only when someone asks for a password-reset link |
| The hosting and database provider | Everything, in the ordinary sense that it runs the servers and stores the database | Continuously, as infrastructure |
That is the entire list. No data broker, no advertising network, no analytics vendor, and no "partner" of any kind receives anything.
Children
Lamplight is used by children, and it is built for that on purpose: a child signs in with a portrait and a PIN instead of an email address, so no child needs an account anywhere to use it.
- A child’s details are entered by their own parent, in their own family’s schoolhouse.
- No child’s data is used for advertising, profiling, recommendations, or any purpose other than running that family’s school day.
- Nothing about a child is disclosed to anyone outside the schoolhouse. When a child asks the tutor for a hint, the lesson and their question are sent to xAI; their name, age and grade are not.
- There are no ads, no in-app purchases, no public profiles, no messaging with people outside the family, and no leaderboards.
- A parent can change or delete any child’s details from Family at any time.
Your choices
- See it, and take it with you. Everything is visible in the app — Records, Reports, Grade, Family and Calendar between them show the lot — and Family has a Download a copy button that saves the whole schoolhouse as one JSON file: every child, assignment, answer, mark, reading entry, attendance mark, calendar event and record. PIN hashes and your stored Grok key are deliberately left out of it.
- Correct it. Names, ages, grades, marks and feedback are all editable by a parent.
- Delete it. Children, assignments, events and plans can be removed in the app. To erase the whole schoolhouse — every child, every piece of work, every mark, the reading log, attendance and the transcript — a parent opens Familyand uses Erase this schoolhouse. It asks for your PIN and for the schoolhouse name, then removes the records for good; your account goes with it unless it belongs to another schoolhouse. We cannot undo it or recover it for you afterwards.
- Opt out of tracking. There is nothing to opt out of. No analytics, no advertising, no profiling, no automated decision-making.
If you are in a place whose law gives you a right to access, correct, delete or port your data, or to complain to a regulator, use the same address. Lamplight does not ask where you live and does not treat families differently by location.
Selling and sharing
Lamplight does not sell personal information and does not share it for cross-context behavioural advertising, as several US state privacy laws use those terms. There is therefore no “Do Not Sell or Share My Personal Information” link on this site, and adding one would be theatre: there is no sale to opt out of. If that ever changes, the link appears and this paragraph is rewritten.
Security
PINs are hashed with a salt, never stored in the clear, and never shown back to anyone — including you. Five wrong attempts lock that person out for a minute. Your API key is encrypted before it reaches the database. Every request to the server is scoped to the signed-in account, so one family’s query cannot reach another’s rows. The site is served over HTTPS with a content-security policy that permits no third-party script at all.
No system is perfect, and this one is small. If you find a way to see something you should not, tell the address above before telling anyone else.
Changes
When this page changes materially, the date at the top changes with it. Continuing to use Lamplight after that is how agreement is given; if you would rather not, ask for the schoolhouse to be deleted.
See also the cookies page for what is stored on your device, and the terms for the rules of use.