Join the waitlist

Waitlist privacy notice

Effective . Version v1.

This notice covers lampiria.com and the Lampiria waitlist: what we collect when you visit or join, why, who helps us, how long we keep it, and how to have it removed. The Lampiria app has its own privacy notice, which you'll see before you install it.

Who we are

Lampiria is made by RepWorth, Inc., a Delaware corporation ("we"), 20350 Stevens Creek Blvd, Cupertino, CA 95014, USA.

  • Privacy questions and requests: privacy@repworth.net
  • Help: support@repworth.net
  • Security reports: security@repworth.net

The short version

  • To join, we ask for your email and two questions about your Mac and where you are. We never ask about your health or how you focus.
  • We use them to invite people to the beta and to tell you when Lampiria opens. We don't sell your data or use it for ads.
  • Analytics runs only if you say yes. A browser privacy signal counts as no.
  • Reply "unsubscribe" to any of our emails, or write to privacy@repworth.net, and we'll remove you.

Who the waitlist is for

The waitlist and the beta are for adults, 18 or older. The beta is invite-only and for people in the US, plus a few testers we invite. If you tell us you're outside the US, we keep your sign-up only if you tick "Keep my email". If you confirm your email without answering, your sign-up stays until you unsubscribe or ask us to delete it.

What we collect

When you join

  • Your email address.
  • That you confirmed you're 18 or older, and when you signed up.
  • Which version of this notice you saw.
  • A neutral channel code, such as "friends" or "reddit", if the link you followed had one, and which version of the page you saw. Our database never stores the page you came from. Vercel's hosting logs, below, briefly do.
  • Whether you've confirmed your email, and when.
  • Two one-time codes, which we store only in a scrambled (hashed) form. One confirms your email; the other lets the page save your answers.

Your two answers

  • Which macOS your Mac runs (macOS 27, macOS 26, older, or not sure), and whether Apple Intelligence is turned on (yes, no, or not sure).
  • Whether you're in the United States.
  • If you're outside the US and tick "Keep my email so you can tell me when Lampiria opens where I am", when you ticked it. That's our record of your consent.

We use the macOS answers to choose whom to invite first, since the beta needs Apple Intelligence turned on, and as counts, to choose the oldest macOS version the beta supports. The form has no place to tell us about your health or how you focus, and we never ask.

Emails

  • The confirmation email we send right after you join.
  • Emails we send you by hand, such as beta updates and, if we invite you, your invite.
  • Your replies to our emails, and anything you send to support@ or privacy@.

If we invite you to the beta

Before inviting anyone, we have a short personal conversation with them, by call or email. Your invite records the Google address you'll sign in with and whether you can buy Lampiria (only people in the US can).

When you sign in with Google, Supabase, which runs our sign-in, logs your account ID, Google address, IP address, browser and, if Google gives it to us, your name, and keeps each entry for 7 days. If we delete your account, Supabase logs the deletion with your account ID and Google address, and that entry, like the others, stays until its 7 days are up.

Analytics, only if you say yes

The banner asks "Can we count your visit?" If you choose Allow analytics, your browser sends PostHog a short event when you view the home page or this page, when you join, and when you answer the two questions. Each event carries:

  • a random ID created when you said yes;
  • the page's path, without anything after "?";
  • the page version and the channel code.

It never includes your email, your answers, the page you came from or a cookie. PostHog builds no profile of you, is set not to keep your IP address, and doesn't look up your location. Your IP address and browser details still reach PostHog in transit, as they do with any request.

Your choice is kept in your browser's local storage, under lampiria-analytics: "declined", or "allowed" with the random ID ("allowed-over-signal" if you allowed while a privacy signal was on). It stays in your browser.

Browser privacy signals. If your browser sends Global Privacy Control or Do Not Track, we treat it as "No thanks": the banner doesn't show and nothing is sent. You can still choose "Allow analytics" in Analytics settings, at the bottom of the home page and this page, and that choice counts until you withdraw it.

Changing your mind. Open Analytics settings and choose No thanks. Sending stops at once and the random ID is deleted from your browser. Events already sent stay with PostHog until they expire (below).

Hosting, security and error logs

  • Vercel hosts the site. For each page and form request, its logs keep for 1 day:

    • the address requested, including anything after "?";
    • your IP address, browser (user agent) and region;
    • for the first request from another site, the page that linked you here.

    We can't switch these logs off, and we don't copy them anywhere. Our waitlist code never writes your email or answers to them.

  • Cloudflare Turnstile checks that a person, not a bot, is filling in the form. It loads only once you click into, tab to or type in the email field, and it sees your IP address and browser details. If you only read the site, Cloudflare isn't contacted.
  • Sentry gets a short report when the waitlist fails on our side: which step failed and the kind of error. It never includes your email, your answers or your IP address.

Our own pages set no cookies.

Why we use it

  • To invite people to the beta, and to tell you when Lampiria opens where you are.
  • To choose the oldest macOS version the beta supports, from counts of the answers.
  • To keep the waitlist working, and safe from bots and abuse.
  • If you allow analytics, to learn which parts of the site help.
  • To make sure we don't email you again after you unsubscribe or ask for deletion.

We don't sell your data, and we don't use it for advertising.

Who helps us

  • Vercel: hosts the site and runs the waitlist, in the US.
  • Supabase (US, Oregon): stores the waitlist.
  • Cloudflare: the Turnstile bot check, and a private storage bucket for our deletion record (below).
  • Resend: sends the confirmation email.
  • PostHog (US): analytics, only if you allow it.
  • Sentry: error reports, with no personal data.
  • Google: our company email.

How long we keep it

  • Your sign-up (email, answers, dates and channel code): until you unsubscribe, ask us to delete it, or your Lampiria account is deleted. We'll review this after Lampiria's public launch.
  • An unconfirmed sign-up: deleted 30 days after you joined. The confirmation link works for 7 days.
  • Outside the US with "Keep my email" unticked: your sign-up is deleted when you press Send. If the same address joined earlier, that earlier sign-up stays until you unsubscribe or write to privacy@.
  • The confirmation email: Resend keeps its copy until 30 days after it was sent, plus up to 7 days in its backups. We can't delete it sooner, even after you unsubscribe or ask for deletion.
  • When we last sent you a confirmation email: to send at most one an hour, we keep a scrambled form of your address with the send time, for about 2 hours at most. It's removed at once when you unsubscribe or ask for deletion. If your sign-up is deleted when you press Send, it still lasts those 2 hours.
  • Database backups: Supabase keeps a daily backup of our database for 7 days, so something we delete can stay in a backup for up to 7 days. If we ever restore one, we delete again everything that was deleted after it, before the waitlist reopens. One exception: if our live database can't be read at the time, a sign-up deleted when you pressed Send in the week before could come back, and we might email it before we notice and delete it again.
  • Hosting logs (Vercel): 1 day.
  • Cloudflare Turnstile: we keep nothing from it. Cloudflare keeps what it sees under its own Turnstile privacy notice, which gives no period, and uses it to improve its bot checks.
  • Analytics events (PostHog): 1 year.
  • Updates we sent to your waitlist address, and your replies to them (an "unsubscribe" reply included): deleted with your sign-up.
  • Emails to support@, replies to our confirmation email included (an "unsubscribe" reply goes with your sign-up, as above): 24 months, or sooner if you ask us to delete your data.
  • Privacy requests: your request, our replies and anything we sent you are deleted 30 days after we close the request. We keep a short record for 24 months: its dates, the type of request, how we confirmed it was you, and the outcome. It holds none of the emails' content.
  • Invites: your invite emails, and an invite you don't use, are deleted 90 days after the beta ends, or sooner if you ask.
  • Our do-not-email list: after you unsubscribe or ask for deletion, we keep a scrambled form of your email, so we don't email you again. It's made with a secret key, so we can match it only against an address we already have. Because we hold that key, we still treat it as your personal data. It stays until you write to support@ from that address to rejoin.
  • Our deletion record: when we delete a sign-up, we write a record to a private Cloudflare bucket. It holds only internal IDs, the scrambled form of the email with the version of the key that made it, what happened and when, and a note when each deletion is finished, never the email itself. It exists so that restoring a backup doesn't bring deleted data back (see the one exception under Database backups), and we keep it with no fixed end date. When the form deletes a sign-up at Send, our database first keeps a note with only the internal ID and time, until it's copied into this record, usually within a week.

Your choices

  • Unsubscribe: reply "unsubscribe" to any of our emails. We don't need anything else from you, and it works for at least 30 days after each email. In practice we act on it at once. It deletes your sign-up, the updates we sent to it and your replies to them. Invite and support emails, Resend's copy and backups follow their own periods (see How long we keep it).

  • Delete your data, or get a copy: write to privacy@repworth.net, ideally from the address you signed up with.

    1. We reply within 2 days.
    2. We confirm it's you in a proportionate way, such as a reply from that address.
    3. We finish within 7 days of confirming.

    Deletion removes your sign-up, any invite you haven't used, and the invite, support and waitlist emails for your address. The copies listed above (Resend's, backups, logs) expire on their own schedules.

  • Correct something: write to privacy@repworth.net.
  • If you joined twice: leaving "Keep my email" unticked on a later sign-up doesn't remove the earlier one. Unsubscribe, or write to privacy@.
  • Rejoin after unsubscribing: write to support@repworth.net from that address, and we'll help you rejoin. Signing up again on the form doesn't undo an unsubscribe, so nobody else can sign you back up.

Under 18

The waitlist is only for adults. If we learn that someone under 18 has joined, we delete their sign-up.

Changes to this notice

When we change this notice, we post the new version here with a new effective date. If a change affects your data, we'll email everyone with a confirmed sign-up before it takes effect.

Contact

RepWorth, Inc. · 20350 Stevens Creek Blvd, Cupertino, CA 95014, USA · privacy@repworth.net