Privacy Policy

1. Introduction and scope

This Policy explains how data is processed when you use Lantern Owl applications that provide or refer to this document.

The practices described apply according to the features available in each application. If an application introduces practices that differ from those described here, we will provide specific information or update this Policy before starting the new processing.

2. Data used by the applications

2.1. Information stored on your device

The services currently described do not require a Lantern Owl account. Depending on the features used, local storage may contain content you enter, notes, bookmarks, selections, activity history, progress, achievements, preferences and cached resources. Local comments and reports are not automatically published or sent to our team. Avoid including unnecessary personal or sensitive information. Local storage may be on the device or in the browser. The operating system may include it in backups according to your settings. This local-storage description does not cover the online reactions, downloads or external voice services described below.

2.2. Online requests and external links

Features that access online information send the parameters needed for the request. The receiving service also receives your IP address and technical connection information. Where a request passes through our infrastructure, that infrastructure also processes these technical data to deliver and protect the service. Opening an external link subjects your visit to the destination’s privacy practices. Linking to a source does not imply affiliation or endorsement.

2.3. Advertising

Versions with advertising enabled use Google AdMob. Its SDK may process IP addresses, approximate location inferred from IP addresses, advertising and device identifiers, interactions with the application and advertisements, and diagnostic information. Purposes include displaying and measuring advertisements and preventing fraud. See the SDK data documentation.

Advertising is available only in versions that enable it. Local notes, saved content and reports are not configured by the application as content sent to AdMob.

Google explains its practices in its Privacy Policy and its page about data from partner websites and applications.

2.4. Voluntary contact

If you contact us by email, we receive your email address, message content and any attachments you choose to send. We use this information to respond, provide support and handle privacy requests. Do not send documents or sensitive data unnecessarily.

2.5. Online reactions and counters

Where these features are available, requesting counters sends a random identifier generated for the installation. Reacting or activating sharing also sends the date, interaction type (such as like, “amen” or share) and its state. The server stores a cryptographic representation of the identifier to recognize selections and prevent duplicate counts. This is pseudonymization, not guaranteed anonymity. The counter does not receive the recipient or content of the shared message.

The service uses Cloudflare Workers and D1. The infrastructure may process IP addresses for security and request limiting; the reactions database does not store IP addresses. Interactions with religious content may allow inferences about beliefs. We do not use these records for advertising targeting.

2.6. Downloads and text-to-speech

Downloads of voices, fonts or other resources send the requested resource, IP address and technical connection data to the server. We use Cloudflare infrastructure, including R2, to distribute resources. Locally executed voice models process text on the device without sending it to the download server.

When reading uses the system voice engine, text is passed to the installed TTS provider. Depending on the provider, voice and settings, processing may be local or involve online services. Consult that provider’s settings and policy; not every system voice works offline. Text-to-speech does not require microphone recording.

When you choose to share content, it is passed to your chosen application or service and is subject to that recipient’s practices.

3. Purposes and legal grounds

We use local records to provide the features you request, retain preferences and allow you to resume activities. Data processing necessary to provide those features relies on the applicable legal basis for delivering the requested service, subject to any specific requirements for sensitive data.

Where required, we request consent for advertising and access to identifiers. Handling rights requests and legal requirements is based on compliance with legal obligations. Support communications and the defense of rights may rely, depending on the context, on performing the service, exercising legal rights or legitimate interests compatible with your rights. Legitimate interests do not replace consent where consent is mandatory.

Legal references consider the Brazilian LGPD and the European GDPR, where applicable.

Reading features use local data to save preferences and resume activities. Online reactions display counts, recognize selections and prevent duplicates; technical connection data enables file delivery and service protection. Data revealing religious beliefs requires the specific legal grounds and safeguards required by applicable law; this Policy alone does not constitute consent to such processing.

4. Your advertising choices

Only versions with advertising and the relevant SDK enabled use Google’s consent mechanism (UMP). Where required, the service presents privacy choices and provides access to review them through its settings or advertising privacy controls. Versions without advertising do not use these advertising features.

You can review your choices through the available options and manage identifiers and tracking permissions in your device settings. Declining personalization does not necessarily mean that advertisements will disappear or that all technical processing will stop. Simply using the applications or reading this Policy does not constitute blanket consent.

5. Sharing and international processing

The described data flows involve Google for advertising, results providers and, where used, the intermediary results server. Email communications also pass through the email provider. Data may be disclosed to authorities where there is a valid legal obligation.

Providers may process information outside your country, including through international infrastructure. Transfers under our responsibility must observe the mechanisms required by applicable law, such as adequacy decisions or relevant contractual clauses. You can request information about recipients and safeguards through our privacy contact. Google's practices are detailed in its policy linked above.

Cloudflare provides hosting, file distribution, processing and storage for online reactions. System voice providers and services selected for sharing may receive the data described in section 2. See Cloudflare’s Privacy Policy. These flows do not apply to features that do not use these services.

6. Retention and deletion

Local data: records remain until removed through available features, by clearing application or website data in the browser, or by uninstalling the application, subject to the system's backup and restoration rules. Lantern Owl cannot remotely delete data stored only on your device.

Clearing local data: deleting a particular history or item may not remove other records or preferences. To remove all local records, use the application-data deletion controls in system or browser settings. Manage backups separately.

Support: messages are retained for the time necessary to resolve the request and comply with legal obligations or exercise rights. Where additional retention is justified, access will be limited to that purpose.

External services: retention periods and controls for data processed by Google, results providers, email providers and backup providers follow their respective policies. Uninstalling the application does not automatically delete information these services have already received.

Online reactions: records associated with the installation identifier currently have no implemented automatic expiration period. They may remain on the server after uninstalling or clearing data. Available controls can undo certain current-day reactions but do not delete the entire history. You may request deletion through the privacy contact; locating records may require identifying the installation. Do not email your secret access identifier. If the installation has already been erased, we may be unable to associate the records with your request.

7. Security

Results requests use HTTPS. Local storage relies on application and operating system protections; we do not claim that local records have separate application-level encryption. No environment is completely immune to failures or unauthorized access. Keep your device updated and protected with a screen lock, and avoid sharing it while unlocked.

If you identify a possible incident, use our privacy contact. Incidents subject to notification will be handled according to applicable law.

8. Rights and requests

Depending on applicable law, you may request confirmation and access, correction, deletion, information about sharing, portability, objection or restriction, and withdraw consent. These rights are subject to legal conditions and exceptions. Withdrawal does not affect the lawfulness of earlier processing.

Send your request to support@lanternowl.com, identifying the application and your request. We may request only the information necessary to verify that the request is legitimate. You do not need to send an identity document in advance. We will respond within applicable legal deadlines and explain any limitations, including cases where we do not hold the data because it is stored only on your device.

You may also lodge a complaint with the ANPD in Brazil or the competent data protection authority in Europe, including the AEPD in Spain.

9. Children and adolescents

Age requirements depend on the features offered and the age rating shown in each service and distribution store. Minors must have the authorization and supervision required by applicable law. Features restricted to adults must not be used by minors. Any processing of children’s or adolescents’ personal data must respect their best interests and applicable protection and consent requirements. Parents or guardians may contact support@lanternowl.com to report a concern or request action.

We do not knowingly collect personal data from children. If we become aware that such data has been collected without the authorization required by applicable law, we will take appropriate steps to delete it. Parents or guardians who believe a child has provided us with personal data may contact support@lanternowl.com.

10. Changes and contact

This Policy will be updated when relevant changes occur, such as account registration, synchronization, remote submission of reports or new providers. The document will show its date; changes requiring notification or new choices will be presented through appropriate means.

Lantern Owl • support@lanternowl.com