לחםLechem
Sign in

Privacy proof

Kept on this phone. Signing in moves none of it — what leaves is the address you sign in with, and a report if you send one.

The promise

Lechem writes your record on this phone. No ads, no analytics, no tracking, no remote fonts — that has not changed. It also keeps a copy of that record by itself — a file on this phone, rewritten after you leave the app, so Lechem can bring you back after a crash. That copy holds your children's names; it never holds cycle or mikvah.

Kept on this phone. Signing in moves none of it — what leaves is the address you sign in with, and a report if you send one.

Until then, every session fails closed: facts, uncertainty, and ask-my-rav only.

Your own record

Local data
Export all local data
Import a Lechem export
Inspect my export
Delete everything on this device
Delete the profile, history, notes, and settings from this device? This cannot be undone.

What this is

Safe mode — awaiting a signed pack

Use the signed pack's variant when available

Where everything on this page comes from

  • This is the app's own privacy statement, not a website's summary of it. It is the same sentence the phone shows, from the same key.
  • The three things that can leave the phone, and the fact that each only leaves when you do it, are the app's own enumeration. The cycle and mikvah records are named as never included — and they cannot be: the database excludes them from the sync allow-list by a CHECK constraint, which is why those two screens have no web page at all.
  • Read verbatim from the phone app's own interface dictionary (app/www/js/i18n.js, sha256 4c813f47324ce83f…, 220 keys in three languages) — the same dictionary, by the same keys, that app.js itself renders this screen from. Nothing was translated or reworded here.

What else is inside