Privacy
What this website holds about you, and what it does not.
A public privacy-policy page is required before Lechem can be listed on Google Play. This page is that address.
- Last updated
- 24 July 2026
- Applies to
- The Lechem Android app (com.ooretz.lechem) and lechem.app
The short version
Lechem is built to work with the phone in airplane mode. Your brachos, your davening, your learning, your names, your resolutions — all of it is written to storage on your phone and stays there.
There is no account required to use it, no advertising, no tracking, and no analytics of any kind: the app contains no code that reports what you do.
There is exactly one thing that sends information about you off the phone, and it only happens when you deliberately choose it: sending a feedback report. That is described in full below, because it is the one place where the "everything stays on your phone" sentence stops being completely true, and a privacy policy that buried it would be worthless.
What this website does with your data
The policy above covers the app and this website together. These are the website-specific details, true of the code that serves this page today.
One cookie of our own: your language.
Choosing English, Hebrew or Yiddish stores that one word in a cookie named lechem_lang so the page opens in your language, and reads right-to-left when it should. It holds nothing else.
Signing in is optional, and it is a real account — not a tracker.
The public pages need no account at all. If you do sign in, the account system sets its own session cookie so the site knows it is you on the next page. Your email address is the only thing about you this site holds today — signing in here does not yet pull anything off your phone, because the sync described in section 2.3 above is not switched on.
No analytics, no advertising, no third-party trackers.
There is no measurement script, no advertising code and no social pixel on any Lechem page. Nothing about your visit is sold, shared or sent to anyone.
Your practice is not on this website.
What you counted, what you davened, the names you keep — none of that reaches this site. It lives on your phone. The engine that would one day carry it here is designed and not built, and when it is, this page changes in the same breath.
The most private screens never leave the device — by design, everywhere.
A small set of the most personal screens in the app is device-local by rule, in every version of Lechem. They are not listed on this website, not linked from it, and no part of this site can reach them.
This website is not where a child signs up.
There is no self-serve sign-up here at all today, for anyone. Family accounts, parental controls and a child’s safe corner are designed and are gated behind a children’s-privacy review before any of it ships publicly.
The full policy
The policy below was written against the build that actually exists, section by section, and it covers the Android app and this website together — one policy, not two.
1. What stays on your phone, always
All of the following is stored locally on your device and is never transmitted anywhere:
- Your bracha count and everything behind it — what you counted, when, on which day.
- Your davening, your learning, your Chitas and Shnayim Mikra progress.
- The names you daven for, refuah names, yahrtzeits, kevarim tefillos, your kabbalos.
- Your minhag, nusach, edah, and the city you chose for zmanim.
- Your profiles and any family or child profiles set up on the phone.
- Everything on the screens the app treats as strictly private (the cycle and mikvah sections). These are held to an additional rule: they are never photographed by the app, never named in a report, and never included in any transmission for any reason.
If you uninstall the app, this data is deleted with it. It is not backed up to Google (android:allowBackup="false" — the app opts out of Android’s automatic cloud backup precisely so that this data does not land in a Google account without you asking).
2. What leaves the phone
There are exactly six pieces of code in Lechem that are permitted to use the network. This is enforced by an automated build gate, not by good intentions: a build in which any other file contains a network call is refused and never produced.
2.1 Sending a feedback report — the only path that sends anything about you
When you tap Send on a feedback report, the report is uploaded. It contains:
Always: what you wrote, and any notes you pinned on a picture; the screen you were on, and the name of the last thing you tapped on it; the app version, your language, your screen size, your device model and browser identification string, the time, and your time zone.
Any media you attached or recorded: screenshots (including automatic screenshots of the screen you came from), screen recordings, and voice recordings — which will contain your voice, and anything audible around you while recording.
Unless the report was filed from a strictly private screen: who filed it — the name on the profile, the profile identifier, your account number, your edah/nusach, and the city you have set for zmanim.
If the report is filed from a strictly private screen (cycle / mikvah), those identifying fields are not included at all — not blanked, not replaced with "unknown", simply absent — and no picture of that screen is taken.
When a child's profile files a report, the child's name is deliberately not included. The report says only that a child filed it, on which profile, and on whose account.
Reports are sent to a server operated for OOretz on Supabase infrastructure, and are readable only by the developer, who uses them to fix the app. They are not sold, not shared with advertisers, and not used to build a profile of you. The app shows you, on the send screen and before you send, exactly what the report will carry.
Nothing is ever sent automatically. There is no timer, no background upload and no "anonymous usage statistics". If you never tap Send, nothing about you ever leaves the phone.
2.2 Checking for updates and content packs — sends nothing about you
Three parts of the app make simple download requests to fetch files:
- a check for whether a newer version of the app exists (it only tells you; it never downloads or installs anything);
- a check for updated content;
- downloading a language pack.
These are ordinary downloads. They carry no identifier, no account, no usage data and no contents of your phone. As with any request to any website, the server necessarily sees the network address (IP) the request came from and the time — that is unavoidable in how the internet works, and we mention it rather than pretend otherwise.
2.3 Signing in and syncing — built, not switched on
Lechem contains the code for an optional account: signing in so that your practice follows you to another phone and to the web. In this version that server is not enabled, and no sync data is transmitted. When it is switched on it will be optional, it will be announced in the app, and this policy will be updated before it carries a single byte. At that point the data it would carry is your practice records — the same things listed in section 1 — sent to your own account so that your other device can read them.
3. Permissions, and what each is really for
The app does not request background location, does not read your contacts, does not read your photos or files, and does not read your calendar.
| Permission | What it is for | Does it send anything? |
|---|---|---|
| Internet / network access | The three downloads above, and sending a feedback report you chose to send | Only as described in section 2 |
| Camera | Reading an ingredients label. The text is recognised on the device; the picture is not uploaded | No |
| Location (approximate and precise) | Zmanim, candle lighting and the parsha for where you actually are; and noticing you have left the place where you ate, so it can ask whether to bentch | No — your coordinates are used on the device and are not transmitted. The city name you set is included in a feedback report if you send one |
| Microphone | Recording a voice note or narrating a screen recording, in feedback; and speaking to the app | Only inside a feedback report you send |
| Notifications | Reminders you asked for — zmanim, candle lighting | No |
| Exact alarms | So a candle-lighting reminder arrives at the right minute, not "roughly" | No |
| Foreground service (location) | Keeps the "did you leave where you ate?" question working while the app is not on screen. It runs only while a meal is open, never on Shabbos, and stops itself | No |
| Run at startup | So the home-screen widget is correct about Shabbos after you restart the phone | No |
4. Children
Lechem is built so that a child can use it — the pictures do the talking and nothing is asked of a child that a child should not be asked. A child’s name and details stay on the phone. If a report is sent from a child’s profile, the child’s name is not included.
Lechem does not knowingly collect personal information from children. If you believe a report was sent that contains a child’s personal information, contact us and it will be deleted.
5. Third parties
- Supabase hosts the storage and the endpoint that receives feedback reports and, in future, sync. They act as a processor for us.
- Google Play services supplies the on-device text-recognition model used by the ingredients label reader; the model is downloaded to the device by Google Play, and the recognition itself happens on the phone.
- There are no advertising networks, no analytics SDKs, and no social-media SDKs in this app.
6. Your choices
- Don’t want anything to leave the phone at all? Don’t send a feedback report. Everything else works with the phone offline.
- Want a report deleted after you sent it? Contact us with the ticket number the app showed you.
- Want everything gone? Uninstall the app. Local data goes with it.
8. Changes
If this policy changes in a way that affects what leaves your phone, the change will be announced in the app before it takes effect — not merely posted here.
7. Contact
No monitored email address has been published for Lechem yet, and this page will not print one until it exists.
The two things this section is for — asking for a report to be deleted, and reporting a child's data — still have a route that reaches a person today: the feedback button in the corner of this page. It needs no account, it files a numbered Lechem ticket, and it is read. How to reach us.
OOretz, Inc.