Privacy Policy
Last updated
This Privacy Policy describes how Lockalot (“Lockalot”, “we”, “us” or “our”) collects, uses, discloses, retains and protects personal information when you use the Lockalot mobile application for iPhone (the “App”), the website at lockalot.app (the “Website”) and any related services (together, the “Services”).
By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.
1. Summary
- Screen Time data stays on your device. We never receive the names of the apps you lock.
- An account is optional. Without an account, your progress and settings are stored only on your device.
- We do not sell personal information and we do not show advertising.
- You are in control. You can turn off usage analytics with Settings › Share Usage Data and delete your account with Settings › Delete Account.
2. Information We Collect
2.1 Information stored on your device
The App uses Apple’s Screen Time framework to lock the apps you select. Your selection of locked apps, and the number of times you open each locked app, are stored on your device and are not transmitted to us. Your puzzle history, streaks, badges and settings are also stored on your device.
2.2 Information you provide
- Account information. Creating an account is optional. If you sign in with Apple or Google, we receive your name and email address from that provider. If you choose to hide your email with Sign in with Apple, we receive an Apple private relay address instead.
- Student verification. If you request the student discount on the Website, we collect your school email address.
- Communications. If you contact us, we collect your email address and the content of your message.
2.3 Information collected when you sign in
If you sign in, the App stores a backup of your progress on our servers so that you can restore it on another device. The backup includes:
- daily activity: puzzles solved, solve times, unlock minutes earned and the number of blocked app opens, without the names of any apps;
- your current and best streak, badges, Streak Freezes and Streak Repairs;
- the number of Emergency Unlocks remaining in the current week; and
- your unlock time, reminder settings and Strict Mode schedules.
2.4 Information collected automatically
While Share Usage Data is turned on, the App collects:
- Usage information, such as screens viewed, buttons tapped and in-app events (for example, puzzles solved, unlocks, streak changes, subscription screens viewed and purchases);
- Settings information, such as the number of locked apps, the selected unlock time and whether reminders are enabled;
- Device information, such as device model, operating system version, app version, language and a randomly generated installation identifier;
- Approximate location, in the form of country and city estimated from your IP address;
- Session recordings, with all text fields and images masked;
- Diagnostic information, such as crash reports and error logs; and
- Survey responses you choose to submit in the App.
If you are signed in, this information is associated with your account identifier. Your name and email address are not included.
2.5 Purchase information
All payments are processed by Apple through the App Store. We do not receive or store your payment card details. We receive your subscription status, App Store transaction identifiers and an app-specific customer identifier so that we can provide Lockalot Pro.
2.6 Student discount information
When you verify a school email address, we store the email address and its domain, a cryptographic hash of the one-time verification code, the times codes were sent, the number of verification attempts and the App Store offer code issued to you. We also process your IP address to limit the number of code requests.
2.7 Website information
The Website does not use cookies, analytics or advertising technologies. Our hosting provider receives standard technical information, such as your IP address and browser type, in order to deliver the Website.
2.8 Notifications
Streak Reminder, Last-Chance Reminder and Trial Reminder are scheduled locally on your device. We do not send push notifications from our servers.
3. How We Use Information
We use personal information to:
- provide, operate and maintain the Services, including app locking, puzzles, streaks and reminders;
- back up and restore your progress when you are signed in;
- process and verify Lockalot Pro subscriptions;
- verify student eligibility, issue offer codes and prevent misuse of the student discount;
- diagnose errors, monitor performance and improve the Services;
- respond to your requests and provide support; and
- comply with legal obligations and enforce our Terms of Use.
4. Legal Bases for Processing
If you are located in the European Economic Area or the United Kingdom, we process personal information on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the Services, backups and subscriptions | Performance of a contract |
| Student discount verification and fraud prevention | Performance of a contract and legitimate interests |
| Usage analytics, diagnostics and product improvement | Legitimate interests (you can object at any time by turning off Share Usage Data) |
| Support and communications | Legitimate interests |
| Legal compliance | Legal obligation |
5. How We Share Information
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share personal information only with the following service providers, who process it on our behalf and under our instructions:
| Service provider | Purpose |
|---|---|
| Apple | App Store payments, Sign in with Apple and Screen Time |
| Sign in with Google | |
| Clerk | Account authentication |
| Supabase | Database hosting for backups and student verification |
| PostHog | Product analytics, diagnostics, session recordings and surveys |
| RevenueCat | Subscription management |
| Resend | Delivery of student verification emails |
We may also disclose information if required by law, to protect the rights, safety or property of Lockalot, our users or others, or in connection with a merger, acquisition or sale of assets, in which case this Privacy Policy will continue to apply to the transferred information.
6. International Transfers
Our service providers may store and process information in the United States and other countries outside Canada. Those countries may have data protection laws that differ from the laws where you live. We rely on our providers’ contractual safeguards to protect information that is transferred.
7. Data Retention
We retain personal information only for as long as necessary for the purposes described in this Privacy Policy:
| Information | Retention period |
|---|---|
| Account and backup data | Until you delete your account |
| Usage and diagnostic data | As long as needed to operate and improve the Services; data linked to your account is deleted when you delete your account |
| Unverified student requests | Deleted 30 days after the last code was sent |
| Verified student email and offer code | Retained to prevent duplicate claims, until you ask us to delete it |
| IP addresses used for rate limiting | Up to 2 hours |
| Support communications | As long as needed to resolve your request and keep business records |
8. Your Rights and Choices
- Analytics. Turn off Settings › Share Usage Data to stop usage analytics, session recordings and surveys.
- Account deletion. Settings › Delete Account permanently deletes your account, your backup and progress, the usage data and recordings linked to your account, and your subscription customer record. Deleting your account does not cancel an active subscription; manage subscriptions in your App Store account settings.
- Notifications. You can turn off reminders in the App or in iOS Settings.
- Access, correction and deletion. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at support@lockalot.app. We respond within 30 days and may need to verify your identity.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, or the data protection authority where you live.
9. Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at support@lockalot.app and we will delete it.
10. Security
We use administrative, technical and organizational measures to protect personal information, including encryption in transit (HTTPS) and database access controls that limit each account to its own records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the “Last updated” date above. If the changes are material, we will provide additional notice as appropriate.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at support@lockalot.app.