Lockd In privacy policy
Policy draft. Deletion handling and provider retention are still being verified before Play submission.
Contact
For privacy, support, or deletion requests, email lockdin@staylockd-in.com. Lockd In is provided by Tf.Tech.
Information used on your phone
- Focus settings and history: task names, profiles, chosen apps and website domains, schedules, presets, session results and preferences are stored on your phone.
- Usage Access: when enabled, Lockd In uses foreground-app information to detect apps you chose to block during focus.
- Optional Accessibility: during restricting focus periods, Lockd In can identify the foreground app and read the address bar in supported browsers to compare its domain with your rules. This information is processed on your phone; the blocking implementation does not store or upload that detected address-bar text. The service does not perform gestures or taps in other apps. You can decline or disable it.
- Optional calendar access: calendar information is read for suggestions on the phone; Lockd In does not upload your calendar through its account/partner service.
- Optional saved places: location is used to save places and notice arrivals for reminders or routines, including while the app is closed or not in use when you grant background location. Saved coordinates and routine settings stay on your phone; Lockd In does not keep a location-history log or send those coordinates to its account/partner service. Geofencing uses Google Play services.
- Optional background photos: a photo you choose is copied into app-private storage for the background. It is not uploaded to the Lockd In account/partner service.
Information sent to the Lockd In service
Core local focus features can be used without an account. If you use online features, information is sent over HTTPS to the Lockd In service hosted using Cloudflare Workers and D1:
- Accounts: first name, email address, password during sign-up/sign-in, and a manufacturer/model device label. The service stores a salted password hash, account/device identifiers, hashed authentication tokens, timestamps, sign-in failure counters and source IP addresses. It does not store the password as plain text.
- Partner features: partner name, an encrypted code key, partner links, PIN verification material, early-end requests, session identifiers and session end times. Your selected partner can access information necessary to respond to a request.
- Messages to support/admin: the message you send, related session identifier if supplied, replies, and timestamps. Support/admin can read these messages and respond. Avoid sending passwords or other unnecessary sensitive information.
- Security and operations: service actions generate audit records. Infrastructure providers may also process connection and operational information under their own terms.
Why information is used and who receives it
Information is used to run focus features, authenticate accounts, support partner decisions, respond to messages and protect the service against abuse. Online data is processed by our hosting providers and, where the feature calls for it, your selected partner or support/admin. Google Play services supports device geofencing. When you export or share data through Android’s share sheet, you select the receiving app or person; their privacy practices then apply.
The current app does not include an advertising or analytics SDK identified in the reviewed dependency list. Lockd In does not sell your information or use it for targeted advertising.
Retention and deletion
Local data stays until you clear the corresponding data in the app or remove the installation. Android backup is disabled. Signing out does not delete your account or local focus history.
Delete account in the app removes your account email, name, password hash and associated device sign-ins from the service. It leaves local sessions, profiles and history on your phone. Under the current implementation, partner data is separate: deleting your login account does not automatically delete your partner setup, messages or related requests. Remove the partner separately or include partner-related data in a support deletion request.
Account and partner records are kept to provide those features until they are deleted. Expired requests and security audit entries are not automatically removed merely because a session or request ends. For a verified request to delete your account and associated data, Tf.Tech will remove the identifiable records associated with that request, including applicable partner records and audit entries, within 30 days after ownership is verified. This process includes support handling; the in-app login-account deletion action alone does not erase every category of record.
For instructions that do not require the installed app, see request account and data deletion. Email requests may require verification of account ownership. Verified account/data deletion requests are completed within 30 days after verification. We will explain the scope of deletion when we respond. Copies already exported or sent to another person are outside our direct control. Our hosting and email providers may hold operational logs or backup copies under their own retention processes; contact us for the applicable handling details.
Your controls
You can change Android permissions in system Settings, decline optional online features, delete history and local app data, delete your account in the app, or contact support. Revoking a permission can stop the feature that depends on it. Uninstalling removes app-private data on that phone but does not, by itself, delete service-side account or partner records.
Security
Account and partner requests use HTTPS. Private authentication material on the phone uses the existing encrypted vault; server passwords use salted hashes and partner keys are stored encrypted. These measures do not guarantee that loss or unauthorized access can never occur.
Changes
When this policy changes, the update date will change. Depending on where you live, you may have rights to access, correct or delete your personal information. Contact Tf.Tech at the address above to make a request.