Privacy policy

The short version

Who we are

Locksquad ("Locksquad", "we", "us") is an app made by an independent developer, who is shown as the seller on the App Store. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described here.

Questions, requests and complaints: support@locksquad.app. We answer within 30 days, usually much sooner.

What stays on your phone

Some of what Locksquad uses never reaches us at all:

• Screen Time data. The apps and categories you lock, your per-app minutes, pickups and the stats screens are handled by Apple's Screen Time frameworks (Family Controls, Managed Settings, Device Activity) on your iPhone. Apple gives apps opaque tokens instead of app names, and even those stay on the device.
• Progress photos and the before/after slider. They are stored in the app's private storage on your phone. They are included in your device backup but never uploaded by us.
• Journal entries. The text you write stays on your phone. We only record that a journal entry was completed, to award XP.
• Camera frames used to count push-ups, squats, jumping jacks and planks. Apple's Vision framework reads body pose on the device; frames are never saved or sent.
• Apple Health steps. The app reads your step count on the phone to check an earn; we only record that you earned minutes with steps.
• Your earn exchange rates and lock schedules.

What we collect

Account

• Username, display name and avatar (an emoji and a color).
• Date of birth, to work out your age band (under 13, 13–15, 16–17 or adult). We use it to keep teens in teen squads and to block anyone under 13.
• How you sign in: an identifier from Sign in with Apple or Google, or your email address if you sign in with a 6-digit email code. We do not use passwords.
• App language, time zone, the 1 to 3 goals you pick, and your onboarding answers used to build your plan.
• On iOS 26 and later, if Apple's Declared Age Range says you are under 18, we record that signal so you are treated as a teen.

Screen-time signals (threshold events only)

To show your status on the squad board and award XP, the app sends a small number of events for your local day:

These events never contain app names, app identifiers, categories or your total screen time.

Plan, progress and earning

• Your 30-day plan, which tasks you complete and when, task swaps, XP, level, streaks, squad season results.
• Each earn: the method (for example push-ups or focus), the minutes granted and the time. Not the video, not your steps history.

Photo proof

When you add photo proof to a plan task, the photo is uploaded so it can be checked and, if you post it, shown to your squad. It is stored with your squad's chat media.

Squad and chat

• Which squad you are in, invites (including who invited whom), matching preferences, votes, pokes and blocks.
• Messages, replies, reactions, mentions, polls and votes, pinned messages, read receipts and edits.
• Photos, short videos (with a first-frame thumbnail) and voice notes you send. Before a photo or video is sent, iOS can check it for nudity on your phone (Sensitive Content Analysis); that check happens on the device.
• Reports you make or that are made about your content, and moderation decisions.

Purchases

Purchases go through Apple. We receive your subscription status, product, trial and renewal dates and transaction identifiers from Apple through RevenueCat. We never see your card or payment details.

Device and app usage

• A random install identifier, platform, app version, device language and push notification token.
• Product analytics events from our own fixed list (for example "onboarding step finished", "squad joined", "paywall shown"). Events never contain message text, journal text, photos or app names. Events from before you sign in are linked to your account when you sign in.
• Basic server logs (IP address, time, request) for security and debugging.

When you contact us

Your email and what you tell us.

The website

locksquad.app sets no tracking cookies and runs no third-party analytics. Our host and Cloudflare keep standard request logs. Invite links (locksquad.app/i/…) record that the invite was opened, so we can credit the friend who invited you.

What your squad sees

Members of your squad see your display name, username, avatar, level and XP, today's board status (done, on track, over your limit, turned off Locksquad, or idle), how many minutes you are over your limit, how many of today's tasks you have done, your contribution to the squad streak and season, and what you post in the chat. If you turn off Locksquad's Screen Time access or delete the app, your squad is told.

They never see which apps you use, your total screen time, your progress photos or your journal.

How we use it, and why we're allowed to

We do not use your data for advertising, we do not sell or "share" it for cross-context behavioral advertising, and we do not make decisions with legal or similarly significant effects about you by automated means. Automated moderation can hide a message or mute you for 24 hours; you can ask a person to review it by writing to us.

AI features

Locksquad uses Anthropic's Claude API for a few features, and only for these:

• Your 30-day plan: your goals and onboarding answers.
• Photo proof: the photo and the task it is for, to check they match.
• Weekly recap: your squad's weekly numbers and first names, to write a short, friendly summary.
• Moderation: messages, images and video thumbnails in matched and teen squads, and anything reported, to catch clear rule breaks.

Anthropic processes this data on our behalf. Under Anthropic's commercial terms, data sent through the API is not used to train its models. We never send app usage, progress photos or journal entries to any AI service. If the AI is unavailable, the app falls back to hand-written templates.

Who we share it with

We use a small number of service providers who process data for us under contract:

We may also disclose data if the law requires it, to protect someone's safety, or as part of a sale or merger of Locksquad (in which case this policy keeps applying to your data).

International transfers

Some providers process data outside your country, including in the United States. Where data leaves the EU, EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or an adequacy decision.

How long we keep it

• Account, plan, progress and squad data: while your account exists.
• Chat messages and media: until you delete them, the squad is archived and emptied, or your account is deleted. Deleted messages become "message deleted" and their media is removed from storage.
• Screen-time events and XP history: while your account exists; season results are kept as squad history.
• Sign-in codes: 10 minutes.
• Reports and moderation records: up to 12 months after they are resolved, longer if needed for a ban or a legal claim.
• Analytics events: up to 24 months.
• Server logs: up to 30 days. Backups: rolled over within 30 days.

Deleting your account

In the app, go to Me → Settings → Delete account. This is immediate and can't be undone. We remove you from your squad (your squad sees "left the squad"), delete the media you sent, replace your messages with "message deleted", delete your account and personal data, and revoke Sign in with Apple. Deleting the app alone does not delete your account. Copies in backups disappear within 30 days. Active subscriptions are managed by Apple; cancel them in your Apple ID settings.

Your rights

Depending on where you live (including under the GDPR, UK GDPR and California law), you can ask us to:

• give you a copy of your personal data (access and portability);
• correct it;
• delete it;
• restrict or object to how we use it, including processing based on legitimate interests;
• withdraw consent where we rely on it (for example notifications or Health access, in iOS Settings).

Write to support@locksquad.app from the email on your account, or tell us your username. We may need to confirm it's you. We don't discriminate against anyone for using these rights. You can also complain to your local data protection authority.

Teens and children

Locksquad is not for children under 13, and we block sign-up when the date of birth shows someone is under 13. If we learn we have data from a child under 13, we delete it.

Teens aged 13 to 17 can use Locksquad with extra protections: they are only placed in teen squads; 13 to 15-year-olds can only join friend squads through an invite, never matched with strangers; and phone numbers, email addresses, links and social handles are filtered out of teen and matched chats. Parents or guardians can contact us about a teen's account at support@locksquad.app.

iPhone permissions

You can change any of these in iOS Settings. If you turn off Screen Time access, your squad is told and you lose 50 XP; that's part of the game, not a penalty on your data.

Security

Data travels over TLS. Media is kept in a private bucket and shown through links that expire after an hour. Sign-in uses short-lived tokens stored in your iPhone's Keychain. Access to production data is limited to the developer. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Changes and contact

If we change this policy in a way that matters, we'll tell you in the app before it applies. The date at the top always shows the latest version.

Contact: support@locksquad.app.