PRIVACY POLICY

1. Who is responsible

Samuel Rodrigues, doing business as Hydro Apps (“we”), is the controller of the personal information we process to provide Locked In. Privacy contact: Samuel Rodrigues, support@lockedinapp.space. Apple, your sign-in provider, and other service providers also process information under their own policies.

2. Sign-in and setup

Locked In signs you in with Apple or Google through Supabase Auth. Supabase stores your account identifier and, if your provider shares them, your name and email, so the app can tell your routine apart from anyone else’s.

While you are setting up, your onboarding answers—name, goals, obstacles, availability, and your routine draft—are stored with your account so you can continue on another phone. They are removed from the account when setup finishes. Body weight and anything you add that you are trying to quit, if you enter them, are never put in iCloud and are never sent to your account in a form anyone but you can read (see Encrypted backup in section 3). Your choice about AI is not stored with your account either. Supabase also keeps your subscription status, including plan, expiry, and Apple transaction identifier. Your ongoing routine itself is not sent to Supabase for routine storage.

3. Your routine and device features

The app stores your profile, goals, routine, sessions, progress, body weight, the things you are trying to quit with your daily check-ins, and explanations on your device. If you enable iCloud sync, Apple also processes the synced routine data in your private iCloud storage. Body weight and your quit streaks are the exception: they are never put in iCloud. They are never sent to Locked In AI. Your quit streak appears on the stat card only if you turn it on, and the name of what you are quitting only if you also choose to show it. AI permission is never synced or restored from another device: it is not part of the profile mirror or of the setup answers stored with your account, so each phone asks for your choice separately. Your profile photo and exported stat card stay on the phone unless you choose to share them.

With your permission, the app can schedule notifications and use Apple’s Screen Time features to shield selected apps during focus sessions. You control these permissions through the app and iOS settings. Live Activities can show task and timer information on your lock screen, where someone with access to your screen may see it.

Encrypted backup. Once a day, while you are signed in, the app encrypts a copy of everything stored on your phone (your routine, progress, body weight and quit streaks) on the phone itself and uploads it to your account’s private folder in Supabase Storage, so you can restore it if the app is deleted or you move to a new phone. It is encrypted with a key created for your account that is kept in your iCloud Keychain and is never sent to us or to Supabase; the app can show it as a recovery code. Without that key nobody can read the backup, including us, and we cannot recover it for you. Deleting your account or using Delete All Data removes it.

4. Optional AI

AI is off until you agree on this device. Your choice is made and kept on each phone separately; it is never copied from another device, from iCloud, or from your saved setup answers. Requests go from your phone to Supabase, which runs Locked In’s server, and on to OpenRouter and its AI model providers. They are tied to your signed-in Locked In account. Requests can include your questions and recent chat, goal and task names, the reason you wrote for each task, schedules, progress counts, streaks, XP, level, grace passes, unplanned days, reason categories, category usage, minimum duration, and tone. Reminders are written ahead of time from the same details. Each task and goal also carries a random identifier so a suggestion can point at it. The AI can suggest changes to your routine, but nothing changes until you tap Apply. Body weight and the habits you are trying to quit are never included.

These items are text you write, so they can reveal health or other sensitive information (for example a goal about therapy, a condition or a habit). By agreeing to AI you give explicit consent for that content to be sent to these providers. If you do not want that, leave AI off or do not put such details in goals and reasons. We send requests with the setting that asks OpenRouter’s model providers not to collect or train on them, but we cannot guarantee how providers behave. See also our Consumer Health Data Privacy Policy.

Written plea explanations stay on your phone and require a separate sharing choice before they are sent. Custom content can contain sensitive information, and automated checks cannot detect everything. Avoid including information you do not want these providers to process. The built-in routine, focus, and proof features work without optional AI.

5. Why we process information

We use this information to provide sign-in, restore setup, recognize subscription access, deliver requested app features, answer routine questions, produce verdicts, enforce usage limits, respond to support requests, and protect the service. AI requests are tied to your Locked In account so usage limits apply per account. We do not use routine or AI information for advertising or cross-app tracking, and we do not sell it.

Our legal bases under the GDPR and UK GDPR are: contract (Article 6(1)(b)) for sign-in, account, setup restore, subscription status and the app features you request; consent (Article 6(1)(a), and Article 9(2)(a) for any health-related content you write) for optional AI and for the launch waitlist and its emails; legitimate interests (Article 6(1)(f)) for security, abuse prevention, rate limits and support; and legal obligation (Article 6(1)(c)) where the law requires us to keep or disclose records. You may withdraw consent at any time in the app (AI) or by unsubscribing (waitlist) without affecting earlier processing.

Giving us your sign-in details is needed to create an account; without it you cannot use the app. AI answers and verdicts only affect your streak, XP and suggestions in the app. They have no legal or similarly significant effect on you, and are not decisions made solely by automated means about your rights.

6. Retention

Routine records remain on your device, in your encrypted backup and, if enabled, in iCloud until you delete them. The AI proxy code does not store question or answer content in its quota tables. Those tables contain your account identifier, counts, and request timestamps and are deleted after seven days. To prevent abuse, the server also keeps request counts per account and per one-way hash of your IP address for at most one day; it does not store the raw address in those rate-limit records.

Provider and infrastructure logs, backups, and retention depend on their policies and the deployed account settings. Our AI requests ask OpenRouter’s model providers not to collect or train on prompts, but we cannot promise how each provider behaves. Account and subscription records in Supabase are deleted when you delete your account; our hosting provider’s own database backups may keep a copy for up to 30 days. Support emails are kept for up to 24 months after the issue is closed, then deleted, unless the law requires longer.

7. Your choices and deletion

Turn AI off in Profile to stop future AI requests. Explanation sharing can be turned off separately. Use Delete Account in Profile to delete your Locked In account, the onboarding and subscription records stored with it, your encrypted backup, this phone’s data and, if the account synced to iCloud, its iCloud copy. For accounts created with Apple, the app’s Sign in with Apple access is revoked too.

Use Delete All Data to request removal of local routine data and your encrypted backup. iCloud deletion depends on sync completing and may not finish immediately. These actions do not erase provider records already created; provider-held records are subject to that provider’s deletion and retention process. Deleting your account or the app does not automatically cancel an Apple subscription. Manage any subscription in your Apple account settings.

Depending on where you live, you may have rights to access, correct, export (portability), delete, restrict, or object to processing of your information, withdraw consent, appeal a decision about your request, or complain to a data-protection authority or state attorney general. This includes rights under the GDPR and UK GDPR, the California Consumer Privacy Act and other US state privacy laws, Brazil’s LGPD, Canada’s PIPEDA and Quebec’s Law 25.

Email support@lockedinapp.space to make a request, or ask us to send a copy of the data we hold about your account in a common file format. We will verify that you own the account (for example by replying from the account email), then respond within one month (45 days for US state requests, extendable once where the law allows). You can use an authorised agent. We never discriminate against you for using these rights.

Sale, sharing and tracking. We do not sell your personal information, do not share it for cross-context behavioural advertising, and do not use or disclose sensitive personal information to infer characteristics about you. Because we do not track you across sites or apps, Do Not Track and Global Privacy Control signals need no special handling.

8. This website and the waitlist

This website is hosted on Vercel. When you visit, hosting infrastructure may process your IP address, browser and device information, requested URLs, timestamps, and technical logs to deliver and secure the site. This site does not add advertising trackers, analytics SDKs, or nonessential tracking cookies. Fonts, screenshots, and recordings are served with the site.

If you join the launch waitlist, we store your email address, when you joined, your referral code, the referral code in the link you used (if any), and the campaign source in that link (such as “tiktok”). We use it only to tell you about the Locked In launch and to show your place on the list. The waitlist is stored with Supabase, and waitlist emails are sent through Resend. To stop abuse, the sign-up form counts requests per one-way hash of your IP address for at most one day; it does not store the raw address. The waitlist is not sold or shared with anyone beyond those providers. It is deleted on request or 90 days after launch. You must be 13 or older to join. Every waitlist email has an unsubscribe link that deletes your email from the list straight away, or you can email support@lockedinapp.space.

If you email us, your email service and ours process your message, address, and any attachments. Do not send passwords, verification codes, payment-card details, or sensitive routine information when asking for help.

9. Providers, transfers, and security

Our providers may process information in countries other than where you live, including the United States. Where personal data leaves the EEA, the UK or Switzerland, we rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses. Our Supabase project is hosted in the United States. We use the platform’s authentication, access controls, and encrypted connections, but no storage or transmission method can be guaranteed completely secure.

• Supabase privacy policy — authentication, setup, subscriptions, the AI proxy, and the waitlist.
• OpenRouter privacy policy — optional AI routing and model processing.
• Apple privacy policy — Apple sign-in, iCloud, and purchases.
• Google privacy policy — Google sign-in.
• Vercel privacy notice — website hosting.
• Resend privacy policy — waitlist emails.

10. Children and policy changes

Locked In is for people aged 13 and over (or the higher age required where you live to consent to data processing yourself) and is not directed to children under 13. When you sign up you confirm that you meet this age. If we learn that a child under 13 has an account, or has joined the waitlist, we delete it and the associated data. If you believe a child has given us personal information, contact us and we will act promptly. Applicable age requirements and the App Store rating must also be respected.

We may update this policy when features, providers, or requirements change. We will update the date above and provide additional notice or request consent when required.