LockedIn — Privacy Policy
No data collected No tracking No network requests No third-party SDKs
LockedIn is a local-first focus timer for iPhone. The app is built so that no personal data ever leaves your device. There is no account, no sign-in, no analytics, no advertising, and no third-party SDK that talks to a server.
This document explains exactly what happens to your data.
What we store on your device
LockedIn stores the following inside your iPhone's app sandbox. None of it is transmitted off the device.
| What | Where | Why |
|---|---|---|
| Focus session log — start time, planned and actual duration, completion flag, optional label | SwiftData (SQLite) |
Powers the Stats page, the 7-day chart, your streak, and the recent-session log |
| App preferences — theme, default duration, Strict Mode toggle, Pomodoro spinner values | UserDefaults via @AppStorage |
So your settings persist between launches |
| Strict Mode app selection | UserDefaults (JSON-encoded FamilyActivitySelection) |
So we know which apps to shield when you start a session. The selection is opaque tokens issued by Apple — the app never sees the real bundle identifiers or app names of the apps you chose. |
| First-launch educational sheet flag | UserDefaults |
So we don't re-show the same intro every time you tap Lock In |
iOS encrypts the app sandbox at rest using your device passcode (Apple's standard "Complete" Data Protection class). You can wipe all of this at any time by deleting the app — there is no backup we hold elsewhere.
What we do not do
- We do not collect, transmit, sell, share, or "anonymize and aggregate" any data.
- We do not make any network requests. The app contains no HTTP client.
- We do not use any third-party SDKs for analytics, crash reporting, advertising, or attribution.
- We do not sync to iCloud, CloudKit, or any other Apple-hosted service.
- We do not request your name, email, phone number, contacts, calendar, photos, microphone, camera, location, motion, or health data.
- We do not use advertising identifiers (IDFA / IDFV).
- We do not track you in the App Tracking Transparency sense — there is nothing to link, because we collect nothing.
Permissions LockedIn asks for
LockedIn requests two iOS permissions, both used only on your device:
- Notifications. Lets us deliver a single local chime at the end of a session when the app is backgrounded. We never send remote push notifications.
- Screen Time (Family Controls). Required by Strict Mode. When you turn Strict Mode on, iOS asks for your consent so the app can apply a shield to the apps you pick. The shield is removed automatically when your session ends. Apple's Family Controls framework guarantees the app never learns which specific apps you chose.
Both permissions are optional. The timer works without them.
Children's privacy
LockedIn is not directed at children under 13 and does not knowingly collect data from any user.
Data deletion
Uninstalling LockedIn removes all data permanently. There is no server copy, no cloud copy, and no way for us to retain anything because we never had it.
Changes to this policy
If we ever change what's stored or where, we'll update this page and the
app's PrivacyInfo.xcprivacy manifest in the same release.
Contact
For privacy questions, open an issue at the project's GitHub repository.