Privacy Policy

Information we collect

We collect account information such as your email address, account identifier, sign-in method, and display name. We also process profile details you provide, task and routine data, completion history, XP and streak progress, app preferences, and support messages.

When you create an account, we record the versions of the Terms of Service and Privacy Policy you accepted or acknowledged, the server acceptance time, the source and platform, and the app version and build when available. We do not include your password or authentication token in this record.

If you submit task proof, we process captured photos and related proof-review results. Task names, routines, progress, and proof may reveal fitness, sleep, meal, habit, or other wellness-related information.

We process subscription status, product, store, access expiry, trial dates, and billing-verification events. Apple and Google process payment-card details; LOCK IN does not receive your full card information.

We may process basic technical information needed to operate, secure, diagnose, and deliver the service, including platform, app version, request logs, permission settings, app-integrity results, and error information.

For AlarmKit reliability, we may collect user-linked operational diagnostics such as iPhone model class, iOS and app versions, alarm counts, scheduling outcomes, and capacity-limit observations. These diagnostics do not include task names, task identifiers, proof images, or authentication tokens.

How we use information

• Authenticate accounts and synchronize app state across sessions.
• Provide trials, subscriptions, support, reminders, alarms, and progress tracking.
• Classify tasks, review proof, and generate accountability messages.
• Prevent abuse, maintain security, improve reliability, and comply with legal obligations.

Trials and fraud prevention

To enforce one trial per eligible identity, we create a versioned, keyed pseudonymous identifier derived from a verified email address or verified sign-in identity. We do not store the original identity in the trial-claim record.

We retain trial-claim identifiers indefinitely after account deletion for fraud prevention and protection of our service. This processing is based on our legitimate interests in preventing repeated trial abuse and controlling service costs. The identifier is pseudonymous, not anonymous.

Service providers and disclosures

We use trusted service providers for authentication, hosting, app integrity, notifications, diagnostics, billing, and AI processing. They may process information only as necessary to provide services to us.

Relevant task information and submitted images may be sent to an AI provider for recognition, proof assessment, and accountability messages. We do not sell personal information.

Retention and account deletion

To recover interrupted coaching-text requests without generating or charging for the same request again, we retain account-linked generation receipts and generated text for seven days. Expired records are removed by scheduled cleanup. These records are also removed when the account is permanently deleted. Coaching text is cached separately on each device.

We retain information while your account is active and as needed to provide LOCK IN. A deletion request immediately deactivates the account and schedules permanent deletion after a 30-day recovery period.

After that period, we delete associated app state, legal-consent records, and the authentication account. We may retain limited records for security, fraud prevention, legal compliance, disputes, or enforcing agreements, including the pseudonymous trial claim described above. Raw user-linked AlarmKit diagnostics are retained for 90 days. Model- and operating-system-level fleet aggregates that do not contain user or installation identifiers may be retained longer.

Deleting your LOCK IN account does not cancel a subscription purchased through Apple or Google. You must cancel it in your store account. You can initiate deletion in Settings or through our authenticated web deletion page.

Your choices and safety

You can manage camera, notification, and alarm permissions in the app and device settings. Depending on where you live, you may have rights to request access, correction, deletion, or information about our handling of personal information.

LOCK IN is not intended for children under 13 and is an accountability product, not a medical service. Do not submit emergency medical information.

Security, changes, and contact

We use reasonable safeguards, including encrypted transport and platform authentication, but no system is completely secure. Providers may process information in the United States and other locations where they operate.

We may update this policy as the service changes. Contact support@redcitystudio.com with questions or privacy requests.