Privacy Policy

Locklandia works without an account, and most of what it does happens only on your phone. Signing in adds friends, the leaderboard, lock-in alerts and Plus, and those need a server we run. This page explains what that server receives, why, and how to delete it.

What Stays on Your Phone

Your blocks, modes, schedules, streak, session history and the notes you write when you end a block early are stored on the device. They leave it only if you turn on account sync (see below). Deleting the app deletes them.

If you save a place, its location and the size of its circle stay on your phone. iOS watches for you arriving and leaving and tells the app only that, and Locklandia never records or sends where you are. Places need location access set to Always, which you can turn off in iPhone Settings at any time.

If you use a keyholder, the shared code is generated on your device and handed to them directly. The secret behind it is never uploaded, so we cannot generate your codes and cannot unlock your blocks.

What We Never See

Which apps and websites you block, and how long you spend in each app. On iOS you choose apps through Apple's Screen Time picker, which gives the app opaque tokens instead of names. Apple keeps that list private, including from us. Friends see how long you're locked in for, never what's blocked or why.

Usage Statistics

To learn which parts of the app people use, the app sends us short usage events: which screen was opened, and actions such as starting or ending a block, creating a mode or opening the paywall, with small details like how long a block was set for. Each event carries a random number the app makes when it's first used, plus the platform and app version. That number is not your account, and we never store it alongside your account, name, email or IP address. Events never include what you block, place names or locations, names of friends or groups, or anything you type.

This works whether or not you sign in, and it is our own system: no analytics or advertising company receives it. Turn it off in Settings → Privacy → Share usage statistics, and the app stops sending and deletes anything not yet sent. It is always off for anyone the app treats as under 13. We delete usage events after 180 days.

Crash Reports

If the app crashes or freezes, it sends a crash report to Sentry, a crash-reporting service we use: where in the app the problem happened, the app and system version, and the kind of device. Crash reports never include your account, name, email, IP address, what you block or anything you type, and no screenshots. They follow the same switch as usage statistics (Settings → Privacy → Share usage statistics) and are always off for anyone the app treats as under 13.

If You Sign In

You sign in with Apple. We receive an Apple identifier, and an email address if you choose to share one (it may be Apple's private relay address). We store a display name and, if you pick one, a public handle.

What the server stores depends on what you use:

• Friends and alerts. Your friends list, invites, and whether you share or receive lock-in and badge alerts. When you lock in, we tell your friends how long for.
• Leaderboard. Your handle, your time zone offset, and the start time and length of each focus session, used to rank you. You choose whether you appear on the global board. Leaving the leaderboard deletes that history.
• Profile photo. If you add one, it's shown wherever your name is, including the public leaderboard. Every photo is checked for explicit, violent or offensive content before anyone else can see it (see “Who else processes data”). If the check can't run, the photo stays hidden.
• Squads, challenges and habit checks. The challenges and requests you send or answer.
• Accountability and Plus features. Your partners, unlock requests and their answers, weekly focus totals you share, and private leaderboards you run or join.
• Your devices. An install identifier for each device and, if you allow notifications, its push token. While a block runs, we store which setup it is and when it ends, so friends joining you share the same clock.
• Account sync. If you turn it on, a copy of your app data (including earned badges) so your other devices can read it.
• Purchases. The App Store transaction details Apple sends us for Plus (product, dates, renewal and refund status), and simple paywall events, such as opening it or cancelling a purchase, so we can tell whether Plus is working. We never see your payment card.
• Referrals. Who invited whom, and the install identifier used, so a reward is paid once.
• Reports and blocks. Reports you make or receive, and who you've blocked. Three reports from people who can see a photo hide it automatically while it waits for review. A reported name is reviewed by a person, and replaced with a neutral one if it breaks the rules; we aim to act on reports within 24 hours.

We use this only to run those features and keep them safe. We do not sell it, do not use it for advertising, and do not track you across other apps or websites.

Children

Locklandia's online features are for people aged 13 and over. We don't ask your age. Where Apple's Declared Age Range says someone is under 13, the app stays local-only. There's no account, no friends, no leaderboard, no photos, and no Plus or card purchase, so nothing about them reaches our server. If you believe a child under 13 has an account, email us and we will delete it.

If You Buy A Card

Cards are sold in the app with Apple Pay and on our website, and Stripe handles payment either way. With Apple Pay, your phone produces an encrypted payment token that our server passes straight to Stripe; we can't read it and don't keep it. On the website you pay on Stripe's checkout page. Either way your card number never reaches us. We receive confirmation that payment succeeded, the email address for your receipt, and the delivery address you gave. If you're signed in when you buy in the app, or your account has the same email, the order is linked to your account so the app can show its status.

We keep the delivery address to post the card and to answer questions about the order afterwards. We do not use it for marketing and do not sell it.

Who Else Processes Data

• Apple: Sign in with Apple, App Store purchases and subscriptions, and push notifications.
• Sightengine: automated checks on profile photos. They receive the photo only, never your name or account.
• Stripe: card payments, receipts and delivery addresses.
• Fly.io and Supabase: our server and database hosting, in the United States.

Each processes data only to provide its service to us.

How Long We Keep It

For as long as your account exists. Notifications we couldn't deliver are dropped once they're out of date. Usage statistics are deleted after 180 days. Deleting your account deletes its data straight away, apart from purchase and order records we must keep for accounting, tax or fraud prevention, which have your account removed from them.

Deleting Your Account and Your Rights

Delete your account in the app under Settings → Delete account. This removes your account, friends, photo, leaderboard history, partnerships, synced data and devices, and revokes Locklandia's Sign in with Apple access. It does not cancel a subscription. Do that in your Apple account settings.

You can also email us to get a copy of what we hold, to correct it, or to have it deleted. If you are in the UK or EU you can complain to your data protection authority. If you are in California you have the same rights under the CCPA, and we do not sell or share personal information as it defines those terms.

Changes

If this policy changes, we'll update the date at the top. If it's a significant change, we'll also tell you in the app.

Contact

Email hello@jpdigital.studio. Locklandia is made by JPX Software.