Effective date: September 21, 2026
Last updated: September 21, 2026

This Privacy Policy explains how Locked In collects, uses, discloses, and protects information when you use the Locked In mobile application, website, and related services. Locked In is operated by Jacob DeCoste (collectively, “Locked In,” “we,” “us,” or “our”).

Privacy at a glance

1 Scope

This Policy applies to information processed through the Locked In app, lockedinapp.dev, customer support, and related features. It does not govern third-party services that you access independently, including the Apple App Store, Google Play, or links to external websites.

2 Information we collect

Information you provide

• Account and profile information. Your phone number, authentication identifiers, display name, optional profile photo, timezone, and account creation date. If you use Apple, Google, or another supported sign-in method, we may receive information that provider makes available, such as an email address or name.

• Commitment and routine information. Habit and routine names, emojis, schedules, deadlines, reminder settings, routine steps, completion records, notes, streaks, pauses, archives, and related history.

• Break-habit information. The habit you want to stop, your start date, optional reason, check-ins, fresh starts or slips, optional private reflections, and the visibility setting you choose. This information may reveal sensitive details about health, beliefs, sexuality, substance use, or personal behavior.

• Squad and community information. Squad names and descriptions, memberships and roles, invite codes, shared commitments, activity-feed posts, check-ins, reactions, nudges, requests for support, challenge participation, reports, and blocks.

• Feedback and support. Messages you send to us, bug reports, optional screenshots, app version, device platform, and identifiers needed to respond or troubleshoot.

Information collected automatically

• Device and app information. Device platform, operating-system version, app version, timezone, notification settings, push token, and an app-generated device identifier used to deliver notifications and maintain device preferences.

• Usage and analytics. Events such as app opens, onboarding steps, commitment creation and completion, squad joins, invite activity, recap views, and feature interactions. Analytics are associated with your account after sign-in and are used to understand activation, reliability, and product performance.

• Technical records. Our hosting and service providers may process IP addresses, timestamps, request metadata, error records, and similar logs needed to secure, operate, and troubleshoot the service.

• On-device information. The app stores limited settings and queued data on your device, such as theme preferences, notification schedule identifiers, a device identifier, and analytics events waiting to sync.

Purchase information

When you purchase Locked In Pro, the applicable app marketplace processes payment. RevenueCat helps us manage products, receipts, subscription status, entitlement status, renewal information, and an app user identifier. We do not receive your complete payment-card number.

3 How we use information

• Create and secure your account and authenticate sign-ins.

• Provide habits, routines, check-ins, streaks, progress analytics, weekly recaps, squads, challenges, and sharing features.

• Deliver local and remote notifications, including reminders, nudges, reactions, squad activity, summaries, and challenge updates according to your settings.

• Process purchases, restore entitlements, provide Locked In Pro, and manage subscriptions.

• Personalize schedules and date calculations using your timezone.

• Provide support, investigate reports, moderate content, prevent abuse, and enforce our Terms of Use.

• Measure activation, retention, feature use, reliability, and performance; improve and develop the service.

• Comply with law, protect rights and safety, and establish or defend legal claims.

4 Sensitive information and your choices

Locked In lets you enter personal goals that can be sensitive. You decide what to enter. Do not include information you do not want processed by the service or, where a feature is shared, seen by the intended audience.

• Private break-habit goal. Only you can see the goal, its check-ins, and its fresh-start information through the normal app experience.

• Named break-habit goal. Your squad can see the goal and the shared on-track updates described in the app.

• Personal analytics. Your Progress screen, historical calendar, and week-over-week comparisons are visible only to you through the normal app experience.

• Screenshots. Feedback screenshots are optional and visible to the app team, not your squad. Remove unrelated or sensitive information before attaching one.

Locked In is not a medical provider, therapy service, addiction-treatment program, or emergency service. Do not use the app to communicate an emergency or rely on it for diagnosis or treatment.

5 How information is disclosed

With your squad and other users

When you join a squad, current squad members may see your display name, profile photo, shared habits and routines, check-ins, activity updates, nudges, reactions, requests for support, and leaderboard or challenge information. Invite previews may show limited squad information, such as the squad name and member count. Your choices and the app interface describe when a particular action is shared.

With service providers

We use service providers to operate Locked In. They process information on our behalf or under their own terms as applicable:

• Supabase. Authentication, database, file storage, and backend infrastructure. Privacy information: https://supabase.com/privacy

• Expo. Application infrastructure and push-notification delivery. Privacy information: https://expo.dev/privacy

• RevenueCat. Subscription and purchase-entitlement management. Privacy information: https://www.revenuecat.com/privacy

• Apple and Google. App distribution, sign-in where selected, purchase processing, and subscription management under their own policies.

Other disclosures

We may disclose information when reasonably necessary to comply with law or legal process; investigate fraud, security incidents, or misuse; protect the rights, property, or safety of Locked In, our users, or others; enforce agreements; or complete a financing, merger, acquisition, reorganization, or sale of assets. If ownership changes, personal information may transfer subject to this Policy or notice of materially different practices.

6 No sale or targeted advertising

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use third-party advertising SDKs in the app. If these practices change, we will update this Policy and provide choices required by law before using information in the new way.

7 Data retention

We retain account and service information while your account is active and as reasonably necessary to provide the service. Retention may vary by data type and purpose. We may retain information longer when necessary for security, fraud prevention, dispute resolution, legal compliance, financial recordkeeping, or enforcement. We may retain aggregated or de-identified information that no longer reasonably identifies you.

When an account-deletion request is processed, we delete or de-identify account data subject to legal and operational exceptions. Information may remain for a limited period in secure backups or provider systems before being overwritten. Support or feedback records may be retained in de-identified form when reasonably necessary to maintain product and security records. App marketplaces and RevenueCat may retain purchase records under their own policies and legal obligations.

8 Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, access controls, private storage for profile and feedback images, and database rules that limit access based on account and squad membership. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9 Your choices and privacy rights

• Profile. You can update your display name and photo in the app.

• Notifications. You can change categories in Locked In and change system permission in your device settings.

• Squad. You can leave your squad. You can report content or block another member from the activity experience.

• Account deletion. You can submit a deletion request from Profile in the app. Deleting Locked In does not automatically cancel an App Store or Google Play subscription; manage that subscription through the marketplace.

• Access, correction, deletion, and appeal. Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or an appeal of our response. Contact us to exercise an applicable right. We may verify your identity before completing a request.

We will not discriminate against you for exercising a privacy right. Because we do not sell personal information or use it for targeted advertising, there is no sale or targeted-advertising opt-out currently required for those activities.

10 Children

Locked In is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and delete it. Users between 13 and the age of legal majority may use Locked In only with permission from a parent or legal guardian where required by law.

11 International use

Locked In is operated from the United States. If you use the service from another country, information may be processed in the United States and other locations where our providers operate. Where required, we use legally recognized safeguards for cross-border transfers.

12 Changes to this Policy

We may update this Policy as Locked In changes. We will update the date above and provide additional notice when required by law. Your continued use after an update becomes effective is subject to the updated Policy.

13 Contact us

Questions, privacy requests, or complaints may be sent to hello@lockedinapp.dev. You may also contact us through https://lockedinapp.dev.

Operator: Jacob DeCoste