Privacy Policy

Last updated: August 11, 2026

LockdIn is built local-first. This policy describes exactly what the app does with your data, nothing more and nothing less. The LockdIn app is operated by KOROTKA MEDIA LLC ("we," "us").

The short version

• Your habit data stays on your device by default. No account is required to use the app.
• Your data is only stored in the cloud if you explicitly opt in to cloud backup by signing in.
• We collect usage analytics and crash reports to improve the app. Analytics are anonymous until you sign in; you can turn analytics off in Settings at any time.
• Progress photos never leave your device. We do not upload them.
• If you send us feedback, we receive that message and your app version. Nothing else rides along.
• You can delete your account and all backed-up data from inside the app, instantly.
• We do not sell your data, show ads, or share your data with third parties for marketing.

Data stored on your device

Everything you create in LockdIn is stored locally on your device: your habits, daily scores, streaks, workout logs, diet ratings, journal entries, body weight logs, progress photos, Bible reading progress, themes, and settings. If you never sign in, none of this content ever leaves your phone. Deleting the app deletes this data (progress photos you saved to your device's photo library remain in your photo library).

Optional cloud backup (opt-in)

LockdIn offers an optional backup and sync feature. It is off until you choose to sign in with Apple or Google from Settings. If you opt in, the following is stored on our servers, linked to your account:

• Your account identifier, and the name and email address provided by Apple or Google sign-in
• Your profile name, selected pillars, and app settings (including your theme)
• Your habits and their details, including the text of journal-type habits
• Your streaks and daily history, including any body weight you log
• Diet ratings, workout plans and sessions, and Bible reading progress

Progress photos are not uploaded. The photo itself stays on your device; the backup only stores a reference to where the photo lives on that device.

This data is used solely to back up your progress and sync it across your devices. Each user's data is isolated by database security rules (row-level security) so only you can access it, and it is encrypted in transit.

Deleting your account and data

• In the app: go to Settings and choose delete account. This permanently deletes your account and all backed-up data from our servers, including revoking your Apple sign-in connection. This is immediate and cannot be undone. The one exception is feedback you sent us, which is kept but unlinked from your account, as described under "How long we keep data" below.
• By email: you can also request deletion by contacting fischer@golockdin.com.
• Signing out stops all syncing; your local data remains on your device.

Analytics and crash reporting

To understand how the app is used and fix problems, LockdIn collects:

• Product analytics (via PostHog): usage events such as which screens are opened and which features are used (for example, "a habit was completed", not what the habit is). This never includes the content of your habits, journal entries, weight, or photos. If you are not signed in, these events are anonymous. If you sign in, events are associated with your account ID and which sign-in provider you used, so we can understand usage across your devices. We do not attach your name or email address to analytics events. You can opt out of analytics at any time in Settings, which stops all analytics collection.
• Crash reports (via Firebase Crashlytics, a Google service): technical information about crashes, such as device model, OS version, and the state of the app when it crashed, so we can fix bugs. If you are signed in, crash reports are tagged with your account ID (not your name or email).

Feedback you send us

If you use Send Feedback in Settings, we receive what you typed, the category you picked, your app version, and whether you are on iOS or Android. Your account ID is attached so we can reply or follow up. We do not attach your name or email address.

Sending feedback requires being signed in. If you write feedback while signed out, it stays on your device until you sign in, and it is never sent before then. Feedback is something you chose to send us, so it is not covered by the analytics opt-out. If analytics are off and you send feedback, we still receive that message.

Device permissions

LockdIn asks for these permissions only when you use the related feature, and works fine if you decline:

• Camera and photo library: only to take or choose progress photos. Photos stay on your device.
• Notifications: only to show habit reminders you set. Reminders are scheduled on your device, and no reminder data is sent to us.

Service providers

We use a small number of companies to run the app. They process data on our behalf and are not allowed to use it for their own purposes:

• Supabase: hosts our database and sign-in system (your opt-in backup and any feedback you send live here).
• PostHog: processes product analytics (US-hosted).
• Google Firebase Crashlytics: processes crash reports.
• RevenueCat: manages subscription status when you purchase Premium. It receives your purchase history and an app-specific user ID, never your payment card details.
• Apple and Google: handle sign-in (if you opt into backup) and all payments.

Our servers and providers are located in the United States. If you use LockdIn from outside the US, your backed-up data and analytics are transferred to and stored in the US.

How long we keep data

• Backup data: kept as long as your account exists; deleted immediately when you delete your account.
• Analytics and crash reports: kept per our providers' standard retention periods and used only in aggregate to improve the app.
• Feedback: kept so we can act on it. If you delete your account, your feedback messages are unlinked from you rather than erased, so the message stays but is no longer tied to your account. If you want a message removed entirely, email us and we will delete it.

Your rights

Depending on where you live (for example California's CCPA or Europe's GDPR), you may have legal rights to access, correct, delete, or export your personal data, and to object to certain processing. You can exercise all of these directly: your data is on your device, deletion is built into the app, and analytics has an off switch in Settings. For anything else, email us at fischer@golockdin.com and we will respond within 30 days. We do not sell or share personal information as those terms are defined under the CCPA, and we do not use your data for targeted advertising.

What we don't do

• We do not sell or rent your data.
• We do not show ads or share data with advertisers or data brokers.
• We do not use tracking cookies. This website is a static page that sets no cookies and runs no trackers.
• We do not read the content of your journal entries or habits for any purpose other than storing your opt-in backup.
• We do not upload your progress photos.

Payments

Premium subscriptions are processed entirely by Apple's App Store or Google Play. We never see or store your payment card details.

Security

Backed-up data is encrypted in transit and protected by per-user database security rules so one user can never read another user's data. No system is perfectly secure, but we limit what we collect in the first place. The less we hold, the less can be exposed.

Children

LockdIn is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

Changes to this policy

If we change how the app handles data, we will update this page and revise the "Last updated" date above. Material changes will be highlighted in the app or on this page.

Contact

KOROTKA MEDIA LLC. For questions, deletion requests, or privacy rights requests: fischer@golockdin.com