Privacy Policy

Who we are

Locked.AI is a Health & Fitness app for iPhone. It shields the apps you choose to lock until you earn screen time through real-world action (moving, arriving at your gym, or snapping a workout photo), and it includes an honest AI coach.

This policy explains what data the app collects, where it is stored, who we share it with, and the choices you have. If you have a question, email us at support@lockedai.app or visit our Support page.

Locked.AI is operated by [LEGAL ENTITY], located in [JURISDICTION].

The short version

Locked.AI uses an account. You sign in with Apple or Google, and your data (your profile, stats, settings, and the places you save) is stored in your account on our cloud backend, protected so that only you can read it. To check a workout photo and to power the AI coach, some data is sent to our server and to OpenAI. Workout photos are used only to verify a workout and are then deleted. We don't run ad trackers, and we don't sell your data.

The sections below spell out exactly what we collect, where it goes, and how to delete it.

Your account

To use Locked.AI you sign in with Sign in with Apple or Google, through our authentication provider, Supabase. When you sign in we receive an account identifier (your email address and/or a provider user ID, and possibly your name from Apple or Google) that we use to create and secure your account and to keep your data tied to you.

What we store in your account

Your data is stored in your account on our hosted backend (Supabase), not only on your device. It is protected by per-user row-level security, meaning your records can only be read by your own account. We store:

• Your profile: such as your name and any profile details you add.
• Your streaks and usage stats: earned vs. spent screen time, unlock counts, and similar activity records.
• Your settings: including the apps you choose to shield and your unlock preferences.
• Saved locations: places you choose to save, such as your gym, including their GPS coordinates (see Location data).

Movement for the Move unlock is read from Apple Health to check whether you hit your goal; the resulting activity stats are saved to your account as described above.

Workout photo verification

When you prove a workout with a photo, the app captures the photo and sends it to our server and to a third-party AI vision provider (OpenAI) to judge whether it shows a real workout or activity.

The photo is used only for that verification check and is then discarded. We do not store your workout photos, and they are not used to train AI models.

The AI coach

When you message the coach, the app sends your message and context about your progress: your stats and goals — to our server and to OpenAI to generate a reply. Because you're signed in, this is associated with your account. We do not send your workout photos to the coach.

Location data

If you set up the gym unlock, you save a place, and the app stores that location (including its GPS coordinates) in your account so it can detect when you arrive and lift the shield. To detect arrival, iOS monitors for when you enter the area around a place you saved, using Apple's location services.

Saved location coordinates are sensitive information. We protect them with the same per-user security as the rest of your account, we use them only to run the gym-unlock feature, and we never sell them or share them for advertising.

Who we share data with

We rely on a small number of trusted service providers (sub-processors) to run the app. They process data on our behalf, only to provide the features below:

• Supabase: account sign-in (authentication) and database hosting for your account data.
• OpenAI: AI verification of your workout photo, and the AI coach's replies.
• Apple and Google: Sign in with Apple and Google sign-in.

Subscriptions and purchases are handled by Apple (StoreKit); we do not receive your payment card data. Our providers may process data on servers in the United States or other countries.

What we never do

We want to be plain about this:

• We do not sell your personal data.
• We do not run third-party advertising trackers or ad SDKs, and we do not build advertising profiles about you.
• We do not track you across other apps or websites.
• We do not keep your workout photos after the verification check, and we do not use them to train AI models.

Your data is associated with your account so the app can work for you. It is protected by per-user security and is used to provide Locked.AI's features, not for advertising or cross-app tracking.

Permissions and why

Locked.AI asks for a few iOS permissions. Each one maps to a specific feature, and you can grant or deny them in iOS Settings.

• Screen Time / Family Controls: to shield the apps you choose to lock.
• Notifications: to send honest, low-frequency nudges. No spam.
• Health: to read your movement so you can earn an unlock.
• Location: to detect when you arrive at a place you saved (a geofence), and to store that saved place in your account.
• Camera: to take a workout photo, which is sent for verification and then discarded.

Your data rights and controls

You have direct control over your data, from inside the app:

• Export My Data: get a copy of the data in your account.
• Delete My Data / Delete Account: delete your account and the data associated with it. Because your data is now stored in your account on our backend, deleting removes it from our servers as well as from the device.

Depending on where you live, you may also have rights to access, correct, or restrict how your data is used. To make a request, email support@lockedai.app.

Consumer health data

Locked.AI touches health-related data, such as movement read from Apple Health and the activity stats derived from it. Some laws, including Washington's My Health My Data Act, give specific protections to consumer health data. To be clear about how we treat it:

• We collect it only to provide the app's features: earning screen time and coaching you on your progress.
• It is stored in your account and protected by per-user security; you can delete it (see Your data rights and controls).
• We do not sell your consumer health data, and we do not share it for advertising.

Children

Locked.AI is not directed to children under 13. We aim for a minor-safe posture in how the app is designed.

Standard app and purchase data

A couple of standard, app-level data flows apply:

• Purchases. Subscriptions and purchases are handled by Apple through StoreKit. Locked.AI does not receive your payment card data. See our Terms for subscription details.
• Crash and diagnostic data. Basic crash and diagnostic information may be processed to help us keep the app working, as applicable.

Changes to this policy

If we change this policy, we will update the "Last updated" date at the top of this page. If a change is significant, we'll do our best to make it clear. Your continued use of the app after an update means the updated policy applies.

Questions about this policy? Email support@lockedai.app or visit our Support page.