Privacy Policy

Who we are

Unlockr is an iPhone app that helps you use fewer distracting apps by asking for a short breathing or movement challenge before those apps open. This policy explains what the app collects, why, and what control you have. It applies to the Unlockr iOS app and to unlockr.space.

If you have a question about anything below, write to cvtrandinhtin@gmail.com.

What stays on your iPhone and is never sent anywhere

These are the most sensitive parts of how Unlockr works, so they are handled entirely on device.

Camera frames

Squats, push-ups, and planks are counted by Apple's Vision framework running on your iPhone. Frames are processed in memory to detect body position, are never written to storage, and are never uploaded. Unlockr has no video recording feature.

Motion and step data

Step counts for walking challenges come from the device motion sensor and are read only while a challenge is running. Raw samples stay on device.

Which apps you protect

You choose apps through Apple's own picker. Apple returns opaque tokens that cannot be turned back into app names, even by us. These tokens are stored in a private container on your device and are never synced to our servers.

Your earned time balance

The ledger that tracks minutes earned and used per app lives in device storage shared between the app and its extensions.

What we store on our servers

If you sign in, the following is stored in our database so your progress survives reinstalling the app or moving to a new iPhone.

Account

• A user identifier created when you sign in
• The email address Sign in with Apple provides. If you choose Apple's private relay option, we only ever see the relay address, not your real one.
• A display name, if you enter one

Setup answers

• Your first name, if you give one
• Your age
• Your current and target daily screen time
• The goals you selected and how you heard about Unlockr

Activity

• Completed challenges: the type, the target, what you completed, how it was verified, and when
• Minutes earned and minutes used
• Daily totals: challenges completed, minutes earned, movement time, and how many apps were protected
• Your protection settings: daily limit, which challenge is required, and the reward size. The app identities themselves are excluded.

Subscription

• Whether your subscription is active, which plan, when it renews or expires, and whether you are in a trial
• Purchase events used to keep that status accurate. We never receive your payment card, billing address, or Apple ID password.

Why we store it

• To run the service. Your balance, streak, and statistics need somewhere to live so they are not lost when you change device.
• To personalise your plan. Your setup answers shape the daily goal and difficulty the app suggests.
• To manage your subscription. We need to know whether you have access.
• To keep the app working. Error records help us find and fix faults.

Where the law requires a legal basis, ours is performance of the contract you enter when you use Unlockr, and our legitimate interest in keeping the service reliable and secure.

Who else is involved

We use a small number of providers. Each one only receives what it needs to do its job.

Apple

Provides Sign in with Apple, processes all payments through the App Store, and supplies the Screen Time technology that enforces the lock. Apple's own privacy policy governs what Apple collects.

Supabase

Hosts our database and authentication. Your account and activity records described above are stored there.

RevenueCat

Manages subscription status across devices. It receives your user identifier and purchase records from Apple.

We do not use advertising networks, attribution SDKs, or third party analytics. We do not sell or share personal information for advertising purposes under the California Consumer Privacy Act, and Unlockr does not engage in tracking as Apple defines it.

How long we keep it

Account and activity records are kept while your account exists. When you delete your account, they are removed from our database. Backups are rotated on a rolling basis and any copies still present are overwritten within 30 days.

Deleting your account

You can delete your account from inside the app at any time. Open Profile, scroll to Account, then choose Delete Account. This removes your account and the records tied to it. Deletion is immediate and cannot be undone.

Deleting your account does not cancel an active subscription, because subscriptions are managed by Apple. To cancel, open Settings on your iPhone, tap your name, then Subscriptions.

If you cannot reach the app for any reason, write to cvtrandinhtin@gmail.com from the address on your account and we will delete it for you.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, or complain to your local data protection authority. To exercise any of these, write to cvtrandinhtin@gmail.com. We will respond within 30 days.

Children

Unlockr is designed for adults managing their own screen time and asks that you be 18 or older during setup. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.

Where data is processed

Our database is hosted in Singapore. Our subscription provider operates in the United States. If you are in the European Economic Area or the United Kingdom, transfers outside your region rely on the European Commission's Standard Contractual Clauses.

Security

Traffic between the app and our servers is encrypted in transit. Database access is restricted per user by row level security, so one account cannot read another's records. Sign in credentials are held in the iOS Keychain. No system is perfect, and we will notify affected users without undue delay if a breach occurs.

Changes

If this policy changes in a way that affects you, we will update the date at the top and, for significant changes, notify you in the app before the change takes effect.