The short version
Locker has no accounts, no ads and no tracking or analytics. Your locker combination is stored on your device and is never transmitted, synced or sent to us or anyone else.
What Locker stores on your device
Locker saves the following locally on your phone, using the operating system's standard app storage. It stays on the device, and it is deleted when you delete the app.
- The lock name and combination you enter
- Your best practice times
- Your settings — dial size, number range, sound, haptics, theme and dial color
We cannot read any of it. None of it is uploaded.
What we collect
Nothing from the app itself. Locker contains no analytics SDK, no advertising SDK and no crash-reporting service, and the app never talks to a server of ours. The only information that leaves your device is the app-update check described under App updates below, the anonymous purchase check described under Purchases, and whatever you choose to send us by email.
App updates
Locker uses Shorebird, an update service, to deliver small fixes without a full store download. When the app starts it asks Shorebird's servers whether a fix is available. That request carries the app version, your device's platform and CPU type, and a random identifier that tells Shorebird a device checked in; it does not include your combination, your name, or anything you typed. Shorebird does not use this to track you or show ads. See Shorebird's privacy policy.
Purchases
If you buy Locker Pro, the purchase itself is processed by Apple's App Store or Google Play — we never see your name, card or billing address. We use RevenueCat, a purchase-management service, to check whether a purchase is active. RevenueCat receives a randomly generated anonymous identifier plus the store's purchase receipt. It is not linked to your name, email or your combination. RevenueCat keeps this purchase record for as long as your purchase needs to be honored; email us and we will ask for it to be deleted. See RevenueCat's privacy policy.
Support email
If you email us, we receive what you send: usually your email address, your device model and operating system version, and a store receipt if you are asking about a purchase. We use it only to answer you, we do not share it, and we delete support threads within 12 months of the last reply.
Other system features
- Rate the app: Locker occasionally asks how it is going and shows five stars to tap. Nothing is sent when you tap one. A high rating opens the standard App Store or Google Play review prompt, and the review you write there goes to the store, not to us. A lower rating offers you a feedback form; if you choose to send it, the star count and your message go to us by email as described above.
- Share: if you tap Share, your device's own share sheet opens. You choose where anything goes; Locker sends nothing on its own.
Children
Locker is suitable for children and is commonly used by students. The app itself collects no personal information, so there is nothing for it to collect from a child. We do not knowingly collect personal information from children through support email either; if a child has emailed us, a parent can ask us to delete it.
Your choices
You can delete your saved lock from inside the app at any time. Deleting the app removes everything Locker stored on the device. The only records that can exist on our side are the anonymous purchase record and any support email you sent. Email us to have either deleted.
Changes
If this policy changes, the updated version will be posted on this page with a new date above.
Contact
Questions about this policy: locker@cannappy.org.