Lockpup – Privacy Policy
Last updated: October 20, 2026
Lockpup (formerly AppLock; "we", "the app") helps you lock apps, hide photos and files, and catch people who try to get into your phone. Privacy is the product, so we keep as little data as possible, and nearly everything stays on your device.
What stays on your device and is never sent to us
- Your passcode and decoy passcode. Stored only as a salted hash in the iOS Keychain on this device.
- Apps and categories you lock. Apple's Screen Time framework gives Lockpup anonymous tokens instead of app names. They stay on your device, and we can't see which apps you use or lock.
- Screen Time usage statistics. Shown with Apple's on-device report. Lockpup never receives the data.
- Photos, videos and files in your vault. Stored in the app's private container with iOS Data Protection and excluded from iCloud backup. They are never uploaded.
- Intruder photos. Taken with the front camera only when Intruder Mode is on and someone enters a wrong passcode. They stay on your device and appear only in the app's Intrusion Record.
- Protection counts. Daily numbers of how often someone tried to open a locked app, it was unlocked, or a wrong passcode was typed, shown in the Privacy tab. They contain no app names, stay on your device and are kept for 35 days.
- Private browser history and cookies. Not stored, and wiped when the app locks.
- Passcodes typed into the unlock notification (Quick Unlock). Checked on your device against the stored hash and then discarded. Never saved in readable form and never sent anywhere.
- Wrong codes in the Intrusion Record. If Intruder Mode is on, the wrong codes someone tried are saved with the intrusion event so you can see them. They stay on your device and you can delete them anytime.
What we collect
| Data | Why | Linked to you? |
|---|---|---|
| A random device identifier (Apple's identifierForVendor), device model, iOS version, app version, country from your device's region setting | To count active installs and spot problems with specific devices or versions | No |
| App usage events (for example "paywall shown", "onboarding completed", "browser page opened", "quick unlock result") via Firebase Analytics. Events never include website addresses, search text, passcodes, app names or vault content | To understand which features help people and improve the app | No |
| Crash reports via Firebase Crashlytics | To find and fix crashes | No |
| Purchase and subscription status via RevenueCat | To unlock Pro features and restore purchases | No |
| Feedback you choose to send from Settings (your message, device model, iOS version, language) | To read and answer feedback | No |
We do not collect your name, email, contacts, precise location, photos, or which apps you use. We do not sell data and do not use it for advertising. Lockpup does not track you across other companies' apps or websites.
Service providers
- Google Firebase (Analytics, Crashlytics, Firestore, Remote Config). Privacy
- RevenueCat (subscription management). Privacy
- Apple (App Store payments, Screen Time framework). Privacy
Permissions
- Screen Time. Required to lock apps. Approved by you through Apple's system prompt.
- Notifications. Used to send the unlock notification when you open a locked app, where you can tap to open Lockpup or type your passcode (Quick Unlock).
- Face ID / Touch ID. Optional, for unlocking. Biometric data never leaves Apple's Secure Enclave.
- Photos. Used to move items into and out of your vault.
- Camera. Used only for Intruder Mode, if you turn it on.
You can turn any permission off in iOS Settings at any time.
Keeping and deleting data
Deleting Lockpup removes everything stored on your device, including the vault. Export anything you want to keep before deleting. Analytics and crash data are kept by Firebase under its standard retention (up to 14 months for Analytics, 90 days for Crashlytics). To ask us to delete the device record linked to your installation, contact us with the app version and approximate install date.
Children
Lockpup is not directed at children under 13 and does not knowingly collect their personal data.
Changes
If this policy changes, we'll update the date above and, for important changes, tell you in the app.
Contact
Questions or requests: ibrohim625m@gmail.com