Privacy policy
The short version. The camera counts reps on your iPhone and never records. Apple keeps your app picks and usage on your device, so we never see which apps you use. We store your account and your progress (coins and minutes) so you don’t lose them. No ads, no selling data. You can delete everything from inside the app.
Who we are
Locked Out (“we”, “us”) is an iPhone app run by Saurabh Singh, an individual developer based in Noida, Uttar Pradesh, India. For anything about your data, email support@lockedoutapp.site. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), we are the “Data Fiduciary” for the personal data described here.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Account: name, email, the age you enter (to confirm you’re 18+), and a user ID from Apple or Google if you sign in with them | To create your account and sign you in | Our servers (Supabase) |
| Progress: coin balance and history, minutes earned by workouts, levels, bonuses | So your progress survives a new phone or a reinstall | Your iPhone and our servers |
| Setup answers: fitness level, commitment, daily limit | To set workout difficulty and your limit | Your iPhone |
| Usage analytics: anonymous events such as “workout finished”, app version, device type | To understand what works and fix problems | TelemetryDeck (anonymised) |
| Waitlist: your email | To tell you when the app launches | Our servers (Supabase) |
| Support messages and any diagnostics you choose to send | To help you | Our email inbox |
What we don’t collect
- Camera images or video. Exercise is checked by Apple’s on-device body-pose detection, frame by frame. Nothing is recorded, stored or uploaded.
- Which apps or websites you use. Apple’s Screen Time keeps your picks as private tokens on your device. We can’t read them, and your usage never leaves your iPhone. The app only works with minutes.
- Your contacts, location, photos or messages.
- Payment details. Subscriptions are handled entirely by Apple.
How we use it
Only to run Locked Out: sign you in, keep your progress, show a weekly league (your username and minutes earned only), send account emails (confirmation and password reset), answer support requests, and improve the app. We never sell your data or use it for advertising.
Consent
We process your data with your consent, which you give when you create an account, and for uses you’d reasonably expect from an app you signed up for. You can withdraw consent at any time by deleting your account; this doesn’t affect processing that already happened.
Who we share it with
Only the services that run the app for us, under their own privacy and security terms:
- Supabase: database and sign-in (servers in Mumbai, India).
- TelemetryDeck: privacy-focused analytics; user IDs are hashed before they’re sent.
- Apple: Sign in with Apple, Screen Time, in-app purchases, TestFlight.
- Google: Sign in with Google, if you choose it.
- Resend: sends account emails.
We may disclose data if the law requires it. Some of these services may process data outside India; we only use providers with appropriate safeguards.
How long we keep it
Account and progress data: until you delete your account. Waitlist emails: until launch, or until you ask us to remove yours. Analytics: kept in anonymised form. Support emails: up to 2 years.
Your rights
You can ask to access, correct or erase your personal data, and nominate someone to act for you. Delete your account any time in Profile → Account → Delete account; this removes your account and progress from our servers. For anything else, email support@lockedoutapp.site. We aim to reply within 7 days and resolve within 30.
Grievances. Our grievance contact is Saurabh Singh at support@lockedoutapp.site. If you’re not satisfied, you can complain to the Data Protection Board of India.
Children
Locked Out is only for adults aged 18 and over. We don’t knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account, contact us and we’ll delete it.
Security
Data is encrypted in transit, sign-in sessions are stored in your iPhone’s Keychain, and database access is restricted so each account can only reach its own data.
Changes
If we change this policy in a meaningful way, we’ll update the date above and tell you in the app.