Privacy Policy

Introduction

Locket ("we," "our," or "us") is a private photo and video vault app for iPhone. This policy explains what the app and our servers collect, what they do with it, and the choices you have.

It also covers our website, getlocket.app.

What Stays on Your iPhone

These things are never sent to us:

• Your photos and videos, unencrypted. Files in your vault are encrypted on your iPhone with AES-256-GCM, each with its own key.
• Your PIN and vault keys. Your PIN is not stored. Your encrypted vault keys are kept in your iPhone's Keychain. If you turn on Face ID unlock, it uses a key protected by the Secure Enclave.
• Your albums' PINs. A locked album has its own PIN. Locket does not store the PIN. It stores a check value made from it, which lets the app tell whether a PIN is right. The check value sits in your albums library on your iPhone, next to the album names and which photos are in each album.
• Your Face ID data. Apple's system handles Face ID. Locket only learns whether it worked.
• Your Decoy Password vault. Locket does not upload your decoy vault or include it in Encrypted Backup. Its encrypted files may be included in your iPhone's own device backups.
• Break-in Report photos. See the Break-in Report section below.

Information We Collect

Your Locket Account

Locket signs you in without a name, email address, or password. It uses an anonymous sign-in from Firebase, which gives your install a random user ID. We store a record for that ID. It holds:

• When the record was created
• Whether you have Locket Pro, which plan, and when it ends
• Your push notification token, so we can send you notifications
• If you link a partner: the ID of the link and the nickname you chose for your partner
• How many photos and videos are in your vault, and when the app last counted them. The count only. Not the photos.
• Your answers during setup, such as whether you plan to use Locket alone or with a partner, and an invite code if you used one

Usage Analytics

The app uses Google Firebase Analytics to see how people use Locket. It sends these events:

• Which setup steps you finish or skip
• When you save your first photo or video, whether you used the camera or the photo picker, and how many items
• When an import finishes, and how many items it held
• When you unlock your vault, and whether you used Face ID or your PIN
• When you open the vault
• When you see or close the Locket Pro screen, start a trial, or buy Pro
• Which Pro feature you tapped when it was locked

It also sets four labels on your install: your setup choice, whether you are linked to a partner, whether you have Pro, and your App Store country.

These events never include your PIN, file names, photo or video IDs, or your partner's ID. Google's analytics tool also receives a device identifier and basic device information, as described in Google's Privacy Policy.

Purchases

Apple handles your payment. We never see your card. We use RevenueCat to manage subscriptions. RevenueCat receives your purchases and your Locket user ID. When your Pro status changes, RevenueCat tells our server, and our server stores whether Pro is on and when it ends.

No Advertising Networks

No data from the Locket app or our servers goes to any ad network. Locket shows no ads.

Earlier versions of Locket sent install, launch, sign-up, setup, partner-link, and purchase events to TikTok for ad measurement. Data TikTok already received follows TikTok's Privacy Policy.

Usage analytics run automatically. Locket currently provides no in-app control to turn them off.

Information We Don't Collect in the App

• Your name, email address, or phone number
• Your contacts
• Your photos and videos in a form we can read

We do not use iPhone Location Services. Google Analytics derives approximate location from your IP address and automatically measures sessions, screen views, and StoreKit purchases. Firebase Authentication and Cloud Functions also process IP addresses.

Locket asks for access to your camera, microphone, and photos through the standard iPhone prompts. You can change these in your iPhone's Settings.

Encrypted Backup (Locket Pro)

Backup is optional. It is off until you turn it on. It needs Locket Pro to start and to add new photos.

How It Works

• When you turn backup on, Locket makes a 26-character recovery key on your iPhone.
• Your vault files are already encrypted. Locket uploads them as they are. It also uploads a small sealed list of your items and a sealed file of your vault keys. These are sealed with a key made from your recovery key, on your iPhone, before they upload.
• Locket also uploads one sealed file for your albums library. See Your Albums in a Backup below.
• Your recovery key is never sent to us. Your iPhone makes separate values from it. One value proves to our server that you hold the key, and we store only a one-way hash of it. Another value seals your backup and never leaves your iPhone.
• We can't read your backup. We can't recover a lost key. Without the key, nobody can open the backup, including us.
• Locket offers to save the key to Apple Passwords. That copy is kept by Apple, not by us.
• Your Decoy Password vault and your Break-in Report photos are not part of the backup.
• A backup can hold up to 10 GB.

Your Albums in a Backup

When backup is on, Locket uploads your albums library as one file. It holds:

• Your album names, and when each album was made
• Each album's cover setting, and whether the album is locked
• For a locked album, when it was locked, when its PIN was set, and the check value made from that PIN
• A record for every photo and video in your vault: which albums it is in, or that it is in Recently deleted and when you deleted it
• A record for every item you deleted for good, with the time you deleted it and the time that deletion was queued to sync to your backup. Locket keeps these so a later sync or restore doesn't bring the item back

The file is encrypted on your iPhone with the same backup key that seals your vault keys, before it uploads. We can't read it. It is deleted when you turn off backup or delete your account. Syncing it does not need Locket Pro, so a change to an album still reaches your backup if your plan has ended. One file is kept per backup, and each sync replaces it. If you turn on backup after you have made albums, the library uploads with it. If you restore on a new iPhone, your albums come back with your photos.

What We Can See About a Backup

• A random backup ID
• The Locket user ID or IDs linked to the backup
• How many encrypted files it holds, how big each one is, and when each was uploaded
• If you had a partner link when you backed up: the ID of that link, plus a sealed copy of the link details that we can't read

If Your Pro Plan Ends

• New photos stop uploading. Backup shows as paused.
• Your existing backup stays. You can still restore from it, download your photos, and delete the backup.
• If you delete a photo on your iPhone, its copy in your backup is deleted the next time backup syncs.

Deleting a Backup

Use Turn off backup in Settings to delete your backup from our storage. Your photos on your iPhone stay. This removes the encrypted files, the sealed list and the sealed albums file. A tiny record that this backup ID was deleted stays, so the ID can't be used again. It holds no photos and no personal information. The old recovery key stops working. If you turn backup on again, you get a new key.

Deleting your Locket account also deletes your encrypted backup.

Partner Sharing

Partner sharing is optional. You must confirm you are 17 or older before you use it. You choose each photo or video you share. Nothing is shared by default.

How Sharing Works

• When you share an item, Locket makes a copy on your iPhone and encrypts it with a new random key. That key is protected by a secret that only your iPhone and your partner's iPhone can work out together.
• The encrypted copy is stored in Google Firebase. We can't open it.
• With each shared item we store the link and uploader IDs, whether it is a photo or a video, its size in pixels, when it was shared, the file paths, a local item ID, and the encrypted file keys.
• You can share up to 25 photos per partner link for free. After that, sharing needs Locket Pro.
• Your partner's app receives your account record, including your Pro status, subscription details, vault counts, setup answers, push token, and partner nickname. It uses your Pro status to unlock features.

Screenshot Alerts and Notifications

• If you take a screenshot while you view shared photos, Locket tells your partner. We store a small record of it: your ID, the item, and the time.
• Locket has no button to save or export a photo your partner shared with you.
• Notifications about your partner always show the same neutral message: "You have a new update."

Unlinking

Either partner can unlink at any time. Unlinking revokes server access to shared items. Our server then tries to delete every photo and video shared through that link, along with its screenshot records and pending notifications. If that cleanup fails, some files and records can be left behind.

Break-in Report (Locket Pro)

Break-in Report is optional and is off until you turn it on. If someone enters a wrong PIN three times in a row, Locket tries to take one photo with the front camera. It only does this if you turned the feature on and allowed camera access.

• The photo is encrypted with a dedicated Break-in Report key and stays on your iPhone.
• It is never uploaded, never part of a Locket backup, and never saved to your camera roll. Locket asks iOS to keep the folder out of your iPhone's own device backups. This is best effort and not guaranteed.
• Locket keeps the latest 20 photos and removes ones older than 30 days. Cleanup of expired photos happens when the app runs, so removal can be delayed.

Who Receives Data From Locket

These are the only companies that receive data from the Locket app or our servers:

• Google Firebase: sign-in, our database, file storage for backups and shared photos, our server functions, push notifications, and analytics. Privacy Policy
• RevenueCat: subscription and purchase management. Privacy Policy
• Apple: payments, push delivery, and Apple Passwords. Privacy Policy

Our Website

The pages at getlocket.app do not load analytics or ad tools. They do load fonts from Google Fonts.

If you gave us your email address in our earlier website quiz, it is stored with Cloudflare, and we were also notified of it through Telegram. We no longer run the quiz. To ask us to delete your email, write to privacy@getlocket.app.

Your Rights & Choices

Delete Your Account

You can delete your account in the app. Go to Settings and tap Delete Account. When you do:

• Your Locket user record and your sign-in are deleted from our servers
• Locket tries to unlink your partner first. A failed unlink can leave shared content accessible, so unlink from Settings before you delete your account if you can.
• The vault on your iPhone is erased
• Your encrypted backup is deleted
• This cannot be undone

Deleting your account does not cancel an App Store subscription. Cancel it in your Apple ID settings. Records already held by Apple, RevenueCat, and Google follow their own policies.

Account deletion does not erase our subscription-status record, our record of purchase events, or our counters for backup recovery attempts.

Export Your Photos

You can always export what you saved, for free, with or without Locket Pro. Use Export to Photos or Download everything in Settings.

Turn Off Backup or Unlink Your Partner

You can turn off backup or unlink your partner at any time. Both are described above.

Manage Notifications

You can turn push notifications on or off in your iPhone's settings.

Children's Privacy

Locket is not intended for people under 17. App Store age ratings may vary by country. Partner sharing asks you to confirm you are 17 or older. We do not knowingly collect personal information from children. If you believe a child has given us information, please contact us.

Where Your Data Is Processed

The companies listed above run their own servers. They may process your data in countries other than yours.

Changes to This Policy

We may update this policy. When we do, we will post the new version on this page and change the date at the top.

Contact Us

If you have questions about this policy or your data, write to us. A real person replies within 48 hours.

• Email: privacy@getlocket.app
• Website: getlocket.app