Privacy

Who we are

Locked is run by Karyotsav Private Limited, G.No. 217, Wanewadi, Tal. Baramati, Murum, Baramati, Pune 412306, Maharashtra, India. Write to us at support@thelocked.app.

Grievance Officer: Dipak Jadhav, Director, support@thelocked.app. We acknowledge every complaint within 24 hours and resolve it within 15 days.

What we collect

• Your email address, to send your sign-in code.
• Your username and the name you show, and that you confirmed you are 18 or older.
• Your bond: who you are locked with, the lock-in date, your together-since date, milestones, and your ring's tier and code.
• Social handles, only if you add them.
• The one-line notes you send your partner (one a day). Only the two of you see them; they go when your bond is deleted.
• Your phone's time-zone offset, so your morning reminder comes at 9 am where you are.
• A push token for your phone, if you allow notifications.
• Purchase records from the App Store or Google Play, through RevenueCat. We never see your card details.
• Reports about a page. We keep a scrambled code, changed daily, instead of who sent them.
• When you ask for a sign-in code on the website, a bot check by Cloudflare Turnstile. It reads your IP address and browser details; we do not keep them.
• Two cookies on the website: one keeps you signed in (it expires after 30 days without use), and one lasts 10 minutes after the bot check so you can ask for a new code. No advertising cookies.

What we don't collect

No phone number, contacts, location or photos. Ring cards you save stay on your phone. We never sell your data and show no ads.

What is public

Your couple page shows your names, your date, your ring and the social links you add. It never shows your email, a pause, a breakup or a reason.

Why we use it

To run the service you asked for, to keep it safe (limits on tries, reports), and to improve it. Our analytics (PostHog, EU) and crash reports (Sentry) hold no names, emails or usernames.

When you create an account you agree to this use. You can take that back at any time by deleting your account, or turn off notifications in your phone's settings. Under the GDPR, we rely on our contract with you, our legitimate interest in a safe service, and your consent for notifications.

Who helps us

Supabase (database), Cloudflare (website and bot check), RevenueCat, Apple and Google (purchases and sign-in), Firebase (notifications), Resend (sign-in emails), Sentry and PostHog. Each may only use your data to provide its service to us, with one exception: Cloudflare also uses the bot check's details (IP address and browser details) to improve its bot detection, as the party responsible for that use. See cloudflare.com/turnstile-privacy-policy.

Your data is stored outside India, in the EU where a provider offers it, with data-processing agreements and standard safeguards for transfers. We share data with authorities only when the law requires it.

How long we keep it

• When you delete your account, your personal data goes at once.
• When a bond ends, its data is deleted after 30 days, unless you keep your story.
• Purchase records are kept 7 years for accounting, without your name.
• Payment events from the stores are kept 90 days.
• Backups expire within 30 days.

Your rights

You can see and download your data, correct your name and username, and delete your account, all in the app. You can also ask us to correct or erase anything else, take back your consent, or name someone to act for you if you cannot. Write to support@thelocked.app.

If you are not happy with our answer, you can complain to the Data Protection Board of India. In the EU you also have the rights to object, restrict use and move your data, and you can complain to your data protection authority.

18 and older

Locked is only for people 18 and older. We do not knowingly keep data about anyone younger; if we learn of it, we delete it.

Security

Data is encrypted in transit and at rest. Invite links, Bond Codes and report senders are stored only as scrambled codes. If a breach affects your data, we tell you and the authorities as the law requires.

Changes

When this page changes, the date at the top changes. We tell you in the app about important changes.