Privacy Policy for Lock4Good

Last Updated: August 17, 2026

Introduction

Lock4Good ("we," "our," or "the app") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our iOS screen time management application.

Lock4Good is not-for-profit. All profits we make from In-App Purchases are donated to a charitable organization you select. We are not in the business of collecting or profiting from your personal data.

Controller

The controller responsible for data processing under the GDPR (Art. 4 No. 7) is Antonius Freiherr von Strachwitz, a sole proprietor ("Einzelunternehmen") established in Ampfing, Germany, who operates Lock4Good. Full contact details are under "Contact Us" below.

Our Privacy Commitment

Lock4Good is built to keep your data on your device. Everything the app is actually about — which apps you limit, the limits you set, how long you use those apps, and why you used an emergency unlock — never leaves your iPhone.

Three things do leave your device, and this policy explains each of them in full:

  1. An anonymous record of each In-App Purchase, so we can forward the corresponding profits to the right charity. Always on when you purchase.
  1. Crash reports, if you switch them on. Off by default.
  1. Anonymous product analytics, if you switch them on. Off by default.

None of the three ever includes your name, email, phone number, Apple ID, location, contacts, or which apps you limit.

Information Stored Locally on Your Device

Lock4Good stores the following on your device only:

  1. App Selection Data
  1. Usage Tracking Data
  1. App Preferences

None of this is transmitted to us, except as described under "Purchase Records" below.

Data Collected by Apple

When you make an In-App Purchase, Apple processes the payment according to Apple's Privacy Policy. We receive only:

We do not have access to your payment method, card details, Apple ID, or name.

Purchase Records (Always On)

Because our entire premise is that all profits are donated, we have to know how much was purchased and which charity to allocate it to. When you complete an In-App Purchase, the app sends one record to our database, hosted by Supabase in London, United Kingdom (AWS region eu-west-2). The United Kingdom is covered by a European Commission adequacy decision, so no additional transfer safeguards are required.

What the record contains:

What it does not contain: your name, email, Apple ID, payment details, IP-derived profile, which apps you limit, your limits, or your usage.

Why (legal basis): Article 6(1)(b) GDPR — this processing is necessary to perform the contract you enter into, since the not-for-profit commitment is a core term of that contract; and Article 6(1)(f) GDPR — our legitimate interest in accurately accounting for money we have committed to pass on to charity.

Note on the identifier: because the random device identifier is persistent, purchase records are pseudonymous personal data under the GDPR even though we cannot connect them to a person. We treat them as personal data and the rights below apply to them.

Security: the app can only insert rows; it cannot read, modify, or delete anything in that database, including its own records.

Crash Reporting (Off by Default)

Crash reporting is disabled unless you enable it. You are asked during onboarding and can change your mind at any time in Settings → Privacy.

What is collected when enabled:

What is not collected: your app selections, your limits, your usage, or your emergency unlock reasons.

Third party: Google Firebase Crashlytics (Privacy Policy). Data may be processed outside the EU/EEA by Google under its standard contractual clauses.

Legal basis: Article 6(1)(a) GDPR — your consent. Withdrawing consent in Settings stops future collection.

Anonymized Analytics (Off by Default)

Product analytics is disabled unless you enable it. The analytics SDK is not even initialised until you consent.

What is collected when enabled:

What is not collected: your app selections, your limits, your usage minutes, the reason you gave for an emergency unlock, or any direct identifier.

Third party: TelemetryDeck, an EU-based privacy-first analytics provider (Privacy Policy). TelemetryDeck derives a salted, non-reversible identifier and does not track individuals across apps.

Legal basis: Article 6(1)(a) GDPR — your consent. Withdrawing consent in Settings stops future collection.

Data We Do Not Collect

We do not collect, at any time, with or without your consent:

We do not sell personal data, share it with data brokers, or use it for advertising or profiling.

Screen Time API Usage

Lock4Good uses Apple's official Family Controls, DeviceActivity, and ManagedSettings frameworks to:

This monitoring happens entirely on your device, within Apple's frameworks. Apple deliberately does not expose the identities of the apps you select to us, and that data is never transmitted anywhere.

Third Parties We Use

PartyPurposeWhen
AppleScreen Time APIs, In-App Purchase processingAlways
Supabase (UK)Stores anonymous purchase records for charity accountingOn each purchase
Google Firebase CrashlyticsCrash reportingOnly if you enable it
TelemetryDeck (EU)Anonymous product analyticsOnly if you enable it

Data Retention and Deletion

On your device: data is retained until you delete it. Deleting the app removes all locally stored data permanently.

Purchase records: retained for as long as needed to account for and forward the corresponding donations, and thereafter for the periods required by German commercial and tax law (generally up to 10 years, § 147 AO). They cannot be traced back to you by us.

Crash reports: retained by Firebase according to Google's retention policy (typically 90 days).

Analytics signals: retained by TelemetryDeck according to its retention policy.

Your Rights (GDPR)

Because we operate from Germany, the GDPR applies to our processing. You have the right to:

An important practical limit: we hold no information that identifies you. Purchase records are keyed to a random device identifier we cannot link to a person (Art. 11 GDPR). To exercise rights over those records, you would need to supply the identifier itself, which the app does not display. If you contact us we will explain what we can and cannot do in your specific case.

Children's Privacy

Lock4Good is not directed at children and does not knowingly collect information from them. The app requires Screen Time permissions and is intended for users 17 and over.

Data Security

California Privacy Rights (CCPA)

We do not "sell" or "share" personal information as those terms are defined by the CCPA, and we do not use personal information for cross-context behavioural advertising. California residents may exercise their rights by contacting us at the address below, subject to the same practical limitation described under "Your Rights": we hold no data that identifies you.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date above, and material changes will be noted in App Store release notes.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights:

Email: lock4good@irivis.de

Response Time: We aim to respond within 5 business days, and in any case within the one-month period required by Art. 12(3) GDPR.

Postal address:

Antonius Freiherr von Strachwitz
Martin-Greif-Str. 1
84539 Ampfing
Germany


Summary: Your limits, app selections, usage, and emergency-unlock reasons stay on your device and are never transmitted. When you buy extra minutes, we send an anonymous record — amount, currency, product, selected charity, and a random device identifier — so we can forward the profits to the charity you picked. Crash reporting and analytics are off by default and only run if you turn them on in onboarding or Settings → Privacy. We collect no names, emails, accounts, or advertising identifiers, and we never sell data.