Privacy Notice

Who controls your data. AR Studios is the data controller for personal data processed through LockIn. You can contact us through the support option in the app.

Data stored on your device. When you use LockIn without an account, tasks, focus sessions, XP, levels, streaks, plan status, and preferences may be saved in your browser. Clearing browser data removes this local information.

Data we collect. If you create an account, we process your name or display name, username, email address, account identifiers and login information; profile details; tasks, study sessions, XP, streaks, leaderboard and challenge activity; subscription status; support messages; and technical data such as usage events, device or browser information, and IP address.

Why we use it. We process account, study, and subscription data to perform our contract by providing, syncing, and securing LockIn. We use technical and usage data for our legitimate interests in preventing fraud, troubleshooting, measuring performance, and improving the product. We process support messages to answer requests, and use consent where required for optional analytics, advertising, or marketing. We also process information when necessary to meet legal obligations.

Who receives data. We share only what is necessary with hosting, database, authentication, analytics, advertising, and support providers; professional legal and accounting advisers; and public authorities when legally required. Paddle is our Merchant of Record and receives data needed for product sales, subscription management, payments, tax compliance, invoicing, and fraud prevention. Paddle handles payment details under its own privacy notice.

Public features. Your username, display name, avatar, XP, streak, study totals, and recent activity may appear on public profiles and leaderboards. Do not add sensitive information to public profile fields.

Cookies and similar storage. We use essential browser storage to keep you signed in, remember settings, preserve local progress, and operate checkout. If optional analytics, advertising, or marketing cookies are used, you can manage them through the consent controls offered on the site and through your browser settings.

Retention. We retain account and study data while your account is active and for a reasonable period afterward where needed for recovery, disputes, fraud prevention, or legal obligations. Support and transaction records may be retained for legally required periods. Data is deleted or anonymised when no longer needed.

International transfers and security. Some providers may process data outside your country. Where UK or EEA data leaves those regions, we rely on adequacy decisions, Standard Contractual Clauses, or another lawful safeguard. We use appropriate technical and organisational measures, including access controls and encryption in transit, but no system is completely secure.

Your rights. Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier processing and complain to your local data protection authority. UK and EEA requests are normally answered within one month. Use the support option in the app to make a request.