Legal
Privacy Policy
Last updated: September 14, 2026
MindLock puts a short quiz in front of the apps you choose to lock. It is built so that the sensitive part — which apps you lock and how you use your phone — stays on your device. This page explains exactly what leaves it and why.
What stays on your device
- Which apps you lock. Apple’s Screen Time framework gives MindLock opaque tokens for the apps you pick. They are stored only on your device and are never uploaded. MindLock itself cannot read app names from them.
- Screen Time reports. The “Apps to block next” report is rendered by an Apple-sandboxed extension that cannot send data anywhere, including to us.
- Your quiz history, streaks and metrics. Stored locally so the Metrics screen works offline.
What reaches our servers
| Data | Why | Linked to you? |
|---|---|---|
| Random installation ID | Tells our server which device an unlock timer belongs to. Generated by the app, not tied to your Apple ID, reset by reinstalling. | No |
| Push notification tokens | Deliver the “quiz is ready” notification and keep the Live Activity timer updated. | No |
| Unlock session timing | Start and end time of a temporary unlock, so the timer can be updated and closed remotely. | No |
| Anonymous usage events | Counters such as quiz opened, answer correct or wrong, quiz passed, failed or closed early, which quiz themes are used, emergency unlocks. See below. | No |
| Purchase status | Handled by RevenueCat and Apple to unlock MindLock Pro and restore purchases. | Anonymous RevenueCat ID |
| Advertising identifier (IDFA) | Only if you allow tracking in the iOS prompt. Shared with our advertising partners to tell which ad campaign led to your install. See “Advertising measurement” below. | Device advertising ID, resettable in iOS Settings |
Usage analytics
To understand which quiz themes and questions work, the app sends small anonymous events to our backend, for example “quiz opened from the shield”, “question X answered correctly in 9 seconds”, “quiz closed before finishing”. Our server immediately folds them into daily totals and per-question counters and does not keep the individual events. Events carry the installation ID only to count active devices per day; they contain no names, no email, no locked app names and no Screen Time data. This data is used solely to improve the quiz content and the app and is not used for advertising or tracking across other apps.
Advertising measurement (App Tracking Transparency)
We run ads to reach people who want to scroll less. To know which ads work, we need to learn whether a device that installed MindLock had seen one of our ads first. On iOS this counts as “tracking”, so during onboarding iOS shows the standard prompt asking whether MindLock may track you.
- If you allow it, the app shares your device’s advertising identifier (IDFA) with Meta, whose ad network we advertise on, through the Facebook SDK built into the app. Meta uses it for one thing: attributing your install to one of our campaigns so we can see which ads bring people in. Alongside it the SDK reports a handful of anonymous milestones — the app was opened, onboarding finished, a lock created, a challenge passed, the paywall seen, a trial or purchase made — with no content attached. This is the only data shared for advertising purposes.
- What is never shared, whichever way you answer: which apps you lock, your Screen Time, quiz answers, anything you type into a quiz, or the anonymous usage counters above. Meta does not receive any of it.
- If you decline, no advertising identifier is shared and every feature works exactly the same. There is no reward for allowing and no penalty for refusing. Apple’s privacy-preserving SKAdNetwork may still tell Meta that an install happened, without identifying you or your device.
- Changing your mind. Settings → Privacy & Security → Tracking → MindLock. Turning it off stops any further sharing.
We do not use the advertising identifier for anything else: no ads inside the app, no personalised offers, no profiles.
Notifications
MindLock sends local and push notifications only for your quizzes and unlock timers. We never send marketing notifications. You can turn notifications off in iOS Settings at any time; without them, tapping “Start quiz” on a locked app cannot bring the quiz up, and you will need to open MindLock manually.
Third parties
- Apple — Screen Time (Family Controls), push notifications, in-app purchases. Governed by Apple’s privacy policy.
- Google Firebase — hosts our backend, database and push infrastructure. Firebase Analytics, Crashlytics and advertising features are not used.
- RevenueCat — processes purchases and subscription status under an anonymous identifier. See RevenueCat’s privacy policy.
- Meta (Facebook SDK) — measures our own ad campaigns. With your permission (see “Advertising measurement”) it receives the device advertising identifier and anonymous milestone events to attribute installs to campaigns, and nothing else. See Meta’s privacy policy.
We do not sell personal data and do not share data with data brokers. The only data shared with an advertising network is described under “Advertising measurement”, goes to Meta alone, and is used only to measure our own campaigns.
Retention and deletion
Everything on your device is removed when you delete the app. Server-side, the installation record and push tokens are tied to a random ID that has no link to you and become orphaned once the app is deleted. Aggregated usage counters cannot be traced back to a device. If you would still like us to delete the record for your installation ID, email us and we will do so.
Children
MindLock is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the date at the top will be updated. Material changes will be announced inside the app.
Contact
Questions about privacy: support@mindlockapp.com