Privacy Policy

Last updated: October 26, 2026

Lock In is a spending tracker. This policy explains what data the app keeps, where, who can see it and how to delete it. Lock In is run by Andrija Dmitrović, Serbia ("we"). Questions: [email protected].

In short: your spending stays on your phone. Our server only has your account, your friends, your shared goals and whether you have a trial or subscription. No ads, no tracking, and we do not sell your data.

1. What stays only on your phone

Everything you track for yourself is saved only on your phone and is never sent to us:

amounts, descriptions, categories, dates and income you log;
envelopes, limits, recurring entries, subscriptions you track, your monthly plan and report;
the settings you choose, including your age if you enter it (optional) and your reminder times.

Reminders and "Don’t waste money" nudges are scheduled on your phone; they need no server. If you use Backup, the app shows your data as text so you can copy it yourself; it is not uploaded anywhere. This data is removed with Settings > Reset everything or when you delete the app.

You can use these features without an account.

2. What is on our server (only if you sign in)

An account is needed for shared goals with friends and for your trial or subscription. Then our server keeps:

Account: your email address and the display name you choose. If you sign in with Apple, we get the email Apple gives us (it can be a private relay address) and your name the first time, which we use as your display name if you have none. If you sign in with Google, we get your email address, and our sign-in provider also stores the name and profile picture link Google provides. There are no passwords: you sign in with a 6-digit code sent to your email, with Apple or with Google.
Friends: friend requests you send (the email address you invite, and whether the request is waiting, accepted or declined) and your friendships.
Shared goals: the goals you are in (name, target amount, currency), who is in them and who added whom, and the payments each member logs into them (amount, optional note, time).
Trial and subscription: until when your trial or subscription is active and which product it is.
Notifications: if you turn on "Shared goal alerts", a push token for your phone, and a short list of what is waiting to be sent to you (deleted within a day after it is sent).
Security records: a record of actions such as sending friend requests, to enforce limits against spam; and technical logs kept by our hosting provider (for example IP address and time of a request) to keep the service secure.

3. Who can see what

Nobody else can see your email address. Other people only see your display name, and only if they are your friends, are in a shared goal with you, or received a friend request from you.
Everyone in a shared goal sees the goal, who is in it and every member’s payments into it. That is what a shared goal is for: only add people you want to share it with.
When you invite someone by email, we send them an email saying that your display name invited them to Lock In. Without a display name, it says "A friend".
If you turn on "Shared goal alerts", you get notifications such as "Marko added €50 to Summer trip" when someone else in your goal pays in, joins or leaves; members who turned them on get the same about you.

4. Payments

Lock In has a 7-day free trial, then a paid subscription or one-time purchase. Payment is handled only by Apple (App Store) or Google (Google Play); we never see your card or bank details. We use RevenueCat to check purchases: it receives your Lock In account ID and the purchase information from Apple or Google, and tells our server until when your access is active.

5. Services we use

These companies process data for us, only to run the parts of Lock In listed here:

Supabase: our database and sign-in (all the server data in section 2), hosted in Frankfurt, Germany (EU).
Resend: sends the sign-in codes and invite emails.
Apple and Google: Sign in with Apple and Google sign-in, if you use them; App Store and Google Play payments; delivering push notifications.
RevenueCat: checking purchases (section 4).
Expo: sends shared goal alerts to Apple and Google for delivery to your phone.
Cloudflare: hosts this website and runs Turnstile, a check that a person, not a bot, asks for a sign-in code. Turnstile looks at technical signals from your device for that check.

We do not use advertising or analytics services, we do not sell or rent your data, and we do not use it to track you across other apps or websites.

6. How long we keep it

We keep your server data while you have an account. When you leave a shared goal, your payments into it are deleted. When the last member leaves, the goal is deleted. Notification records are deleted within a day. Copies in our hosting provider’s backups and logs are deleted on their own schedule.

7. Deleting your account

In the app: Settings > Danger zone > Delete account. This deletes your account, email, display name, friend requests, friendships, push tokens, your trial and subscription record, your membership in every shared goal and your payments into them. Goals you were alone in are deleted; goals with other people stay theirs, without you. Deleting your account does not cancel an App Store or Google Play subscription: cancel it in your phone’s subscription settings. It does not delete the data on your phone either; use Settings > Reset everything for that. You can also ask us at [email protected].

8. Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, or object to how we use it. Most of it you can change or delete in the app yourself; for anything else write to [email protected]. You can also complain to your data protection authority.

9. Security

There are no passwords to steal. Your sign-in on the phone is stored encrypted, with the key in the phone’s secure storage (Keychain or Keystore). On the server, every table is protected so each person can only reach what this policy says they can.

10. Children

Lock In is not meant for children under 13, and we do not knowingly keep data about them. If you think a child has an account, write to us and we will delete it.

11. Changes

If we change what Lock In does with data, we will update this page and the date at the top.