Privacy Policy

Last updated: 2026-05-30

This is the plain-English version. The TL;DR: we collect the minimum we need to make the app work, we don't sell your data, and we delete your account fully when you ask us to.

What we collect

• Account info: email, username, display name, profile photo. You give us these directly.
• Content you post: photos, videos, captions, comments, DMs, story reels. Yours; you can delete any of it any time.
• Device tokens: Apple/Google push notification tokens. Used only to deliver pushes you've opted into. Never shared.
• Operational logs: auth events, error reports (via Sentry), aggregate usage metrics. No personal content in logs.
• Payment data: handled by Stripe — we never see your card number. We store only the transaction summary (amount, status, who paid whom).

What we don't collect

• We don't collect your contacts unless you explicitly tap "Find friends" and grant the permission.
• We don't track you across other apps or websites. No third-party ad SDKs.
• We don't sell, rent, or trade personal data to anyone, ever.

Who can see what you post

Default post visibility is followers-only. You choose public, close-friends, or subscribers-only per post. Stories last 24 hours unless you save them. DMs go only to the recipient(s) and (for disappearing messages) auto-delete client + server side after read.

Deleting your account

In the app: Settings → Data & privacy → Delete account. We mark your account for deletion and purge all your content + personal data within 30 days. The 30-day grace lets you reverse the decision; tap "Cancel deletion" any time before that and your account is restored.

If you want immediate hard deletion, email support@locked.social and we'll process within 7 days.

Data export

Settings → Data & privacy → Download my data. You'll get a ZIP of all your posts, comments, DMs, and account metadata within 48 hours via email.

Where data lives

US-based (Supabase / AWS us-east-1). If we add EU regions for GDPR data residency, this page will update.

Children

Locked is 17+. We don't knowingly collect data from under-13s (COPPA). If we find an underage account, we'll remove it.

Contact

Questions: support@locked.social