Privacy Policy

1. Who we are

This Privacy Policy explains how Lokd Technologies Ltd. (“Typalock,” “Lokd,” “we,” “us,” or “our”) handles personal information. Lokd Technologies Ltd. is a corporation incorporated federally under the Canada Business Corporations Act, operating from Nova Scotia, Canada. You can reach us at support@lokdfocus.com, or by mail at PO Box 44146, Bedford, NS, B4A 3X5, Canada.

We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for users in Quebec, Quebec’s private-sector privacy law (commonly called Law 25). “Personal information” means information about an identifiable individual. If you are in a jurisdiction with additional rights, tell us and we will honour them where they apply.

You can reach our privacy contact any time at support@lokdfocus.com.

2. What this policy covers

This one policy covers both:

• the Typalock mobile app: your account, focus sessions, social features, NFC tags, and (if you use them) Go spaces; and
• our website at lokdfocus.com, an informational site with no accounts and no forms.

Most of this policy is about the app, because that is where nearly all personal information is handled. The website is covered in Section 9. Our Terms of Service govern your use of the Service itself.

3. The short version

• We collect what we need to run the app: your account details, your focus activity, the social connections you choose to make, and, only when you use a location feature, your location at that moment.
• We never sell your personal information, and we never rent, trade, or share it for anyone else’s marketing.
• There is no advertising in Typalock, no ad identifiers, no ad networks, and no cross-app or cross-site tracking.
• We do not use any third-party analytics SDK in the app or on the website, no Google Analytics or others. We run our own internal product analytics on our own database (see Section 10).
• Your iOS Screen Time selections never leave your device. See Section 5. This is important and it is unusually strict, on purpose.
• Location is foreground only: the app never tracks you in the background, and right now the location features are switched off, so no location data is being stored at all. See Section 6.
• Some of your profile is visible to other Typalock users by default. Read Section 7. We would rather you know than be surprised.
• You can delete your account from inside the app at any time. See Section 16.

4. What we collect & why

We collect the information we need to provide and improve Typalock, keep accounts secure, and support you.

• Account and profile information, such as your email address, name, username, profile details, photos, and optional interests or school information.
• Activity and social information, such as focus sessions, achievements, friends, groups, Spaces, messages, notification preferences, and reports you submit.
• Device and security information, such as your push-notification token, device timezone, IP address, and technical logs needed to secure and operate the Service.
• Tag and support information, such as tag activations and scans, and the information you include when you email us.

We generally keep this information until you delete it or close your account, unless we need to retain it for security, legal, or operational reasons. See Section 13 for details.

Information that stays on your device. Your iOS Screen Time selections and Child Mode settings are stored on your device and are not sent to our servers. See Section 5 and Section 14.

What we do not collect: your date of birth, contacts, calendar, health data, payment card details, biometrics, advertising identifiers, or information about which apps you use or for how long.

5. Screen Time & Family Controls

On iOS, your Screen Time selections stay on your device and are never sent to our servers. We use them only to apply the blocks you choose.

On Android, we store the apps you choose to block so your block list can follow you between devices. We do not collect information about which apps you use or for how long.

6. Location

Location features use your location only while you are using the app; we do not track your location in the background. These features are currently disabled, so we do not store location data. We will update this policy before enabling them. You can refuse or revoke location permission at any time in your device settings.

7. Who can see your information

Typalock has social features, so some information you share in the app may be visible to other users.

• Your profile is discoverable by other Typalock users by default. If you do not want your profile to be visible, email support@lokdfocus.com.
• Your focus activity may be visible to your friends and people in shared Spaces or groups.
• Leaderboard totals are visible to signed-in users.
• Messages, groups, Spaces, and reports may be visible to their recipients or other relevant users.

Please do not put anything in a profile section, group name, or nudge that you would not want another Typalock user to read. If you see something that breaches our rules, report it to support@lokdfocus.com. See our Terms of Service.

8. Push notifications

If you allow notifications, we use Google Firebase Cloud Messaging and, on iPhones, Apple Push Notification service to deliver them. These providers receive the notification token and content needed for delivery. You can turn notifications off in your device settings.

9. The website, cookies & tracking

Our website is an informational page. It has no accounts, no sign-up, no newsletter, and no contact forms: nothing on it collects personal information from you.

• No cookies are set by us, and there are no advertising or analytics cookies, pixels, or trackers of any kind.
• Your light/dark theme choice is stored only in your browser and is not used to identify or track you.
• Our host receives standard technical information, such as your IP address and browser type, to serve and secure the website. We do not use it to build profiles or track you across sites.
• Google Fonts receives your IP address when these pages load.

10. How we use it, and what we never do

We use personal information to operate and improve the Service: to run your account, run and time focus sessions, deliver the social features you use, show you Spaces and venues, send the notifications you asked for, activate the tags you bought, keep accounts secure, answer your emails, and meet our legal obligations.

We also run our own internal product analytics: for example, seeing which features are loved, and which ones don't get used.

What we never do. We never sell your personal information. We never rent, trade, or disclose it for anyone else’s advertising or marketing. There is no advertising in Typalock and no ad network, ad identifier, or ad SDK in the app. There is no third-party analytics or crash-reporting SDK in the app or on the website. We do not track you across other apps or websites, and the app does not ask for Apple’s tracking permission because it does not track you. We do not use your personal information to train machine-learning models.

We will disclose personal information outside the cases described in this policy only where we are legally required to, where we need to protect our rights, or where we reasonably believe someone’s safety is at risk. If our business is ever sold or merged, personal information may transfer as part of it, and this policy, or one at least as protective, will continue to apply.

11. Who else processes your data

We use a small number of trusted service providers to operate Typalock, including providers for hosting and data storage, authentication, notifications, and customer-support email. They process personal information only on our instructions and only as needed to provide these services.

Depending on the service, this may include account and profile information, files you choose to store, device notification tokens, notification content, support emails, and standard website technical data.

Our current providers include Supabase, Google Firebase Cloud Messaging, Apple Push Notification service, Netlify, Cloudflare, and Microsoft.

Apple and Google also receive information about you as the operators of their app stores, for example that you downloaded the app, under their own privacy policies, not ours.

12. Where your data is stored

Your account data is stored in our Supabase database, hosted in Canada (Central), in Montréal. Email you send to our support address is routed by Cloudflare and delivered to a mailbox hosted by Microsoft; that mail is not guaranteed to stay in Canada.

Account data and support email are hosted in Canada. Some other services, including push notifications and website delivery, may process limited personal information outside Canada.

13. How long we keep it

We keep personal information for as long as your account exists, then delete it when you delete your account, subject to the exceptions below.

• Shared Spaces or groups may be retained without identifying you if other members still use them.
• Security, audit, and activation records may be retained in de-identified form to investigate abuse and fraud.
• Messages you send may remain available to their recipients.
• Aggregated, non-identifiable venue data may be kept indefinitely.

14. Children, Child Mode & guardians

Typalock is not intended for children under 13. If we learn that an account belongs to someone under 13, we will delete it and its associated personal information.

Child Mode is designed for a parent or guardian to set up on the child’s device. It is stored on that device and requires a guardian passcode to change protected settings. We cannot recover a forgotten passcode.

When a guardian sets up an account for a child or enables Child Mode:

• the guardian is consenting on the child’s behalf to the collection and use of the child’s information as described in this policy, and is responsible for the child’s use of the Service;
• the guardian should review Section 7 before letting a child use the social features, because a child’s profile is discoverable by other Typalock users on the same terms as an adult’s; and
• the guardian can review, correct, restrict, or delete the child’s information at any time: from the app, or by emailing support@lokdfocus.com, and we will act on a verified guardian request.

Guardians should review Section 7 before enabling social features. We do not sell or use children’s information for advertising. For users in Québec under 14, consent must be given by a parent or guardian. Contact us if you believe a child has provided information without appropriate consent.

15. How we protect it

We use reasonable technical and organizational safeguards to protect personal information, including encrypted connections, secure password storage, and access controls. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected individuals and regulators as required by law.

16. Your rights & deleting your account

Subject to applicable law, you can ask us to:

• access the personal information we hold about you, and be told how we use it and who we share it with;
• correct anything inaccurate or incomplete;
• delete your account and personal information;
• get a copy of the information you gave us, in a portable format;
• withdraw your consent to a use of your information, for example by turning off the location permission or notifications, or by asking us to stop a particular use. Some features will stop working without the information they need; and
• complain: to us first, and if we do not resolve it, to the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information du Québec if you are in Quebec.

Deleting your account in the app. Open the app and go to Profile → Settings → Delete Account. You will be asked to confirm twice, then your account and its data are deleted from our servers, subject to the exceptions in Section 13. You do not need to email us or wait for us to approve it. If you prefer, email support@lokdfocus.com and we will do it for you.

How to make any other request. Email support@lokdfocus.com. We will respond within 30 days, and we may need to verify your identity first so that we do not hand your information to someone else. There is no charge for a reasonable request.

17. Changes to this policy

We will update this policy when our practices change, and we will change the “Last updated” date at the top. If we start collecting a new category of personal information, use it for a materially new purpose, or add a new service provider that changes where your data goes, we will update this policy before that change takes effect and, where the law requires it, ask for your consent. For a significant change we will also tell you in the app or by email rather than relying on you to notice.

18. Contact

For any privacy question, or to access, correct, or delete your information, email us at support@lokdfocus.com. Written enquiries can be sent to the person responsible for privacy at Typalock by email at support@lokdfocus.com, or by mail at PO Box 44146, Bedford, NS, B4A 3X5, Canada. We read every message and we will help.