Privacy Policy
LogLock helps you practice by locking distracting apps until you log a practice session. This policy explains what data the app and this website process, why, where it is stored, and how you can delete it.
1. Who is responsible
Sidibe Software und Medien GbR, Bei den Nussbäumen 8, 65614 Beselich, Germany ("we", "us"). Contact for privacy matters: privacy@log-lock.com.
2. Summary
- You can use the LogLock app without an account. Everything except crash reports and, if you agree, usage analytics then stays on your device.
- If you create an account, your practice journal, settings and diagnostic events are stored in our cloud database so they survive reinstalls and sync between your devices.
- App blocking runs entirely on your device. We never see which apps you open or block.
- Audio recordings you make during a session never leave your device.
- Usage analytics in the app are off until you agree to them, and you can switch them off again in Settings → Privacy.
- We do not sell data, do not show ads, and do not track you across other apps or websites.
- You can delete your account and all server data from inside the app at any time.
- On this website, analytics cookies are only set if you accept them.
3. The LogLock app: data we process and why
| Data | Purpose | Legal basis (GDPR) | Where it is stored |
|---|---|---|---|
| Email address and password (hashed) | Creating and signing in to your account | Art. 6(1)(b) – contract | Supabase (see section 5) |
| Practice entries: date, duration, practice type, notes, tags, intentions, reflection, mood sliders, plan segments | Your practice journal, streaks, insights and skill tree | Art. 6(1)(b) – contract | On your device; additionally Supabase when signed in |
| App settings (locking mode, unlock duration, practice goal, theme) | Running the app the way you configured it | Art. 6(1)(b) – contract | On your device; additionally Supabase when signed in |
| Audio recordings | Optional clips recorded during a timed session, playback in your journal | Art. 6(1)(a) – consent (you start each recording) | Only on your device. Recordings are never uploaded. Only the duration and a small waveform preview are stored with the entry. |
| Selected apps to block | Locking those apps until you practice | Art. 6(1)(b) – contract | Only on your device (iOS: as opaque Screen Time tokens; Android: package names). Never transmitted to us. |
| Subscription status and purchase identifier (your account ID when signed in) | Unlocking LogLock Pro features, restoring purchases | Art. 6(1)(b) – contract | RevenueCat and Apple/Google (see section 5) |
| Crash and error reports: device model, OS version, app version, IP address, an error-triggered masked screen replay, the user ID and email of the signed-in account | Finding and fixing bugs | Art. 6(1)(f) – legitimate interest in a working app | Sentry (see section 5) |
| App event log: technical events (e.g. "apps locked", "unlock window expired", permission changes) and in-app interactions (e.g. onboarding steps, tips shown, prompts answered) | Troubleshooting, support requests and improving the app | Art. 6(1)(f) – legitimate interest | On your device; additionally Supabase when signed in |
| Usage analytics (only if you agree): screens viewed, in-app events, app opens and closes, app version and update ID, device model, OS version, language, a random analytics ID and, when signed in, your account ID (never your email). Warning and error messages and the app event log, with email addresses and access tokens removed. Which variant of a feature you see when we test improvements. | Understanding how the app is used, testing improvements (A/B tests), finding problems | Art. 6(1)(a) GDPR and § 25(1) TDDDG – consent, revocable at any time in Settings → Privacy | PostHog (see section 5) |
4. App blocking and system permissions
iOS – Screen Time (Family Controls)
LogLock uses Apple's Screen Time API to shield the apps you select on your own device. Authorization is granted by you, for your device only. The selected apps are represented by opaque tokens that Apple provides; LogLock cannot read app names or usage from them, and they are stored only on your device. LogLock does not monitor other people or devices.
Android – Accessibility Service, overlay and foreground service
On Android, LogLock uses an Accessibility Service to detect when a blocked app comes to the foreground so it can show the block screen. The service only receives window-change events; it does not read screen content, text, passwords or messages (canRetrieveWindowContent is disabled). The "display over other apps" permission shows the block screen, and a foreground service keeps blocking active. Which apps you open is processed on the device only and never sent to us.
Microphone
Only used while you record an audio clip during a session. Requested the first time you start a recording.
Notifications
Local notifications only (for example when your unlock window ends). We do not send push notifications.
5. Service providers for the app
| Provider | What for | Location |
|---|---|---|
| Supabase Inc. | Account authentication and cloud database for your journal, settings and event log | EU (Ireland, AWS eu-west-1) |
| Functional Software, Inc. (Sentry) | Crash and error reporting | EU data region (Frankfurt) |
| PostHog Inc. | Usage analytics, feature tests and app logs, only with your consent | EU Cloud (Frankfurt, Germany); EU Standard Contractual Clauses for support access from the USA |
| RevenueCat, Inc. | Subscription management and receipt validation | USA (EU Standard Contractual Clauses) |
| Apple Inc. / Google LLC | Payment processing for LogLock Pro through the App Store / Google Play | Per their terms |
6. This website (log-lock.com)
Hosting
This website is hosted by Vercel Inc., USA. When you visit it, Vercel processes your IP address, the requested page, date and time, referrer and browser information in server logs to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.
Cookieless statistics (always on)
We use Vercel Web Analytics and Vercel Speed Insights to count page views and measure loading performance. Both work without cookies and without identifying you across sites; visitors are counted using an anonymised hash that changes daily (Art. 6(1)(f) GDPR).
Analytics cookies (only with your consent)
If you click "Accept all" in the cookie banner, we additionally load the following services to understand how visitors use the site (Art. 6(1)(a) GDPR, § 25(1) TDDDG):
- PostHog (PostHog Inc., USA): page views and interactions.
- Google Analytics 4 (Google Ireland Ltd. / Google LLC): page views, with IP anonymisation.
- Microsoft Clarity (Microsoft Corporation): heatmaps and anonymised session recordings.
These services set cookies and may transfer data to the USA (EU-U.S. Data Privacy Framework). If you choose "Essential only", none of them are loaded.
Your cookie choice
We store your choice in a cookie named loglock_consent for one year (§ 25(2) TDDDG). You can withdraw or change your consent at any time:
7. Retention
- Account and journal data: until you delete your account, or until we delete inactive accounts after 24 months of inactivity with prior notice by email.
- Crash reports in Sentry: 90 days.
- Usage analytics and app logs in PostHog: at most 12 months. If you switch analytics off, the app stops sending data and resets its analytics ID; to have data already collected deleted, email privacy@log-lock.com.
- Subscription records: as long as required by tax law (in Germany up to 10 years) in RevenueCat's and the store's systems.
- Data on your device: until you delete your account in the app or uninstall the app.
8. Deleting your data
In the app, open Settings → Account → Delete Account. This permanently deletes your account, your journal, your settings and event log from our servers and signs you out. You can also email privacy@log-lock.com and we will delete your account within 30 days. Deleting your account does not cancel a subscription; manage it in your App Store or Google Play account.
9. Your rights
Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time with effect for the future. You can exercise these rights by email to privacy@log-lock.com. You also have the right to lodge a complaint with a supervisory authority, for example the data protection authority of your German federal state.
10. Children
LogLock is not directed at children under 16, and we do not knowingly collect data from them. LogLock is a self-control tool; it is not a parental-control product.
11. Tracking and advertising
The LogLock app contains no advertising and no advertising SDKs. We do not use the advertising identifier (IDFA / GAID) and do not track you across apps or websites.
12. Changes
We will update this policy when our data processing changes. The current version is always available at log-lock.com/privacy; material changes are announced in the app.