Privacy Policy

Effective date: July 16, 2026 · Last updated: July 16, 2026

There are no accounts. We never learn your name or email. Flashcards and Screen Time data never leave your device. We do not sell personal information, show ads, or track you across other apps or websites.

This Privacy Policy explains how LearnLocker ("LearnLocker", "we", "us", or "our") handles information when you use the LearnLocker iOS application and related services (the "Service"). LearnLocker is operated by the publisher of the LearnLocker app on the Apple App Store, reachable at support@learnlocker.app. By using the Service, you agree to this Policy and our Terms of Service.

1. Who this policy covers

This Policy applies to the LearnLocker iOS app and the learnlocker.app website. It does not cover third-party services we do not control (for example Apple's App Store or OpenAI), except to describe what we send them and why.

2. Information we collect

We collect only what we need to run the Service:

• Anonymous device identifier. On first launch the app generates a random UUID. It is not derived from your device hardware, Apple ID, advertising identifier, or any personal detail. It is the only identity our servers associate with your use of Quiz Mode, progress sync, and subscription status. We do not collect your name, email address, phone number, contacts, precise location, or photos (except notes you choose to upload).
• Study materials you upload (Quiz Mode / Pro only). If you use AI quizzes, files you upload (plain text, PDFs, or photos of notes), plus text we extract from them, are sent to our servers so we can store them and generate quiz questions.
• Quiz and progress data. Generated quiz questions, your answers and scores, pass thresholds, calendar days on which you unlocked apps, and your current streak.
• Subscription and entitlement data. Your subscription tier (free or Pro), App Store product identifiers, and Apple transaction identifiers (and related signed transaction data) used to verify purchases. Apple processes payment. We never receive your payment card number, billing address, or Apple ID password.
• Technical and usage signals needed to operate the Service. For example API request timing used to enforce daily upload and generation limits, and standard server logs (such as IP address and user-agent) retained briefly for security, debugging, and abuse prevention.

3. Information that never leaves your device

• Flashcards and decks. Anki (.apkg) and spreadsheet (.xlsx) imports are parsed on your device and stored only on your device (including spaced-repetition state). Flashcard review does not use our servers.
• Screen Time / Family Controls data. Which apps you choose to lock, and anything about your app usage, is handled by Apple's Family Controls and Screen Time frameworks on your device. Those frameworks are designed so apps like ours cannot read or transmit that information, and we do not.
• Local settings. Daily goals, unlock-gate mode, pass percentages, and similar preferences are stored on your device.

4. How we use information

• Provide the Service: store uploads, extract text, generate and score quizzes, and record daily unlocks and streaks.
• Verify subscriptions and gate access to paid features.
• Enforce fair-use limits, debug issues, and prevent abuse.
• Respond to support and data requests you send us (which requires you to include your Device ID).

We do not use your information for advertising, we do not sell or rent it, and we do not build marketing profiles or track you across third-party apps or websites. We do not use uploaded study materials to train our own machine-learning models.

5. Legal bases (EEA/UK)

If you are in the European Economic Area or United Kingdom, we process personal data as needed to perform the contract to provide the Service you request, and where appropriate on the basis of our legitimate interests in securing and improving the Service (balanced against your rights). Where required, we rely on your consent (for example when you choose to upload materials to Quiz Mode).

6. Service providers

We share data only with providers needed to operate LearnLocker, and only for the purposes above:

• Cloudflare (R2 object storage): stores raw files you upload for Quiz Mode.
• OpenAI (API): receives text extracted from your uploads, or images of notes for OCR, to generate quiz questions. Under OpenAI's API terms, customer API content is not used to train OpenAI's models.
• Prisma Data Platform / Postgres (managed database): stores server-side records described in this Policy.
• Apple: App Store payments, subscription management, and Screen Time / Family Controls frameworks on device.
• Hosting / infrastructure for our API and this website (for example cloud hosts that process traffic to deliver the Service).

Providers act on our instructions for these purposes. They may have their own privacy policies governing their services.

7. Data retention and deletion

• Uploaded materials, extracted text, and quiz questions are kept so you can regenerate quizzes. Replacing your notes in the app replaces questions generated from the prior upload for that source flow.
• Progress records (unlock days, streaks) are kept while you use the Service.
• Subscription verification records are kept as needed to honor entitlements and prevent fraud.
• Deleting the app removes on-device data (flashcards, settings, the local copy of your device identifier). Server-side data tied to that identifier remains until you ask us to delete it.
• To delete server-side data: email support@learnlocker.app and include your Device ID (Settings → About in the app). We will delete data associated with that identifier within 30 days, except information we must retain for legal, security, or accounting reasons (if any).

8. Your privacy rights

Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Because we hold no name or email on file, we identify your records by Device ID. Include it in any request.

We honor these rights for everyone who contacts us with a valid Device ID, not only where legally required, and we do not discriminate against you for exercising them. We do not send marketing emails; we have no email address for you unless you write to us first.

California (CCPA/CPRA). We do not "sell" or "share" personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that require a right-to-limit notice. Categories we may collect are listed in Section 2. To exercise rights, email support with your Device ID.

9. Children

LearnLocker is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has used Quiz Mode in a way that sent us information, contact us and we will delete it. If you are under 18, use the Service only with a parent or guardian's permission (see our Terms).

10. Security

We use TLS encryption in transit and restrict access to production systems. No method of transmission or storage is perfectly secure. Do not upload materials containing sensitive personal information you would not want processed by our providers (for example medical records, government IDs, or financial statements). The app is designed for study notes.

11. International transfers

Our servers and several providers process data in the United States. If you use Quiz Mode or sync progress from another country, your uploaded materials and related records may be processed in the United States.

12. Do Not Track

The Service does not respond to browser Do Not Track signals because we do not engage in cross-site tracking advertising. This website is static informational content and does not use advertising cookies.

13. Changes to this Policy

If we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice in the app before changes take effect. Continued use of the Service after the effective date of changes constitutes acceptance of the updated Policy, except where applicable law requires a different process.

14. Contact

Privacy questions or requests: support@learnlocker.app. Include your Device ID for any access or deletion request.