Privacy Policy

This Privacy Policy describes how LockCodes ("we", "our", or "us") collects, uses, and shares information about you when you use our mobile application ("App") and website. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

LockCodes
Email: contact@lockcodes.app

For any privacy-related inquiries, please contact us at the email address above.

2. Information We Collect

2.1 Information You Provide

When you use our App or website, you may provide us with:

• Email address (when subscribing to notifications)
• Lock group names and descriptions
• Lock names and configuration (code length)
• Guest names and notes associated with code generations
• Profile information if you choose to set up a profile

2.2 Information Collected Automatically

We may automatically collect certain information when you use the App or website:

• Device information (device type, operating system version)
• IP address (for website visitors and notification subscribers)
• Browser type and language preferences
• App usage analytics (features used, error reports)
• Crash reports and performance data

3. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with the App's functionality, including data synchronization and sharing features.
• Consent: When you subscribe to notifications or opt into analytics, you provide explicit consent for us to process your data for these purposes.
• Legitimate Interests: We process certain data for our legitimate interests, such as improving the App, ensuring security, and preventing fraud, provided these interests do not override your rights.
• Legal Obligation: We may process data when required to comply with legal obligations.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Sync your data across your devices via iCloud
• Enable sharing features with other users you choose to share with
• Send you notifications about app releases (if you subscribed)
• Analyze usage patterns to improve user experience
• Fix bugs and troubleshoot issues
• Ensure security and prevent abuse

5. Data Storage and iCloud

Your lock group data, including lock names, generated codes, and history, is stored locally on your device and synced via Apple's iCloud service. This means:

• Your data is encrypted in transit and at rest by Apple
• Your data syncs across devices signed into the same iCloud account
• Apple's iCloud terms and privacy policy apply to data stored in iCloud
• We do not have access to your iCloud encryption keys

6. Sharing and CloudKit

When you share a lock group with another user:

• The shared data is stored in Apple's CloudKit shared database
• Only users you explicitly invite can access the shared data
• You can revoke access at any time
• Shared users can see the lock group details and generated codes

7. Data Sharing and Third Parties

We may share your data with the following categories of recipients:

• Apple Inc.: For iCloud synchronization and CloudKit sharing functionality. Apple processes data according to their privacy policy.
• Google (Firebase): For analytics, crash reporting, and notification subscriptions. Data is processed in accordance with Google's privacy policy.
• Google (AdMob): For displaying advertisements in the App. AdMob may collect device identifiers for ad personalization.

We do not sell your personal data to third parties.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our service providers (Apple, Google) maintain servers. These transfers are protected by:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other lawful transfer mechanisms under GDPR

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• App data: Stored on your device and iCloud until you delete it
• Notification subscriptions: Retained until you unsubscribe or request deletion
• Analytics data: Retained in aggregate form for up to 26 months
• Crash reports: Retained for up to 90 days

10. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at contact@lockcodes.app. We will respond to your request within 30 days.

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

11. Analytics

We use Firebase Analytics to collect anonymous usage data. This helps us understand how the App is used and identify areas for improvement. Analytics data includes:

• App launches and session duration
• Feature usage statistics
• Error and crash reports
• Device and OS information

Analytics data is collected in aggregate and does not include personally identifiable information or the actual codes you generate. You can opt out of analytics by contacting us.

12. Advertising

The App may display advertisements through Google AdMob. AdMob may collect and use data for personalized advertising based on Google's advertising policies. You can opt out of personalized ads through your device settings or by using the "Limit Ad Tracking" option on iOS.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• All data synced via iCloud is encrypted by Apple
• Generated codes are created using cryptographically secure random number generation
• We do not store your codes on our own servers
• Local data on your device is protected by your device's security features
• Our website uses HTTPS encryption for all communications
• Access to personal data is restricted to authorized personnel only

14. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• Remember your language preference
• Track whether you've already subscribed to notifications
• Analyze website traffic (through Firebase Analytics)

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

15. Children's Privacy

The App is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at contact@lockcodes.app.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you through the App or by email if you have subscribed to notifications.

17. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your data, please contact us at:

Email: contact@lockcodes.app