Local storage · Your data stays on your device
This Privacy Policy describes how Lock ("CYL" or "the App") collects, uses, stores, and protects information when you use our private photo and video vault application. We are committed to privacy by design: your media and access credentials are stored locally on your device and are not uploaded to our or third-party servers unless you explicitly share content elsewhere.
This policy applies to information we obtain in connection with your use of the App, including device and usage data, and (where applicable) payment-related data for in-app purchases. The App’s core functionality is local private album management: you can create albums, lock individual albums with a PIN or device biometrics (Face ID / Touch ID), and import photos and videos that are stored in encrypted form on your device. Such media is not actively uploaded to our or any third party’s servers. If mandatory law in your jurisdiction conflicts with this policy, that law prevails to the extent of the conflict.
We aim to align our practices with major privacy and data protection laws applicable to our users, including:
Where not inconsistent with mandatory law, we process information in accordance with principles of lawfulness, fairness, transparency, purpose limitation, data minimization, storage limitation, and security. Your rights under applicable local law remain fully applicable.
Local media (not uploaded). Photos and videos you add to the App are stored on your device. We may process metadata (e.g. creation time, album) and generate thumbnails for display. This content is not uploaded to our servers unless you use system sharing to send it elsewhere.
Access control. To support album locking, we store locally: your album lock PIN (in hashed form, e.g. in the system keychain), whether biometric unlock is enabled, and auto-lock interval settings. This data stays on your device.
Device and usage (limited). We may collect anonymous or de-identified information such as device model, OS and app version, crash reports, and performance metrics. In-app purchase transaction status (e.g. success/failure) may be processed for fulfillment and support; we do not store full payment details.
Contact and feedback. If you email us at lockcyl@163.com, we use your email and message content to respond and improve our services.
We use the information described above to: (a) provide and operate the App (albums, locking, media display, trash, export); (b) improve stability and performance (e.g. crash and error analysis); (c) respond to your inquiries and send important service notices where you have agreed; and (d) comply with applicable law or lawful requests from authorities.
Media, access credentials, and related settings are stored on your device (local storage and/or system keychain). We use encryption and secure storage mechanisms for sensitive data. Any limited analytics or crash data may be held by third-party providers under their policies. We retain data only as long as necessary for the purposes described; you can delete content and the App at any time. No system can be guaranteed secure; you accept risks related to device loss, damage, or unauthorized access to your device or credentials.
We do not sell or rent your personal information. We do not actively share your local media or access credentials with third parties. We may share information: (a) with your consent; (b) with service providers who assist operation (e.g. crash reporting, IAP verification) under confidentiality obligations; (c) to comply with law or lawful government or court orders; (d) to protect our or others’ rights and safety. In the event of a merger or acquisition, your information may be transferred with appropriate safeguards and, where required by law, notice to you.
Depending on your location, you may have rights including: access to your personal data; correction of inaccurate data; deletion where permitted by law; restriction or objection to certain processing; and data portability where required. California residents may have additional rights under CCPA/CPRA (e.g. right to know, delete, correct, limit use of sensitive data, non-discrimination). To exercise these rights or for any privacy questions or complaints, contact us at lockcyl@163.com. We will respond within a reasonable time and as required by applicable law.
The App is not directed at children. If you are under the age of majority in your jurisdiction, use the App only with parental consent and supervision. If you are a parent or guardian and believe we have collected a minor’s information without your consent, please contact us at lockcyl@163.com and we will take steps as required by law.
We may update this Privacy Policy from time to time. Material changes will be communicated in the App (e.g. in-app notice or release notes). The updated policy is effective when published unless otherwise stated. Continued use of the App after changes constitutes acceptance of the updated policy.
For questions, requests, or complaints about this Privacy Policy or our privacy practices:
Email: lockcyl@163.com
We will respond within a reasonable time and, where required by law, assist you in exercising your rights.