Privacy Policy

Who we are

Loky ("we") is responsible for the information described here — the data controller, in GDPR terms.

Loky is operated by Erik Rasmussen, Denmark.

Privacy questions: support@getloky.app.

Screen Time data stays with Apple

Loky blocks apps through Apple’s Screen Time (Family Controls) framework. When you choose which apps to lock, iOS gives Loky opaque tokens, not app names, and your usage reaches Loky only as signals such as “the limit was reached”. We cannot see which apps you picked, which apps you open, your browsing, or your messages, and none of it leaves your device through Loky.

What Loky collects

• Your account. Your email address and a password (stored hashed by our authentication provider), or an anonymous account if you have not signed up.
• Your profile and onboarding answers. The name and age you give, and your answers about your screen time, your goals and your bedtime, which Loky uses to build your plan and daily limit.
• Your focus sessions. For each visit to the café: the kind of session, the seat, the planned length, when it started and ended, whether you finished, and the XP it earned. This powers your streak, level and receipts.
• Subscription status. Whether you have an active Loky Pro subscription, handled for us by RevenueCat and Apple. We never see your card number.
• App usage analytics. Events such as finishing onboarding or opening the paywall, collected with Google Firebase Analytics to understand which parts of the app work. These are tied to an app-instance identifier, not your name or email.

What Loky does not collect

Loky does not collect the names of apps you use, your screen time minutes per app, your browsing history, your location, your contacts, your photos, or your device advertising identifier, and it does not track you across other companies’ apps or websites.

Why we hold it

• To give you the product. Your plan, limit, streak and receipts cannot exist without the data they are built from. This is performance of our contract with you.
• To keep your progress across devices. So a new phone does not reset your streak.
• To run the subscription. To know whether you have paid, and to restore purchases when you ask.
• To improve and maintain the app. Aggregate analytics and error diagnosis, which is our legitimate interest in a working app.

Who processes it for us

The only third parties involved are the ones needed to run the app: Supabase hosts the database and accounts, protected so that your rows are readable only by your own account; Google Firebase provides analytics and remote configuration; RevenueCat and Apple handle the subscription; and Apple delivers notifications if you turn them on.

We do not sell your personal data. We do not share it with advertisers or data brokers, and we do not use it to target ads.

How long we keep it

Your account data is kept while your account exists. Delete your account and we remove it within 30 days, except where we must keep a record — a payment record, for example — to meet a legal obligation. Analytics events are kept by Firebase for a limited period and then deleted.

Your rights

If you are in the UK, EU or EEA, you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. If you are in California, you have comparable rights, including the right not to be discriminated against for exercising them.

Write to us at support@getloky.app and we will answer within one month. You can also complain to your local data protection authority.

Children

Loky is intended for people aged 13 and over. We do not knowingly collect data from anyone younger. If you believe a child has given us data, write to us and we will delete it.

Changes

If we change this policy we will update the date at the top, and tell you in the app before a material change takes effect.