LockSafe Privacy Policy
The short version: your location is collected only during a safety alert you deliberately start — the emergency button, a Come Get Me request, or a Stay With Me journey timer if you don't check in — shared only with the contact(s) you chose, and everything that alert creates is deleted the moment it ends. No ads, no analytics companies, no data sales.
What we collect and when
Always (account data): your name, email, optional phone number, and your trusted contacts' names with their phone/email — all provided by you. Plus a security log of events (never locations).
Only during a safety alert you start: your location is shared only while an alert you began is running. Press the emergency button and your device sends its location (with accuracy and battery level) roughly every 10 seconds until you end it; send a Come Get Me and a single location reading is taken once and shared with the one person you chose. Nothing collects your location outside these — enforced by the app, the server, and the database itself.
Subscription data: whether your subscription is active and when it renews. This is handled for us by RevenueCat, which receives an anonymous identifier for your account and nothing that identifies you — no name, email, phone number, contacts or location. We never see your card details. Apple takes the payment and is the merchant of record; your card is never sent to us or to RevenueCat.
Never: location outside an alert you started, browsing habits, advertising identifiers, or background tracking of any kind.
About the "Always" location permission. LockSafe asks for it, and you can say no. We ask because in an emergency your phone usually ends up in a pocket or locked — and without it, sharing stops the moment your screen locks, exactly when your contacts need to see you. Granting it does not mean you are tracked: collection happens only while an emergency you started is running, enforced in three independent places — the app stops collecting, the server refuses location outside an active session, and the database deletes every point the instant the emergency ends. Decline and LockSafe still works, but sharing pauses whenever your screen is locked, and the app says so plainly.
What your contacts see
During an emergency, each verified contact gets a private link showing your live location, when it last updated, your battery level, and (if you added it) your phone number. When the emergency ends, the link stops working permanently.
The Live Rescue Room. The contacts you choose to include can also see a shared view of who else you alerted and what each says they are doing (for example "Mum · Responding", "Dad · Calling 999") — first names or your labels only, never each other's phone numbers. Those statuses are your guardians' own words: LockSafe passes them on but does not verify them, and never contacts the emergency services itself. You can set any contact to be alerted without being in the shared room, and everything in the room is deleted when the emergency ends.
Come Get Me. A quieter, non-emergency request to one person you have already added. They receive a message that you would like them to come to you and a link to a single reading of where you are (not a live feed, no battery level); the link expires after about an hour or when you cancel. The person you are with is shown nothing.
Stay With Me. A silent journey timer. While it runs, nothing is shared and no location is collected. If you don't check in by the time you set, LockSafe warns you and then, if you still don't respond, alerts all your verified contacts that you may need help and shares your location — the same as the emergency button. A journey you finish normally collects nothing.
Retention and deletion
- Everything a safety alert creates — your location, and for an emergency the shared-room record of who was included and what each guardian said — is deleted the moment that alert ends. A never-ended emergency auto-ends after 24 hours; a Come Get Me request auto-expires after about an hour.
- If an invited contact declines, we delete their phone/email and keep only an irreversible hash so they cannot be re-invited.
- Account deletion (in Settings) is immediate and removes your profile, contacts, devices, and any location data.
Family plans
A Family subscription covers up to six people through Apple Family Sharing. Everyone has their own separate LockSafe account, their own trusted contacts, and their own location data. Paying for the plan does not give the purchaser access to anyone else's location, contacts or account. A parent who buys a family plan cannot see their child's location through it. The only thing shared is the payment.
Who processes data for us
Infrastructure providers only: Supabase (database, EU region), Vercel (hosting), Twilio (SMS), Resend (email), Sentry (error reports, scrubbed of locations and links), Upstash (rate limiting), RevenueCat (subscription status — anonymous identifier only), Apple (app distribution and payment), Expo (app builds — no user data). We do not sell or share data with anyone else, and we do not use advertising or analytics companies at all.
Contact
Contact details will be published here at launch.