Privacy Policy

Lock In Twin · Last updated: August 11, 2026

Lock In Twin is a two-person accountability app. You and one other person ("your twin") agree to a weekly goal, check in with photos, and confirm each other's check-ins. This policy explains what we collect, why, and what we do with it.

The short version: your photos are visible only to you and your twin. We don't sell your data, we don't show ads, and we don't share your information with advertisers or data brokers.

What we collect

• Phone number. Used to create your account and sign you in. We use Firebase Authentication (Google) to send verification codes and manage sessions.
• Display name. Shown to your twin and, if you opt into a leaderboard, to other users.
• Check-in photos and punishment proof photos. Taken inside the app. We do not access your photo library. These are stored so you and your twin can view them and so they appear in your shared archive.
• Approximate location at check-in. For location-based goals only (gym, running, weightlifting). We capture your coordinates at the moment you take a check-in photo and compare them to the location you saved for that pact. Your twin sees a distance indicator (for example, "at your gym" or "500m away") — not your raw coordinates, and not your location at any other time. We do not track your location in the background.
• Goal and pact settings. Your category, weekly target, wake time and leeway window (for the Wake Up Early goal), punishment cards, and pact history.
• Check-in and settlement records. Timestamps, approvals, rejections, reactions, streaks, and outstanding punishments.
• Usage analytics. A small set of events (for example: an invite was sent, a check-in was submitted, a week settled) used to understand whether the app works. Confirmation timing is recorded in coarse buckets rather than exact durations.
• Device token for notifications, if you enable push notifications.
• Reports. If you report content, we store the report, what was reported, and the reason.

What we don't collect

• We don't access your photo library, contacts, microphone, or health data.
• We don't track your location outside of the moment you submit a check-in.
• We don't collect payment information. The app has no payment processing.
• We don't buy data about you from third parties.

Who can see your information

• Your twin sees your check-in photos, punishment proof photos, distance indicator, display name, goal progress, streaks, and outstanding punishments. That is the entire point of the app.
• Nobody else sees your photos. They are not public, not searchable, and not shared with other users.
• If you opt into a leaderboard (off by default, and only if both twins opt in), your display name and streak may be visible to other users. Photos never are.
• Service providers. We use Google Firebase (authentication, database, file storage, analytics, and push notifications) to run the app. Google processes this data on our behalf. See Firebase's privacy information.
• Legal. We may disclose information if required by law, or to investigate reported abuse or protect someone's safety.
• We never sell your personal information and do not share it for cross-context behavioral advertising.

How long we keep things

Your pact archive is designed to last — it's a record you and your twin build together, and both of you keep access to it even after a pact ends.

If you delete your account, we delete your account and your personal data. Photos you already shared into a pact archive remain visible to your twin, with your identity reduced to your first name — this is so one person deleting their account doesn't erase the other person's record of their own year. If you want content you contributed removed as well, contact us and we'll remove it.

Your choices and rights

• Delete your account at any time in Settings. This is available in the app; you don't need to email us.
• Turn off notifications or location in your iOS settings. Some goals won't work without them.
• Access, correction, and portability. Contact us and we'll provide a copy of your data or correct it.
• If you're in the EU/UK: our legal basis for processing is performance of a contract (running the app you signed up for) and legitimate interests (safety, abuse prevention, understanding whether the app works). You have rights of access, rectification, erasure, restriction, objection, and portability, and may complain to your local supervisory authority.
• If you're in California: you have the right to know, delete, correct, and opt out of sale or sharing. We don't sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your rights.

Children

Lock In Twin is not intended for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child has created an account, contact us and we'll remove it.

Security

Data is transmitted over encrypted connections and stored using Google Cloud infrastructure with access rules restricting each pact's data to its two members. No system is perfectly secure, but we don't ask for more than the app needs, and photos are never public.

Changes

If we change this policy materially, we'll update the date above and notify you in the app.

Contact

Questions, requests, or reports: support@lockintwin.app