Summary
- No sign-up. Locked In never asks for your name, email address or contact details.
- No analytics, advertising, tracking or third-party SDKs in the app.
- The app makes no network requests to the developer or any third party.
- Health data stays in Apple Health on your devices.
- Your challenge syncs only through your own private iCloud account.
- Progress photos are encrypted on your device. iCloud only ever stores the encrypted copy.
Apple Health (HealthKit)
With your permission, Locked In reads the following from Apple Health to show your challenge progress:
workouts, active and resting energy, steps, heart rate, sleep, body weight, body fat percentage, BMI,
height, dietary energy and macronutrients (protein, carbohydrates and fat). If you open calorie
calibration, it may also ask to read your date of birth and biological sex to estimate your resting energy.
When you log something in Locked In, it can save it back to Apple Health: body weight, body fat
percentage, BMI, food energy, macronutrients, and manually logged workouts with their energy and distance.
Health data is read on your device to draw the app's screens, widgets and Apple Watch views, and to
write the text of reminders scheduled on your device. It is never sent to the developer, never used for
advertising or marketing, and never sold or shared with anyone. Locked In does not copy your Apple Health
history into iCloud. The only health-related values it syncs are the few described in the next section.
You can change or revoke access at any time in the Health app: tap your profile picture, then Apps →
Locked In.
Your challenge and iCloud sync
Locked In stores what you set up and log in the app: challenge dates, goals and targets, your workout plan,
your starting measurements and height (entered by you, or taken from Apple Health when the challenge begins),
daily mood and check-ins, weekly reflections, habit streaks, calorie calibration factors, reminder preferences
and app settings.
This is kept on your device and synced between your own devices using Apple's iCloud (CloudKit) private
database and iCloud key-value storage. That data lives in your iCloud account, under Apple's
privacy policy. The developer cannot see or access it.
If you're not signed in to iCloud, everything stays on the device.
Progress photos
Photos you take in Locked In are encrypted on your device with AES-GCM before they're stored. The encryption
key is kept in your iCloud Keychain so your other devices can open them. The encrypted photos sync through
your private iCloud database, so iCloud only ever stores ciphertext. Photos are never added to your Photos
library, and viewing them requires Face ID or your passcode.
Device permissions
- Camera: to take progress photos inside the app.
- Face ID: to unlock your progress photos. Apple handles Face ID, and the app never receives your face data.
- Photo library (add only): to save a recap image when you choose to export one. The app can't read your library.
- Notifications: reminders are scheduled locally on your device. There are no push marketing messages.
Widgets and Apple Watch
To show your progress in widgets and on Apple Watch, the app shares a small summary with its own widget and
watch extensions on your devices. This stays on your devices and in your Apple account.
This website
This support site uses no cookies, analytics, advertising or tracking scripts. It's hosted by Vercel, which,
like any web host, may process standard request information such as IP addresses in server logs to deliver
and secure the site. If you email support, your email address and message are used only to reply to you.
Children
Locked In is not directed to children under 13 and does not knowingly collect information from anyone.
Deleting your data
In the app, Settings → Reset Challenge removes your challenge and goals from all your devices. Deleting the app
removes its data from that device. To remove the iCloud copy, open the iOS Settings app → your name → iCloud →
Manage Account Storage → Locked In. Data saved to Apple Health stays there until you delete it in the Health app.
Medical disclaimer
Locked In is for general fitness and wellness tracking. It is not a medical device and does not provide
medical advice, diagnosis or treatment. Talk to a health professional before starting a new diet or exercise programme.
Changes and contact
If this policy changes, the updated version will be posted on this page with a new date. Questions about
privacy can be sent to admin@mstep.nz.