Locked In app icon

Privacy policy

Locked In Privacy Policy

Locked In has no accounts, no servers and no analytics. The developer does not collect, sell, or have access to your personal or health data.

Last updated: 10 October 2026

Summary

  • No sign-up. Locked In never asks for your name, email address or contact details.
  • No analytics, advertising, tracking or third-party SDKs in the app.
  • The app makes no network requests to the developer or any third party.
  • Health data stays in Apple Health on your devices.
  • Your challenge syncs only through your own private iCloud account.
  • Progress photos are encrypted on your device. iCloud only ever stores the encrypted copy.

Apple Health (HealthKit)

With your permission, Locked In reads the following from Apple Health to show your challenge progress: workouts, active and resting energy, steps, heart rate, sleep, body weight, body fat percentage, BMI, height, dietary energy and macronutrients (protein, carbohydrates and fat). If you open calorie calibration, it may also ask to read your date of birth and biological sex to estimate your resting energy.

When you log something in Locked In, it can save it back to Apple Health: body weight, body fat percentage, BMI, food energy, macronutrients, and manually logged workouts with their energy and distance.

Health data is read on your device to draw the app's screens, widgets and Apple Watch views, and to write the text of reminders scheduled on your device. It is never sent to the developer, never used for advertising or marketing, and never sold or shared with anyone. Locked In does not copy your Apple Health history into iCloud. The only health-related values it syncs are the few described in the next section.

You can change or revoke access at any time in the Health app: tap your profile picture, then Apps → Locked In.

Your challenge and iCloud sync

Locked In stores what you set up and log in the app: challenge dates, goals and targets, your workout plan, your starting measurements and height (entered by you, or taken from Apple Health when the challenge begins), daily mood and check-ins, weekly reflections, habit streaks, calorie calibration factors, reminder preferences and app settings.

This is kept on your device and synced between your own devices using Apple's iCloud (CloudKit) private database and iCloud key-value storage. That data lives in your iCloud account, under Apple's privacy policy. The developer cannot see or access it. If you're not signed in to iCloud, everything stays on the device.

Progress photos

Photos you take in Locked In are encrypted on your device with AES-GCM before they're stored. The encryption key is kept in your iCloud Keychain so your other devices can open them. The encrypted photos sync through your private iCloud database, so iCloud only ever stores ciphertext. Photos are never added to your Photos library, and viewing them requires Face ID or your passcode.

Device permissions

  • Camera: to take progress photos inside the app.
  • Face ID: to unlock your progress photos. Apple handles Face ID, and the app never receives your face data.
  • Photo library (add only): to save a recap image when you choose to export one. The app can't read your library.
  • Notifications: reminders are scheduled locally on your device. There are no push marketing messages.

Widgets and Apple Watch

To show your progress in widgets and on Apple Watch, the app shares a small summary with its own widget and watch extensions on your devices. This stays on your devices and in your Apple account.

This website

This support site uses no cookies, analytics, advertising or tracking scripts. It's hosted by Vercel, which, like any web host, may process standard request information such as IP addresses in server logs to deliver and secure the site. If you email support, your email address and message are used only to reply to you.

Children

Locked In is not directed to children under 13 and does not knowingly collect information from anyone.

Deleting your data

In the app, Settings → Reset Challenge removes your challenge and goals from all your devices. Deleting the app removes its data from that device. To remove the iCloud copy, open the iOS Settings app → your name → iCloud → Manage Account Storage → Locked In. Data saved to Apple Health stays there until you delete it in the Health app.

Medical disclaimer

Locked In is for general fitness and wellness tracking. It is not a medical device and does not provide medical advice, diagnosis or treatment. Talk to a health professional before starting a new diet or exercise programme.

Changes and contact

If this policy changes, the updated version will be posted on this page with a new date. Questions about privacy can be sent to admin@mstep.nz.