Privacy Policy

Effective October 21, 2026

This Privacy Policy explains how NextByte LLC (“NextByte”, “we”, “us” or “our”) collects, uses, discloses and protects personal information in connection with the LockedIn mobile application (the “App”), the website at uselockedinapp.com (the “Site”) and the LockedIn waitlist (together, the “Services”). Please also read our Terms of Use, which govern your use of the Services. Capitalized terms not defined here have the meanings given in the Terms of Use.

Summary

• What you do in the App, such as your tasks, sessions and records, is stored on your device and is not sent to us.
• We do not sell your personal information, show ads, or track you across other companies’ apps or websites.
• If you use AR mode with the front camera, face tracking runs only on your device, and the App does not save face data or send it to us or anyone else. See Face Data.
• The waitlist keeps the information you give it so we can send your Game Plan, the emails you asked for and your Launch Offer code.
• Apple processes your payments. RevenueCat and Superwall receive limited purchase and App information to run LockedIn Pro.
• You can ask to access, correct or delete your information at any time by emailing contact@uselockedinapp.com.

1. Who We Are

NextByte LLC, a Wyoming limited liability company, provides the Services and is responsible for the personal information described in this Privacy Policy. Under the data protection laws of the European Economic Area (“EEA”), the United Kingdom and Switzerland, NextByte is the “controller” of that information. You can contact us by email at contact@uselockedinapp.com or by mail at NextByte LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States.

2. Information We Collect

(a) Information that stays on your device. The App stores your tasks, sessions, blocks, routines, records, cards, settings and anything you type on your device. We do not receive this information. If you back up your device, your backup may include it under Apple’s terms.

• Screen Time. To block apps, the App uses Apple’s Screen Time framework. Apple gives the App opaque tokens for the apps and websites you select. The App can display them to you but cannot read which apps or websites they represent, and the tokens never leave your device.
• Motion and lock state. The App reads your device’s motion sensors and whether your device is locked, on your device, to count your sessions. This information is not sent to us or anyone else.
• Notifications, camera and photos. Reminders are scheduled on your device. Photos you take or select for a card stay on your device unless you choose to share them. AR mode with the front camera uses face tracking as described in Face Data.

(b) Information processed when you use the App. The App sends limited information to the service providers that run LockedIn Pro. Like any internet service, they also receive your device’s IP address when the App connects to them.

• Purchases. Apple processes your payment, and we never receive your payment card details or your Apple Account credentials. Our subscription provider, RevenueCat, receives your purchase history from Apple (plan, price, purchase, renewal and expiration dates, and refunds), together with a random identifier the App creates, your App and iOS versions and your App Store country.
• Launch Offer codes. If you enter a Launch Offer code in the App, the App stores the code with your RevenueCat record before sending you to Apple to redeem it. Because each code is personal, this can connect your purchase records to your waitlist signup.
• The membership screen. Superwall helps us decide which membership screen to show you. It receives a random identifier, App events (such as “onboarding finished”), basic device information (model, iOS version, language and region), whether you are eligible for an introductory offer, and the numbers, dates and settings of your focus plan (such as target hours, start dates, first session time, daily pledge, and Hard or Soft mode). It never receives your name, your tasks or anything you type.
• Crash reports. If you have chosen to share analytics with app developers in your device settings, Apple provides us with crash reports and usage statistics that do not identify you.
• No advertising identifier. The App does not access your device’s advertising identifier and does not track you across apps and websites owned by other companies.

(c) Information you give us on the Site and the waitlist. When you complete the questionnaire or join the waitlist, we collect:

• Contact details: your email address and, if you provide it, your first name;
• Questionnaire answers: your goals and why you want to change now; your phone habits, including daily hours, the app you use most and when and where you use your phone, including at night; how you feel when you reach for your phone; what you have tried before; your working hours; your age range; and the choices you make for your plan;
• Signature: if you choose to sign your plan, the line you draw and the time you signed;
• Progress: the steps you completed, the days of your 7-day plan you checked off, the Launch Offer code assigned to you, the emails we sent you, and whether you confirmed your email address or unsubscribed.

Your email address is required to join the waitlist and receive your Game Plan and Launch Offer code, and your answers are required to build your Game Plan. If you do not provide them, we cannot provide those features. Your name and signature are optional.

(d) Information collected automatically on the Site. When you visit the Site, we receive the link you used to arrive, the referring website, your browser and device type, whether you opened the Site in the in-app browser of TikTok or Instagram, and your country as reported by our hosting provider. Our server uses your IP address in memory to prevent abuse and does not save it to our database. Our hosting provider keeps standard server logs, which include IP addresses, for a short period. Section 6 describes the cookie and local storage the Site uses.

(e) Information you send us. If you email us, we receive your email address and the contents of your message.

Face Data

This section covers the face tracking information that Apple’s ARKit provides in AR mode with the front camera (“face data”). It does not cover your photo, which (e) describes.

(a) What the App uses. In AR mode with the front camera, the App uses ARKit face tracking, including the TrueDepth camera on devices that have one. It uses your face’s position and orientation and whether your face is tracked. ARKit also estimates the light around you from your face, and the App uses that estimate only to light the card. It does not read your face’s shape or mesh, expressions, eye or gaze direction or depth data, and it does not recognize or identify you.

(b) Why. The App uses face data only to keep the card beside your head, hide the part of the card behind your head and light the card. We do not use face data for advertising, marketing, analytics, profiling, identification, authentication or any other purpose.

(c) On your device only. Face data is processed only on your device. NextByte never receives it, and we do not sell, share or disclose it to anyone, including RevenueCat and Superwall. Superwall receives App events, such as that you opened the camera, but never face data or photos.

(d) Retention and deletion. The App keeps face data only in memory while the camera is open, replaces it with each camera frame and releases it when you close the camera. The App never saves face data and we hold none, so there is none to delete. The card’s screen position, which follows your face in AR, stays in memory until you leave the photo screens, and a card you save or share is drawn where you left it. To stop face tracking, switch to Fixed or the back camera, close the camera, or turn off camera access for the App in Settings.

(e) Your photo. Your photo is an ordinary still image of the camera view, taken with the card hidden and with no face tracking or depth data attached. The App does not analyze faces in it. It stays on your device unless you save or share the card. A saved card goes to your Photos library, which iCloud Photos may sync if you turned it on, and Section 12 applies to a card you share.

(f) When face tracking runs. The camera opens in Fixed mode, which does not use face tracking. Before the App first uses face tracking, it asks whether you allow it and explains this use. Face tracking runs only after you allow camera access and face tracking and choose AR with the front camera, and only while that view is open. We do not collect face data from anyone, including children. Before we use face data in a new way, we will update this section and ask for your consent.

3. How We Use Information

We use personal information to:

• create and display your Game Plan;
• send the emails you asked for, such as your Game Plan, your Launch Offer code, a reminder if you did not finish the questionnaire, and news about the launch of LockedIn;
• administer the Launch Offer and prevent misuse of codes;
• provide LockedIn Pro, verify and restore purchases, and show you the appropriate membership screen and offers;
• understand, in aggregate, which links and answers lead to signups and purchases, so that we can improve the Services;
• respond to your messages and requests;
• keep the Services secure, detect and prevent fraud and abuse, enforce our Terms of Use, and comply with our legal, tax and accounting obligations.

Your questionnaire answers describe your habits. We do not use them to infer anything about your health. Your Game Plan is generated automatically from your answers and is only a suggestion. We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

The App uses face data only as described in Face Data.

4. Legal Bases for Processing (EEA, UK and Switzerland)

If you are in the EEA, the United Kingdom or Switzerland, we process your personal information on the following legal bases:

• Performance of a contract: to provide the App, LockedIn Pro, your Game Plan and your Launch Offer code;
• Consent: to send you marketing and launch emails and to store your signature. You may withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal;
• Legitimate interests: to secure the Services, prevent fraud and abuse, administer the Launch Offer and improve the Services, where those interests are not overridden by your rights and interests;
• Legal obligation: to meet our tax, accounting and other legal obligations and respond to lawful requests.

5. How We Disclose Information

(a) Service providers. We disclose personal information to service providers that process it on our behalf, only for the purposes below:

• RevenueCat: subscription management and purchase records;
• Superwall: selecting and displaying the membership screen;
• Railway: hosting the Site;
• Supabase: storing waitlist information;
• Resend: sending our emails. Our emails do not contain tracking pixels or tracked links.

These providers may use the information only to provide their services to us, under contracts that require them to protect it.

(b) Apple. Apple processes your payments, offer code redemptions and, if you opted in, crash reports under its own privacy policy.

(c) Team notifications. When you join the waitlist, our private team chat on Discord receives an alert containing your email address, your country and how you arrived at the Site. Discord processes these alerts under its own terms.

(d) Legal requirements and protection. We may disclose information if we believe in good faith that the law, legal process or a government request requires it, or that disclosure is necessary to protect the safety, rights or property of you, other people or NextByte, or to enforce our Terms of Use.

(e) Business transfers. If NextByte or LockedIn is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction. The recipient must honor this Privacy Policy or give you notice under Section 13 before making any material change to it.

(f) With your consent. We may disclose information for any other purpose with your consent, for example when you choose to share a card to another app.

(g) No sale or targeted advertising. We do not sell personal information, share it for cross-context behavioral or targeted advertising, or disclose it to third parties for their own marketing, and we have not done so in the past 12 months. We do not disclose face data to anyone, as described in Face Data.

6. Cookies and Similar Technologies

The Site uses one cookie, named “li_s”, which is strictly necessary to keep your place in the questionnaire and to let the link in our emails return you to your Game Plan. It expires after 90 days. The Site also stores the setup steps you check off in your browser’s local storage, where they stay on your device. The Site does not use analytics or advertising cookies, pixels or similar tracking technologies, and it does not allow third parties to collect information about your online activities over time and across different websites.

Because we do not track you across websites, the Site does not change its behavior in response to Do Not Track signals. We treat a Global Privacy Control signal as a valid request to opt out of the sale or sharing of your personal information.

7. International Transfers

NextByte is located in the United States, and our service providers process personal information in the United States and other countries whose data protection laws may differ from those of your country. Where we transfer personal information from the EEA, the United Kingdom or Switzerland to a country that has not been found to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses, the UK International Data Transfer Addendum, or the recipient’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You may request a copy of these safeguards by contacting us.

8. How Long We Keep Information

We keep personal information only as long as necessary for the purposes described in this Privacy Policy:

• App data: on your device until you delete it or the App;
• Face data: never saved by the App; it is kept only in your device’s memory while the camera is open, as described in Face Data;
• Purchase records at RevenueCat: while you have LockedIn Pro, and afterwards as long as needed for refunds, tax and accounting;
• Superwall data: as long as needed to operate the membership screen, under Superwall’s retention schedule;
• Waitlist information and team alerts: until you are no longer on our email list and your Launch Offer can no longer be redeemed, after which we delete them within 30 days. Unsubscribing stops our emails but does not delete your waitlist record, so your code keeps working; you can ask us to delete your information sooner. After deletion, we keep only your email address on a suppression list so that we never email you again;
• Server logs: for a short period, under our hosting provider’s retention schedule;
• Emails you send us: as long as needed to respond to you and keep a record of your request.

9. Your Rights and Choices

(a) Your rights. Wherever you live, you may ask us to confirm whether we process your personal information, to give you access to it or a copy of it, and to correct or delete it. Email contact@uselockedinapp.com, and we will respond within 30 days. To protect your information, we may ask you to send your request from the email address we have on file or, for purchase records, to include the Apple order ID from your receipt. Some App information is not linked to your identity, so we may be unable to locate it; if so, we will tell you.

(b) EEA, UK and Switzerland. You also have the right to restrict or object to our processing, to receive your information in a portable format, to withdraw consent at any time, and to lodge a complaint with your local data protection authority.

(c) United States. Depending on your state, you may have the rights described above and the right to opt out of the sale of personal information, targeted advertising and profiling; we do not engage in those activities. We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request on your behalf with your signed permission. If we decline your request, you may appeal by replying to our decision, and we will respond to your appeal within 45 days.

(d) Your choices. You can unsubscribe from our emails using the link in any email. You can turn off notifications, camera, photos or Screen Time access for the App in your device settings, and you can delete the App to remove its data from your device. Canceling a Subscription does not delete any information. To stop face tracking, see Face Data.

(e) Your right to object. You may object at any time, free of charge, to our use of your personal information for direct marketing, including profiling related to it, and, on grounds relating to your particular situation, to any use based on our legitimate interests. To stop marketing emails, use the unsubscribe link in any email or email contact@uselockedinapp.com.

10. Security

We use administrative, technical and organizational measures designed to protect personal information, including encryption in transit, access limited to people who need it, and service providers with strong security practices. No method of transmission or storage is completely secure. If a security breach affects your personal information, we will notify you and the authorities as the law requires.

11. Children

The Services are not directed to children under 13, and the waitlist is open only to people aged 16 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at contact@uselockedinapp.com, and we will delete it.

12. Third-Party Services

If you share a card or other content to another app or service, or follow a link to a third-party website, that third party’s privacy policy applies to the information it receives. We are not responsible for the practices of third parties.

13. Changes to This Privacy Policy

(a) Updates. We may update this Privacy Policy from time to time, for example when we change the Services, our service providers or how we handle information, or when the law changes. The current version is always posted on this page with its effective date.

(b) Notice of material changes. If we make a material change, such as collecting a new type of personal information, using it for a new purpose or disclosing it to a new type of recipient, we will notify you at least 30 days before the change takes effect, by email if we have your email address, by a notice in the App, or both. If a change is required by law or needed to address an urgent security issue, it may take effect sooner, and we will notify you as soon as reasonably possible.

(c) Your choice. If you continue to use the Services on or after the effective date, the updated Privacy Policy applies to your use. If you do not agree with a change, stop using the Services before the effective date, delete the App, and, if you wish, ask us to delete your information; we will handle the information we hold about you under the previous version until it is deleted.

(d) Information we already hold. We will not use or disclose personal information we have already collected in a way that is materially different from what this Privacy Policy said when we collected it, unless you give your express consent. Where applicable law requires your consent to any other change, we will ask for it.

(e) Earlier versions. Earlier versions of this Privacy Policy are available on request.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact NextByte LLC at contact@uselockedinapp.com or by mail at 30 N Gould St, Ste N, Sheridan, WY 82801, United States.