Lock is built on a foundation of privacy and security. Your trust is everything to us.

• Zero Ads: We will never display advertisements in Lock. Our app is ad-free, forever.
• No Data Selling: We will never sell, rent, lease, or trade your personal information to third parties. Your data is not a commodity.
• No Tracking: We don't use tracking pixels, analytics that spy on you, or share your behavior with advertisers.
• No Session Recording: We do not record, replay, or monitor how you use the app. Your clicks, navigation, and on-screen activity are never captured for session replay analytics. Your privacy is not a feature — it's the foundation.
• Your Data, Your Control: You can export or delete your data at any time.

Lock will never record, replay, or monitor your user sessions. While some analytics platforms offer session recording features, we have made a deliberate, privacy-first choice to not enable or use any session replay, screen recording, or user behavior playback tools within Lock.

This means:

• No session replays: We cannot and do not watch how you navigate the app.
• No rage-click or friction tracking: We do not capture your mouse movements, taps, or clicks for analysis.
• No screen captures: Your on-screen activity — especially within your encrypted vault — is never recorded.
• No third-party spyware: We do not embed session-replay SDKs or behavioral tracking pixels in the app.

Because Lock uses zero-knowledge encryption, the contents of your vault are encrypted on your device before they ever reach us — so even if a recording tool existed, it would only capture encrypted gibberish. But we go further: we don't record at all. Your activity in Lock stays private, always.

Lock uses zero-knowledge encryption. This means:

• Your passwords, documents, and financial data are encrypted on your device before being stored.
• We never have access to your unencrypted data. Even if someone hacked our servers, they would only find encrypted gibberish.
• Your master password is never transmitted or stored on our servers. Only you know it.
• We cannot recover your data if you lose your master password OR you have not retained or find your Recovery Key. This is by design for maximum security.

We collect minimal information necessary for the app to function:

• Email Address: Used for account authentication and important service notifications only.
• Subscription Status: To determine if you have a Free or Pro account.
• Encrypted Vault Data: Your passwords, documents, and financial data are stored encrypted. We cannot read this data.

We do NOT collect: Browsing history, device identifiers for tracking, real-time location tracking, or any personal information beyond what's necessary for authentication and service delivery.

• Authentication: Your email is used to sign you in securely via Google authentication.
• Service Delivery: To provide you access to Lock features and sync your encrypted data across devices.
• Support: If you contact us for help, we may use your email to respond to your inquiry.
• Important Updates: We may send occasional emails about critical security updates or changes to our service (you can unsubscribe from non-essential emails).

We will NEVER use your email for marketing purposes or share it with third parties.

• AES-256 Encryption: Military-grade encryption protects your vault data.
• Secure Cloud Storage: Your encrypted data is stored on secure, industry-standard cloud infrastructure.
• Regular Security Audits: We continuously monitor and improve our security practices.

Lock is operated by Perks Express, Inc. and is built on third-party cloud infrastructure and backend-as-a-service platforms that provide data storage, authentication, hosting, and application delivery. We carefully select these providers, but you acknowledge the following:

• Cloud Hosting & Storage: Your encrypted data is stored on secure, industry-standard cloud infrastructure provided by third-party platforms (including Base44 and Supabase). Because your data is encrypted on your device before it reaches these servers, even these providers cannot read your vault contents.
• Authentication: We use Google OAuth for account sign-in. Google handles your authentication credentials — we do not receive or store your Google password.
• No Liability for Upstream Failures: Perks Express, Inc. is not responsible for downtime, service interruptions, or data loss caused by these upstream infrastructure providers. We rely on their availability and security, which is outside our direct control.
• Encryption Protects You Even Here: Because of our Zero-Knowledge Encryption architecture, even in the unlikely event that a third-party infrastructure provider were compromised, your encrypted vault data would remain unreadable without your Master Password.

For full details on liability related to third-party infrastructure, please see Section 6 of our Terms of Service.

• Access: You can view all your data at any time within the app.
• Export: You can export your vault data as a backup file.
• Delete: You can delete your account and all associated data at any time through the app settings.
• Unsubscribe: You can opt out of non-essential emails via the unsubscribe link.