Privacy policy
Last updated: 25 October 2026
LockedIN is made by The LockedIn Mindset Ltd, a company registered in England and Wales (company number 16112791), 71-75 Shelton Street, London WC2H 9JQ. Questions about this policy go to blessing@thelockedinmindset.com.
What LockedIN is
LockedIN shows the people you choose when you have worked out, and shows you when they have. It reads your workouts from Apple Health.
What we collect
From Apple, when you sign in. Your name and email address. If you choose Apple’s “Hide My Email”, we get the relay address Apple gives us and nothing else.
What you give us. A handle, a display name, a profile photo if you add one, your daily goal, and the messages and reactions you send.
From Apple Health, with your permission. Workouts (the type, when, how long, and distance where there is one), exercise minutes, steps, and heart rate during a workout. From these we keep, on our servers: the days you worked out, the minutes, the workout type, distance, active calories, the average, highest and lowest heart rate of a session, the time spent in each heart rate zone. We keep the shape of a route only for a workout you choose to show as a map.
Routes and location. When you record a walk, run or ride with Start, your phone uses your location to draw the route, including while the screen is locked. The route is saved to Apple Health.
When you choose to show a workout as a map, the first and last 200 metres are removed and the route is reduced to at most 300 points before its coordinates are sent to our server for your Lockmates to see. If you choose heart rate, photo or on photo instead, no location is sent to us.
A gym check in takes one location reading on your phone and asks Apple Maps which gyms are nearby. We receive the gym name, not your location. Your steps during the check in are counted on your phone.
Stories and photos. Every workout becomes a story card that your Lockmates can see in the stories row for 24 hours. It shows the workout type, when it happened, duration, distance, active calories, average, highest and lowest heart rate, and time in heart rate zones. It also shows a map or photo if you choose one.
Photos you add are stored in a private storage area that only you and your Lockmates can read. When your Lockmates watch your stories, we record who saw each card. Only you can see that list.
Your Lockmates can also see that you are moving right now and the type of workout you are doing, but not your location.
Your profile photo is checked for a face on your phone using Apple’s Vision framework. Nothing about this check is sent anywhere.
From your phone. Your time zone, so days are counted where you live, and a notification token, so we can send you the notifications you turn on.
We do not collect your contacts, your location outside a workout you record or a gym check in, advertising identifiers, or anything from other apps.
What we never do with Health data
We do not sell it. We do not use it for advertising. We do not share it with data brokers or advertisers. This is Apple’s rule for apps that read Health, and it is ours.
Who sees what
Your Lockmates and squads see that you worked out, your story cards as described above, your streak, that you are moving right now and at what, and anything you send them. Your story views are seen by you alone.
People who are not your Lockmates can find you by your handle and see your name, photo, handle and how many days you have marked as Locked.
Us. A person reads reports of abuse and feedback you send.
Who helps us run it
Supabase hosts our database, file storage and server code. Apple provides Sign in with Apple, push notifications, Apple Health and Apple Maps. Klaviyo sends our emails, such as a reminder when you have unread messages, which can include a short preview of the message. Each of these providers handles your data only to run our app and protects it at least as well as we promise to in this policy.
We use no analytics, advertising or tracking services. Nothing you do in LockedIN is sent to an AI service.
How the app is used. The app notes the moments you use it: that you opened it, reached a step of sign-up, opened a room, or sent a message. We keep these ourselves, in our own database, to see what works and what does not. They never include your workouts, your heart rate or anything else from Apple Health, and nobody outside LockedIN sees them.
How long we keep it
We keep your data for as long as you have an account. You can delete your account in the app from Me, then Delete my account.
The app first removes your profile photo and workout photos from storage. Account deletion then deletes your profile, workouts, stories, story views, messages, reactions, reports you filed, usage events and notification tokens. This includes messages you sent to a squad.
Your choices
Delete your account in the app: Me, then Delete my account.
Stop sharing Health data in the Health app: your picture, Apps, LockedIN.
Turn notifications off in the app: Me, then Notifications.
Block or report someone from their chat.
Ask for a copy of your data, or a correction, by emailing blessing@thelockedinmindset.com.
If you live in the UK or the EU you have the right to see, correct, move and delete your data, and to complain to your data protection authority. In the UK that is the Information Commissioner’s Office.
Children
LockedIN is not for anyone under 13, and we do not knowingly collect their data.
Changes
If this policy changes in a way that matters, the app will say so before the change takes effect.