Privacy Policy

Lockedintool ("we", "us") makes the Lockedintool app, from South Africa. Contact: lockedintool@gmail.com.

We follow South Africa’s Protection of Personal Information Act (POPIA). This policy says what Lockedintool collects, where it is kept, who it is shared with and the choices you have.

Most of what Lockedintool shows you never leaves your phone: your payments, cards, notes, drawings, call history and broker logins stay on it.

Your messages - and the pictures, videos, documents and audio you send in them - are end-to-end encrypted: they are locked on your phone and only the person you send them to can open them. Our server only carries the locked message. (Files in public groups and group posts are public.)

We do not sell your information and Lockedintool shows no ads.

Money and Wallet: payments read from the notifications and bank SMS your bank and payment apps put on your phone (amount, who, date, balance, the card or account’s last 4 digits). One-time PINs, chats, email and adverts are skipped.

Connect your bank (only if you choose to; South African banks for now): you log in to your own bank on Stitch’s page (Stitch is a licensed open banking provider). Lockedintool then READS your accounts’ names, last 4 digits, balances and transactions to show them in Money and Wallet - it can’t move money with this. Your bank’s sign-in is kept locked on Lockedintool’s server; disconnect any time (Money > Bank connected) and it is deleted, and it is deleted with your account.

Cards you add: bank name, last 4 digits and expiry. The full card number and CVV are only checked while you add the card and are never kept. Pictures of scanned cards are kept with the long number and CVV covered.

Notes, drawings, pictures and audio you add to notes; highlights you make with Create; your settings.

Trading: the sign-in tokens and API keys of the broker accounts you add, in Lockedintool’s private storage. Your broker password is never kept.

Call history: calls made with Lockedintool, and contact names if you allow contacts.

Removing Lockedintool from your phone removes all of this.

Your account: your @username and a key made from your password on your phone (only a scrambled copy is kept - your password itself never leaves your phone), a locked backup of your chats and your message key (locked with an account key; that key is kept locked with your password, and we keep a spare of it so a password reset can bring your chats back), a random ID, the public half of your encryption key, your name, @username, profile picture, bio and About (so people can find you and see who you are - a private profile can’t be found and only shows to people you follow, message or share a group with) and your privacy choices (who can see your profile, who can message and call you and who can see your status).

Updates: who you follow and who follows you, the posts you share (their title, text, pictures and videos - shown in the feed and on your profile to everyone who can see your profile), your statuses (deleted after 24 hours with their hearts and comments; only seen by who your status setting allows), and the hearts and comments you leave on posts and statuses. Delete a post any time from its ⋮.

Messages and calls: locked messages waiting for a phone that is offline (deleted once delivered), and whether a message was delivered, seen or read. Calls go straight from phone to phone; our server only helps them connect.

Community: groups you create or join, and what you post, like or comment in public groups - public groups are visible to everyone. Private group messages and Your Community’s chat are end-to-end encrypted.

Payments: your plan, its price, status and dates, and the payment reference from our payment partner. If you add a bank account to receive money, it is kept to pay you - anyone viewing it sees only the last 3 digits, and people sending you money never see it.

Phone number: only if Lockedintool ever needs to verify something, and then only kept as a scrambled (hashed) value - never used to find you.

Private details: the email and / or phone number you add in Edit profile (checked with a code first). They are never shown to anyone and never used to find you - only to send you a password reset link or a Delete account confirmation.

Your internet address (IP) for a short time to stop abuse such as mass sign-ups.

Lemon Squeezy (lemonsqueezy.com - it sells the plans for us outside South Africa and handles the payment and your country’s sales tax) when you pay a plan: you give your email and pay on Lemon Squeezy’s own page; Lockedintool only learns which plan you have and until when - we never see your card.

Stitch (a licensed South African payment provider) when you pay a plan in South Africa, send money or connect your bank - you approve it on Stitch’s or your bank’s own page; we never see your card or banking login.

Your brokers and exchanges: Lockedintool talks to them straight from your phone with the keys you added.

TradingView: the chart is TradingView’s own website inside Lockedintool; signing in to TradingView is between you and TradingView.

binlist.net: only the first 8 digits of a card you add, to show its bank’s name.

Cloudflare (runs our servers) and GitHub (delivers app updates).

Twilio, to send text messages (codes and password reset links) to the phone number you add.

Resend, to send emails (codes, password reset links and Delete account confirmations) to the email you add.

ExchangeRate-API, for the day’s exchange rates when you pick an account currency - only the rates are fetched; nothing about you is sent.

Card scanning runs on your phone (Google ML Kit) and works offline - the pictures are not sent anywhere.

We share information with authorities only when the law requires it.

Notification access - to read payments for Money and Wallet and to show the Notifications panel.

Accessibility - to open recent apps, lock the screen, see when the phone’s PIN page or quick settings are showing (so the lock screen dial pad steps aside), and find Lockedintool’s widgets on your home screen. What it sees is used on the phone at that moment and never stored or sent.

Display over other apps - Station 3, the Pages and the dial pad.

Camera, microphone, photos, videos and audio - only when you use them (Create, calls, card scanning, notes, profile picture).

Phone, call log and contacts - to place calls from the dial pad and show Call history.

Modify system settings - only if you choose Device brightness control.

You can turn any permission off in your phone’s settings; the feature that needs it stops working.

Encryption keys are made on your phone and the private key never leaves it. Broker keys sit in the app’s private storage. Connections to our server are encrypted.

On your phone: until you delete it or remove the app. On our server: your account until you delete it (Settings > Privacy > Delete account - it’s removed at once); delivered messages are removed; reports are kept while they’re reviewed; payment records as long as the law requires (usually 5 years).

You can delete your account yourself at any time: Settings > Privacy > Delete account. You give a reason, confirm with your phone’s fingerprint, face or PIN, and Lockedintool sends a link and a code to your Messages; entering the code on that page and pressing Delete account removes your profile, followers, posts, statuses, comments, chats and your place in groups from our server straight away, and everything Lockedintool keeps on your phone (your Pages, notes, money and wallet history, cards, trading logins and settings). Nothing outside Lockedintool is touched - your bank, payments, broker accounts and phone stay as they are. Why people leave is kept without any name on it. You can also ask to see, correct or delete the information we hold about you by writing to lockedintool@gmail.com.

Lockedintool is for people 18 and older because it includes trading and payments.

We may update this policy as Lockedintool changes. The date at the top shows the latest version; big changes are shown in the app.