Privacy Policy

1 Information We Collect

We collect information in the following ways:

• Account Information: Name, email address, password hash, profile details, and subscription tier.
• Academic and Planning Data: Classes, assignments, study plans, tasks, journals, and other content you enter into the Service.
• Calendar Integrations: When you connect third-party calendars (such as Google Calendar), we retrieve event metadata and availability needed to import or synchronize schedules. We do not modify third-party events unless you explicitly authorize it.
• Usage and Device Information: IP address, device type, browser type, operating system, referring URLs, and activity logs that help us secure and improve the Service.
• Support and Communications: Messages, feedback, and content you send to our support team.

2 How We Use Information

We use the information we collect to:

• Provide, personalize, and maintain the Service, including event planning, reminders, and AI-driven study recommendations.
• Authenticate users, secure accounts, and prevent fraud or misuse.
• Monitor and analyze trends, usage, and activities to improve performance and develop new features.
• Provide customer support and respond to inquiries.
• Send important transactional messages about your account or subscription. We only send marketing communications where permitted by law and with the appropriate consent.
• Comply with legal obligations and enforce our Terms of Service.

3 When We Share Information

We do not sell your personal information. We share information only in limited circumstances:

• Service Providers: Trusted vendors that perform services on our behalf, such as hosting, email delivery, analytics, or customer support. These providers may only use your data as instructed by us.
• Connected Integrations: When you choose to connect a third-party integration (for example, Google Calendar), we share the minimum necessary data to deliver the integration. Those providers govern their own use of the data you share with them.
• Legal Obligations: We may disclose information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: In connection with a merger, sale of assets, financing, or acquisition of all or a portion of our business, we may transfer information to the parties involved, subject to confidentiality protections.

4 Google User Data

Lock In's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data We Access

When you use "Sign in with Google" or connect Google Calendar, we request the following scopes:

• openid, email, profile — Your name, email address, and profile picture, used solely to create and authenticate your Lock In account.
• Google Calendar Events (read-only) — We read your calendar events so we can import them into your Lock In study schedule. We request read-only access and never create, edit, or delete events on your Google Calendar unless you explicitly authorize it.

How We Use Google Data

• Authentication: verifying your identity and signing you into Lock In.
• Calendar import: displaying your Google Calendar events inside Lock In so your study schedule reflects your real commitments.
• We do not use Google user data for advertising, retargeting, or to build user profiles for sale to third parties.
• We do not use Google user data for AI or machine-learning model training that is unrelated to providing the Service to you.

Storage and Retention

OAuth tokens are stored in an encrypted database. Imported calendar event metadata (title, start/end time) is stored only as long as needed to display your schedule. If you disconnect Google Calendar or delete your account, we delete all stored Google tokens and imported event data.

Sharing

We do not share Google user data with any third party except as strictly necessary to provide the Service (for example, our hosting provider processes data on our behalf under contract). We never sell Google user data.

Revoking Access

You can disconnect your Google account at any time from your Lock In settings. You can also revoke Lock In's access from your Google Account permissions page. Upon revocation, we will delete your stored Google OAuth tokens.

5 Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. If you delete your account, we will delete or de-identify associated information, except where retention is required for legitimate business or legal purposes.

6 Your Choices and Rights

• You can update most account information through your profile settings.
• You can disconnect third-party integrations at any time within the Service.
• You may request deletion of your account by contacting us at lockinbusiness0@gmail.com.
• Depending on your jurisdiction, you may have additional privacy rights, such as requesting access to your data, requesting correction, or objecting to certain processing. We will honor these rights in accordance with applicable law.

7 Security

We implement technical and organizational safeguards designed to protect your information. However, no online service is completely secure, and we cannot guarantee absolute security. Please keep your account credentials confidential and notify us promptly of any unauthorized use.

8 Children's Privacy

The Service is not directed to children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete it. If you believe this has occurred, please contact us immediately.

9 International Users

Lock In is operated from the United States. If you access the Service from outside the United States, you consent to the transfer, storage, and processing of your information in the United States and other countries where we or our service providers operate.

10 Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the "Last updated" date. If the changes materially affect your rights, we will provide additional notice (for example, by email or within the Service). Your continued use of the Service after the effective date of an update constitutes acceptance of the revised policy.

11 Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out: