werkLockIn — Privacy Policy
1. Controller
werk2 UG (haftungsbeschränkt)
Von-Schildeck-Str. 15, 36043 Fulda, Germany
Email: info@werk2.group
Commercial register: Amtsgericht Fulda, HRB 9279
The general app privacy policy also applies. If there is a conflict, the information in this document takes precedence for LockIn.
2. Scope
LockIn is an app for self-set goal contracts with check-ins, optional witnesses, share cards, and optional paid contract unlocks.
3. Data we process
- Account — email address, display name, authentication data / session tokens via the auth service
- Contract and progress data — e.g. goal/title, duration, daily rule, check-ins, status, invite code
- Witness and interaction data — witness membership, status, optional assessments (e.g. lock/break)
- Push notifications — device push token and message delivery, if permitted
- Share cards / media — share images generated by the app; saved to your photo library only after the corresponding device permission is granted
- Check-in proof photos — optional or contractually required; processed only on your device and composited into the share card. No upload to our database or object storage
- Technical data — app/device information and logs for security and error diagnosis; language/locale settings
- Purchase / credit status — information about unlocks and in-app purchases; payment data for store purchases is processed by the respective store provider
- support — content of your messages to info@werk2.group
4. Purposes and legal bases
- Providing the app, check-ins, witness features, and support — Art. 6(1)(b) GDPR
- Security and abuse prevention — Art. 6(1)(f) GDPR
- Optional push notifications — Art. 6(1)(a) GDPR
- Photo library access to save share cards — Art. 6(1)(a) GDPR
- Camera for optional/required proof photos (on-device only) — Art. 6(1)(a) GDPR
- Paid unlocks via app stores — Art. 6(1)(b) GDPR
- Legal obligations — Art. 6(1)(c) GDPR
5. Recipients / processors
-
Supabase (auth, database) — region
eu-central-1; data processing agreement - Expo / Apple / Google — app operation, push delivery and/or store distribution, as required
- Apple / Google — billing of in-app purchases, where used
- Third parties you choose — when you share cards or invites via system share or social apps, their terms apply
6. Retention
We retain account and app data for as long as your account exists or statutory retention obligations apply. After account deletion, we remove associated data unless retention is legally required. You may request deletion in the app (where available) or at info@werk2.group.
7. Your rights
Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority (including HBDI, Hesse). Contact: info@werk2.group.
8. Children
LockIn is not directed at persons under 16 years of age.
9. Changes
The version published on this page with the date shown above is authoritative.