LockedIn

Privacy Policy

Effective date: October 13, 2026

This policy describes how LockedIn works in plain English. It is not legal advice.

Contents

1. Who we are
2. Your account and profile
3. What you log
4. Friends, feed, stories and snaps
5. Photo safety and reports
6. AI features: body-fat, food, equipment and Spark
7. Partners, pair streaks, pacts and IOUs
8. Online status and Lock in activity
9. Analytics, advertising and tracking
10. Notifications
11. Subscriptions
12. Lock in mode and Screen Time
13. Summary of data we collect
14. How we use your information
15. Who we share it with
16. How long we keep it, and deleting your account
17. Children
18. Security
19. International transfers
20. Your rights and choices (GDPR, UK, California and others)
21. This website
22. Changes to this policy
23. Contact us

1. Who we are

LockedIn (“the App”) is operated by Elevated Systems LLC (“we”, “us”, “our”). We are the controller of your personal information as described in this policy. You can reach us at lockedin@elevatedsystems.info. This policy covers the LockedIn app for iPhone and this website (lockedinwith.me).

2. Your account and profile

You sign in with Sign in with Apple. Sign-in is handled by Google Firebase Authentication.

• Sign in with Apple: we receive an Apple user identifier and, if you choose to share them, your name and email address. If you choose “Hide My Email”, we receive an Apple relay address instead of your real one.
• Profile: your display name, a unique handle, an avatar you pick or a profile photo you upload, your preferred units, and optionally a short bio and the usernames of your Instagram, TikTok, YouTube or Facebook accounts.
• Body details (optional): your sex, height, age and starting weight, if you enter them. We use them to calculate your strength score and tailor estimates; your starting weight becomes your first weigh-in.
• “How did you find LockedIn?” (optional): your answer, if you give one, is stored with your subscription record to compare which channels bring subscribers (section 9). It is not linked to your workouts or other logs.

Other users can find you by searching your handle. Search shows only your display name, handle and profile photo. Your friends also see your training split, bio and social accounts. Public posts and stories show your display name, handle and profile photo to anyone signed in to LockedIn.

3. What you log

LockedIn stores what you enter so you can track it over time and across devices:

• Workouts: exercises, sets, reps, weights, dates and muscles worked.
• PRs: bench press, squat and deadlift lifts, with estimated one-rep maxes and history.
• Weigh-ins and goal phases: weight entries and whether you are maintaining, bulking or cutting.
• Nutrition: calorie, protein, carb and fat goals, foods you log, and water.
• Body-fat scans: the photos you take for a scan and the estimate (section 6).
• Gym equipment (optional): machines you add by hand or by scanning, with their name, muscles, and a photo thumbnail (section 6).
• Lock in sessions: when each session started and ended.
• Levels and XP: points, level, streaks and a strength score our server calculates from what you log.
• Steps, sleep and recovery (optional): if you connect Apple Health.

Apple Health. If you connect Apple Health, LockedIn only reads data; it never writes to Apple Health. It reads your daily step count and, for the Recovery tab, your sleep, overnight heart rate, heart rate variability, respiratory rate, blood oxygen and wrist temperature. Sleep and recovery data is processed on your iPhone and is not sent to our servers, except as a short summary for Spark if you turn that on (section 6). During Lock in mode the App may read the heart rate your Apple Watch records to time your rest between sets; this stays on your iPhone. The App sends each day’s step total to our server to check it against your step goal, and when you reach it we keep that day’s total with the XP it earned. Apple Health data is never shown to friends, never used for advertising or marketing, never sold, and never shared except with Google Firebase (steps only) and, if you turn it on, our AI provider for Spark as a short summary. You can turn off access at any time in the Health app.

This information is stored in Google Firebase (Cloud Firestore and Cloud Storage). Security rules make it readable only by your account unless you choose to share it.

4. Friends, feed, stories and snaps

LockedIn is built for small circles of friends, family and a partner. Sharing is always your choice:

• Feed posts. “Share to feed” is off unless you turn it on. A post is visible to you and to your friends when you post it. Friends can like and comment, and everyone who can see the post can see those likes and comments.
• Public posts. You may choose Public instead of Circle. A public post appears in the Public feed for anyone signed in to LockedIn, with your display name, handle and profile photo. Health numbers appear only if they are part of the post you chose to share. People you have blocked, and people who have blocked you, do not see each other’s public posts.
• Stories are photos with an optional caption that disappear after 24 hours. We delete the story, its photo and its viewer list from our servers when it expires, normally within the hour. The author of a story can see who viewed it.
• Snaps are photos sent directly to friends you pick. Each friend can open one once. We delete it shortly after everyone has opened it (normally within about 30 minutes) or 24 hours after you sent it, whichever is first. You can unsend a snap that has not been opened. LockedIn does not prevent or detect screenshots.
• Your profile. Friends see your training split, bio and the social usernames you add. Tapping one opens that site under its own privacy policy.
• Public leaderboard (optional). If you join, everyone signed in can see your display name, handle, profile photo, best estimated bench press, squat and deadlift, and body-weight class (a range, never your exact weight). You can leave at any time.
• Friend stats. In Settings you can turn on sharing per category (weight, PRs, nutrition, level, body fat). Nutrition sharing shows progress toward goals, never the individual foods. Body-fat sharing shares the number only unless you attach the photo to a post.
• Invites. Anyone who opens your invite link can send you a friend request. Only share invite links with people you know.

If you remove or block a friend, they lose access to your shared stats, are removed from the audience of your recent posts and stories, and unopened snaps between you are withdrawn. Anyone who could see something you shared may already have saved or screenshotted it.

Profile photos. A profile photo you upload is cropped and resized on your phone, checked as described in section 5, and stored in Firebase Cloud Storage, where anyone signed in who can see your profile, posts, stories or search result can view it. We delete the old photo when you change it or delete your account.

5. Photo safety and reports

Automatic photo checks. Before anyone else can see a photo in a public post, story, snap, or a profile photo you upload, our server has it checked by Google Cloud Vision, which rates how likely it is to contain nudity, sexual content or violence. Google processes the photo only to return those ratings, does not store it, and does not use it to train its models. If a photo fails, we delete it and only you see that it was not shared. Automated checks can be wrong; if you think one of your photos was blocked wrongly, email us.

Reports and blocking. You can report any post, comment, story, snap or person in the App, and block people. When you report, we keep your report and a copy of what you reported, including any photo, so we can review it even if it is later deleted or expires. We keep reports only as long as needed to review them and keep LockedIn safe. We act on reports of objectionable content within 24 hours.

6. AI features: body-fat, food, equipment and Spark

Our AI provider for these features is Google: its Gemini models, on Google Cloud (Vertex AI), generate the results. All AI features are optional and are only used when you choose them.

Body-fat scans. Available only to users 18 and older. Before your first scan the App asks you to confirm your age and agree to this processing. When you scan: your photo(s) are stored in your private folder in Firebase Cloud Storage, which only your account can access; our server sends the photo(s), plus any measurements that help the estimate (such as your latest weight), to Google to generate the estimate; and the estimate (a percentage, a likely range, a confidence level and short notes) is saved to your private data. Friends cannot see scan photos or results unless you share; sharing a result shares the number only unless you attach the photo. We do not use scan photos to identify you and we do not create face or body templates.

AI food estimates. If you use Describe or Photo when adding food, the description or food photo you provide is sent to Google to estimate foods, portions, calories and macros, after you agree in the App. Food photos are resized and stripped of location and device data on your phone, held briefly in private storage while the estimate runs, and deleted right after. You review and can edit every estimate before anything is saved.

Gym equipment scans. If you scan a gym machine, the photo you take (and an optional close-up of its label) is stored in your private folder and sent to Google to identify the machine, its muscles and exercises. The label photo is deleted as soon as the request ends. The machine photo is kept as the thumbnail for your equipment library until you delete the machine or your account, and is not shown to friends.

Spark, the in-app coach. Spark gives you a daily breakdown of your training, food and body numbers and answers your questions. It works only after you turn it on. Each time Spark makes a breakdown or answers, the App builds a short summary of your numbers on your iPhone and our server sends it, with your question and that day’s earlier chat messages, to Google. The summary can include your most-trained exercises with recent weights and reps, workout lengths and sets, sessions and sets per week and muscle group, your split, streak and level, recent lift records, Lock in minutes, calorie and protein goals and daily food totals for two weeks, recent weigh-ins and trend, the time of day, your profile’s sex, age, height and goal phase, and, if you have a partner, a short summary of your shared week (for example how many days each of you trained, your pair streak and pact progress). It never includes food names, workout names or notes, photos, or raw Apple Health records. Steps, sleep and heart data are included only if you separately turn on Apple Health for Spark, and then only as a summary. We do not store the summary. We keep only the text of that day’s breakdown in your private data and replace it the next day. Your chat with Spark is not stored on our servers. Spark’s replies are general fitness coaching, not medical or dietary advice.

How Google handles it. Google processes this data on our behalf as our service provider. Under its Google Cloud terms it does not use your data to train or improve its models. If its automated safety systems flag a request as possible abuse, it may keep that request for up to 90 days to review it, after which it is deleted, and it automatically screens requests for child sexual abuse material. We configure the service so it does not otherwise store the request or result. Processing takes place in the United States. Privacy practices: https://cloud.google.com/terms/cloud-privacy-notice.

AI results are visual or statistical estimates for fitness tracking. They are not a medical measurement or medical advice. Body-fat photos and results are never used for advertising, never shared with advertising or analytics partners, and never sold. You can withdraw consent at any time by not using the feature and deleting existing scans, which you can do in the App.

7. Partners, pair streaks, pacts and IOUs

You can choose one training partner from your friends, by mutual consent: you send a request and they accept. When you are partners we store a pair record containing both account IDs, the pair status, when it started, your pair streak and best streak, and, for the last 28 days, a flag for each day that each of you was active. We use these to show the shared week, award bonus XP and achievements, and (if either of you opts in) send missed-day alerts.

Weekly pacts and stakes. A pact (or “commitment”) records how many days per week each partner commits to train, its length (1, 2 or 4 weeks), the weekly results, and an optional stake: a short label (up to 40 characters, with an optional emoji) that the two of you agree on, such as “Coffee” or a preset. We also store whether each partner turned on auto-repeat. If someone misses, we create an IOU record containing who owes whom, the stake label, its status (open, settled or forgiven) and dates. At most three IOUs can be open per pair.

Stakes and IOUs are an honor system between friends. The stake is only a word. LockedIn never moves, holds, processes or tracks money, does not collect or enforce payment, and does not verify that a stake was paid. Do not put personal or sensitive information in a stake label, because your partner can see it.

Your partner sees what your sharing settings allow plus the pair, pact and IOU data above. No workout values, weights, food or photos are stored in pair, pact or IOU records. Missed-day alerts to your partner are opt-in, per person, and you choose which accountability notifications you receive in Settings › Accountability. If you remove your partner, we delete the pair record, its day flags and its IOUs, and cancel the current pact; the friendship remains.

8. Online status and Lock in activity

Online status. While the App is open, it writes a timestamp (“last online”) to your account about once a minute. Your friends (and only your friends) can read it and see a green dot when it is recent, which we treat as online for about three minutes. We delete that record when the App goes to the background, when you sign out, and when you turn off Settings › What friends see › Show when I’m online (default: on). We do not keep a history of when you were online. We never show online status for blocked users.

Locked in now. If you turn on sharing for Lock in activity, your friends and partner can see that you are locked in during a session. We store when the session started and when it will end (at most six hours later) and delete it when the session ends. Your partner may receive a notification when you start a session if you share it and they have not muted it.

9. Analytics, advertising and tracking

• Google Analytics for Firebase records how the App is used, such as screens viewed and features used, with device type, OS and app version and an app-instance identifier.
• Firebase Crashlytics collects crash reports with device state and technical details so we can fix bugs.
• Meta SDK records limited app events (install, app open, registration, onboarding completed, paywall viewed, trial start, subscription) so we can measure our ads on Facebook and Instagram.
• Apple Ads attribution. If you came to LockedIn from an Apple Ads (Apple Search Ads) ad, Apple gives the App a privacy-preserving attribution token. It contains no advertising identifier and does not need tracking permission. We pass it to our subscription provider, RevenueCat, so we can see which campaign brought you.
• Ad campaign details from Meta. If you allow tracking and you installed LockedIn after tapping a Meta (Facebook or Instagram) ad, the App asks Meta once whether the install came from an ad. If so, we record the ad’s campaign, ad set and ad identifiers on your RevenueCat customer record. These identifiers describe the ad, not you or your activity.
• “How did you find LockedIn?” Your optional answer is stored on your RevenueCat customer record so we can compare channels.

Tracking and App Tracking Transparency. “Tracking” means linking data about you from our App with data from other companies’ apps and sites for advertising, or sharing it with data brokers. iOS asks for your permission before an app may do this. If you tap Allow, Meta may receive your device’s advertising identifier so it can connect our app events to ads you saw, and we may receive ad campaign details as described above. If you tap Ask App Not to Track, we do not use the advertising identifier, and Meta receives only the limited, aggregated measurement Apple allows. You can change this at any time in iOS Settings › Privacy & Security › Tracking.

What we never send. Your workouts, PRs, weigh-ins, nutrition, body-fat photos or estimates, equipment, friends, posts, stories, snaps, partner, pact, IOU or online-status data are never sent to Meta, Apple Ads or any advertising partner, and are not used for advertising. Our analytics record only that something happened (for example “a story was posted”), never what it contained or who it went to.

10. Notifications

If you allow notifications, we store a push token for your device and use Firebase Cloud Messaging and Apple to tell you about friend and partner requests, accepted invites, likes, comments, nudges, snaps, pact proposals and results, IOUs, and (if you choose) when your partner starts a session or misses a day. You can control each type in Settings › Accountability and turn notifications off in iOS Settings at any time. We delete your push token when you delete your account.

11. Subscriptions

LockedIn Pro is sold and billed by Apple. We never receive or store your payment card or billing details. Apple and RevenueCat process your purchase and free-trial status: Apple tells us, through RevenueCat, whether you have a subscription or are in your 7-day free trial, when the trial or subscription renews or ends, and the store country, so we can unlock Pro features. RevenueCat also receives an anonymous app user ID and, to match purchases to ads, the attribution details in section 9. Superwall shows onboarding and subscription screens and records how you interact with them (such as screens seen, onboarding answers and whether you subscribed).

12. Lock in mode and Screen Time

Lock in mode uses Apple’s Screen Time frameworks (Family Controls, Managed Settings and Device Activity) to block the apps you pick while you train. Apple keeps your choices on your device as private tokens that we cannot read. Your app choices and Screen Time data never leave your iPhone. We store only the start and end time of each session, so it can appear in your history and, if you choose, in a post or to your partner.

13. Summary of data we collect

This table groups what the App collects in the same categories Apple uses for its App Privacy details. Everything below is linked to your account, except as noted, and none of it is sold.

14. How we use your information

For each purpose we also list our legal basis under the GDPR and UK GDPR.

• To run LockedIn: your account, logs, charts, friends, feed, stories, snaps, partner, pacts, online status and notifications. Performance of a contract.
• To check photos and handle reports, keep LockedIn safe, prevent abuse and enforce our Terms of Use. Legitimate interests, and legal obligations.
• To produce body-fat, food, equipment and Spark results when you ask. Your explicit consent (Apple Health data for Spark: separate consent).
• To provide subscriptions and restore purchases. Performance of a contract.
• To understand usage, fix crashes and improve the App. Legitimate interests.
• To measure our advertising. Legitimate interests and, where tracking is involved, your consent through App Tracking Transparency.
• To reply when you contact us, and to meet legal and tax obligations.

15. Who we share it with

We do not sell your personal information. We share it only with your friends or partner as you choose, with everyone on LockedIn when you choose Public, and with the service providers below, who process it on our behalf:

We may also disclose information if the law requires it, to protect the safety of our users or the public, or as part of a merger or sale of our business, in which case this policy continues to apply to your information.

California “sale” and “sharing”. We do not sell personal information. If you allow tracking, the Meta advertising measurement in section 9 may count as “sharing” for cross-context behavioral advertising, or “targeted advertising”, under some US state laws. You can opt out at any time by turning off tracking for LockedIn in iOS Settings, or by emailing us. We do not knowingly sell or share the personal information of anyone under 16.

16. How long we keep it, and deleting your account

• Account data and logs: as long as you have an account, or until you delete the item.
• Stories and snaps: deleted automatically (section 4). Online status: deleted when you leave the App, with no history. Locked-in-now: deleted when the session ends.
• Food photos and equipment label photos: deleted when the estimate or scan ends. Spark summaries: not stored; the daily breakdown text is replaced each day.
• Pair day flags: kept for 28 days. Pacts and IOUs: until you or your partner end the partnership or delete your account.
• Reports: as long as needed to review and keep LockedIn safe.
• Analytics, crash and purchase records held by our providers follow their own retention (for example, Google Analytics data is kept up to 14 months) and may be kept longer where the law requires, such as tax records.

Delete your account in the App: go to Me › Settings › Delete account. This permanently deletes your account, profile, handle, logs, body-fat photos and estimates, equipment, Spark breakdowns, friend and partner connections, shared stats, posts, stories and snaps, and removes you from the viewer lists of other people’s stories. It cannot be undone. If you would also like comments you left on friends’ posts removed, email us and we will remove them. You can also email us to delete your account if you cannot open the App. Deleting your account does not cancel your subscription: cancel it in Settings › Apple Account › Subscriptions.

17. Children

LockedIn is for people aged 13 and over, or the minimum age required in your country if higher. Body-fat scans are limited to users 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email us and we will delete it.

18. Security

Data is encrypted in transit and at rest by our providers. Firebase security rules limit access to your own account and, for what you choose to share, to your friends or partner, or to signed-in users for what you post publicly. Snap photos cannot be downloaded by anyone but you; each recipient receives a snap through our server once. No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a breach that affects you, we will notify you and regulators as the law requires.

19. International transfers

We and our providers process data in the United States and other countries. If you are in the EU, UK or Switzerland, your information is transferred to the United States and other countries that may not have the same data protection laws. Where required, we rely on safeguards such as the European Commission’s Standard Contractual Clauses and the UK addendum.

20. Your rights and choices

Depending on where you live (including the EU, UK, California and other US states), you may have the right to:

• know what personal information we collect, use, disclose and share, and get a copy of it, in a portable format (access and portability);
• correct it, delete it, or restrict or object to how we use it;
• withdraw consent at any time (for example by not running scans, turning off Spark or tracking, or sharing only with your Circle);
• opt out of the “sale” or “sharing” of personal information for targeted advertising (we do not sell it; see section 15), and limit use of sensitive personal information (we use health data only to provide the features you use);
• not be treated differently for using your rights; and
• complain to your data protection authority, such as your local EU authority, the UK Information Commissioner’s Office, or the California Attorney General, and in some states appeal a decision on your request.

How to use them. Most choices are in the App: sharing and online-status toggles in Settings, Accountability settings, notification and tracking permissions in iOS Settings, deleting items, and Delete account. To request a copy of your data, correction, deletion or anything else, email lockedin@elevatedsystems.info with “Privacy” in the subject, from the email tied to your account or with your handle. We will verify your identity (we may ask you to confirm in the App) and respond within 30 days (45 for some US requests, with notice if we need more). An authorized agent may make a request for you with your written permission. We do not use “Do Not Track” browser signals, because the App is not a website, and this website does not track you (section 21).

Consumer health data. Some of what you log may be treated as consumer health data under laws of some US states, such as Washington and Nevada. We collect it only to provide the features you use, share it only as described here, and never sell it.

California notice at collection. In the last 12 months we collected the categories of personal information in section 13 for the purposes in section 14, and disclosed them only to the providers in section 15. We retain it as described in section 16.

21. This website

This website (lockedinwith.me) does not use cookies, advertising trackers or analytics, and has no sign-in. Our hosting provider (Google Firebase Hosting) keeps standard server logs, such as IP address, time and requested page, for a limited period for security and operation. When you open an invite link, the page reads the invite code from the link in your browser to open the App; it is not stored.

22. Changes to this policy

We may update this policy. We will post the new version on this page with a new effective date and, if the changes are significant, tell you in the App. Earlier versions of this policy are also kept on elevatedsystems.info/lockedin/privacy for older app versions.

23. Contact us

Elevated Systems LLC
Email: lockedin@elevatedsystems.info
Website: elevatedsystems.info

See also the Terms of Use and Support.