Privacy Policy

Company/Developer: Mark Angelo Atienza
Website: https://systemlock.app/
Contact Email: support@systemlock.app

1. Introduction

This Privacy Policy explains how SystemLock (“SystemLock,” “we,” “us,” or “our”) collects, uses, stores, processes, and discloses your information when you use the SystemLock mobile application and related services (collectively, the “Service”).

SystemLock is a productivity, fitness, and screen time management application available on iOS and Android built using React Native and Expo.

By using the Service, you agree to the practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, please discontinue use of the Service.

2. Information We Collect

2.1 Account and Identity Information

When you create or use an account, we may collect:

• your email address through Apple Sign-In;
• your display name through Apple Sign-In;
• your Firebase UID, which is a unique identifier generated automatically;
• whether your account is anonymous; and
• your profile avatar image uploaded through the camera or photo library.

2.2 Onboarding Questionnaire Information

During onboarding, you may voluntarily provide information used to personalize your experience, including:

• age range;
• player archetype or personality type;
• motivation type and focus area;
• phone usage habits;
• average and target screen time;
• emotional triggers and feelings related to phone usage;
• primary productivity or wellness goals;
• daily recovery goals;
• body weight in kilograms;
• exercise frequency;
• preferred exercise times; and
• methods previously attempted to reduce screen time.

This information is stored as part of your user profile and used to personalize recommendations, gamification systems, productivity features, and fitness-related experiences.

Some onboarding responses may include behavioral or emotional information that could be considered sensitive personal data in certain jurisdictions.

2.3 Fitness and Activity Data

When using run tracking or fitness features, we may collect:

• GPS location coordinates;
• altitude and accuracy data;
• timestamps;
• distance traveled;
• run duration;
• pace;
• estimated calories burned;
• full GPS route polylines; and
• background location tracking data while an active run session is ongoing.

GPS route data is considered sensitive location information and is stored until you delete your account.

Location tracking occurs only while authorized by you and only when run tracking features are active.

2.4 Screen Time and App Blocking Information

SystemLock integrates with Apple Screen Time and FamilyControls APIs to provide app blocking and productivity functionality.

We may collect:

• opaque FamilyControls selection tokens;
• selected category counts;
• schedule windows;
• weekday scheduling preferences; and
• productivity configuration settings.

Importantly:

• SystemLock cannot read the actual names of apps selected through Apple FamilyControls APIs;
• Apple provides only opaque tokens and counts;
• Screen Time analytics displayed through DeviceActivityReport extensions remain entirely on-device inside Apple’s sandboxed environment; and
• Screen Time usage data is not transmitted to our servers or to third parties.

User-tagged app categories such as productive, neutral, or distractive are stored locally on-device only.

2.5 Gamification and Progress Data

We collect information related to your in-app progression, including:

• quest completion records;
• XP earned;
• streak data;
• completion timestamps;
• daily completion history;
• achievements and unlock status;
• level progression;
• task items;
• task duration; and
• completion status.

This data is used to provide gamification, progress tracking, and motivational features.

2.6 Device Information

When you use the Service, we may automatically collect limited device information, including:

• app version;
• device model;
• operating system version; and
• general device diagnostics related to app compatibility.

2.7 Subscription Information

Subscription and purchase information may include:

• subscription status;
• product identifiers;
• subscription periods; and
• paywall interaction data.

Subscription management is handled through Superwall and the applicable app marketplace.

3. How We Use Your Information

We use your information to:

• provide and maintain the Service;
• authenticate user accounts;
• personalize onboarding and productivity recommendations;
• enable app blocking and scheduling functionality;
• track workouts and run sessions;
• calculate fitness metrics;
• provide gamification and progression systems;
• improve user experience and app performance;
• manage subscriptions and premium access;
• analyze feature usage and engagement;
• provide customer support;
• secure the Service and prevent abuse; and
• comply with legal obligations.

We do not sell your personal information.

We do not use your information for third-party advertising purposes.

4. Screen Time and FamilyControls Data

SystemLock uses Apple FamilyControls and Screen Time APIs in accordance with Apple’s privacy architecture.

Important limitations and protections include:

• we cannot view the names of apps selected for blocking;
• app selections are represented by opaque tokens only;
• DeviceActivityReport analytics remain inside Apple’s sandboxed extension environment;
• Screen Time analytics are not transmitted to our servers; and
• Screen Time information is used solely to provide productivity and self-management features.

SystemLock is designed for self-directed productivity and wellness purposes and is not intended as parental monitoring software.

5. Fitness and Location Data

Location tracking is used exclusively for run tracking and fitness-related functionality.

Background location access may be requested during active runs in order to:

• continue route tracking while the app is minimized;
• accurately calculate distance and pace; and
• preserve workout continuity.

Location tracking is not used for advertising, behavioral profiling, or location monetization.

GPS route history and run data remain associated with your account until deletion.

6. Third-Party Services

6.1 Firebase

We use Firebase and Google Cloud for:

• authentication;
• Firestore database storage; and
• avatar image storage.

Firebase Analytics is explicitly disabled.

6.2 Mixpanel

We use Mixpanel for product analytics and feature usage tracking.

Mixpanel may receive:

• Firebase UID;
• email address;
• display name;
• anonymous account status; and
• behavioral event data such as button taps, screen views, and feature interactions.

Mixpanel tracking is disabled in development builds.

6.3 Superwall

We use Superwall for subscription and paywall management.

Superwall may receive:

• Firebase UID;
• email address;
• display name;
• anonymous account status; and
• Mixpanel distinct identifiers.

Superwall manages:

• paywall presentation;
• subscription status; and
• subscription experiments or A/B testing.

6.4 Apple Screen Time APIs

We integrate with Apple FamilyControls and DeviceActivityReport APIs for app blocking and screen time functionality.

Screen Time analytics remain on-device and are not transmitted to our servers.

7. Data Sharing and Disclosure

We may share your information only in the following circumstances:

• with service providers necessary to operate the Service;
• when required by law or legal process;
• to protect the safety, rights, or security of users or the Service;
• during mergers, acquisitions, or business transfers; or
• with your explicit consent.

We do not:

• sell personal information;
• share data with advertising networks;
• use advertising identifiers (IDFA); or
• engage in cross-app advertising tracking.

8. Data Retention and Account Deletion

We retain personal information for as long as necessary to provide the Service and fulfill legal obligations.

GPS route data and fitness history are stored indefinitely until account deletion because they are necessary to preserve historical activity records.

You may delete your account at any time within:

Profile → Delete Account

Account deletion performs a soft-delete process that includes:

• marking the account as deleted;
• storing a deletion timestamp;
• deleting associated subcollections and user records;
• deleting tasks, schedules, runs, achievements, daily history, and quest data; and
• deleting avatar images from Firebase Storage.

Third-party providers such as Mixpanel and Superwall may retain certain records according to their own retention policies.

9. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have rights including:

• the right to access your information;
• the right to correct inaccurate information;
• the right to delete your information;
• the right to restrict or object to processing;
• the right to data portability;
• the right to withdraw consent; and
• the right to know what categories of information are collected and shared.

California residents may also have rights under the California Consumer Privacy Act (CCPA).

SystemLock does not sell personal information as defined under the CCPA.

To exercise privacy rights, contact:

support@systemlock.app

We may verify your identity before processing requests.

10. Children’s Privacy

SystemLock is intended for a general audience and is not specifically directed toward children under the age of 13.

We do not knowingly collect personal information from children under 13. If we become aware that personal information from a child under 13 has been collected without appropriate consent, we will take reasonable steps to delete it.

FamilyControls functionality is intended for personal productivity, focus, and wellness purposes and not for parental surveillance or monitoring.

11. Security of Your Information

We use reasonable administrative, technical, and organizational safeguards designed to protect your information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials.

12. International Data Transfers

Your information may be processed and stored outside your country of residence, including in countries where our service providers operate infrastructure.

By using the Service, you consent to these transfers.

We take reasonable measures to ensure transferred data remains protected in accordance with applicable privacy laws.

13. Do Not Track & Advertising

SystemLock does not:

• use advertising identifiers (IDFA);
• participate in third-party ad tracking;
• perform cross-app behavioral advertising; or
• sell user data to advertisers.

Because the Service does not engage in advertising tracking, an App Tracking Transparency (ATT) permission prompt is not required.

Native mobile applications do not use browser cookies in the same manner as websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Material changes may be communicated through:

• in-app notices;
• app updates;
• email notifications; or
• updates posted on our website.

Continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Us

Mark Angelo Atienza
Email: support@systemlock.app
Website: https://systemlock.app/