Privacy Policy — LockHaven
Effective date: 2026-06-29
Last updated: 2026-07-05
LockHaven (“the app”, “we”, “us”) is a privacy app that locks selected apps and stores your photos, videos, and files in an encrypted on-device vault. This policy explains exactly what data the app handles and how.
Summary
- Your private content never leaves your device. All vault encryption, app locking, and viewing happen locally on your device.
- We have no user accounts, no analytics, and no advertising.
- The only information that leaves your device is what is strictly required to process an optional subscription purchase, handled by Google Play and our billing provider (see “Subscriptions” below).
What data the app handles (stored only on your device)
- Your PIN / pattern: never stored in plain form. It is run through a key-derivation function and used to wrap an encryption key; only the wrapped (encrypted) key is saved.
- Vault contents (photos, videos, files): when you import an item, it is encrypted with AES-256 and stored in a hidden, protected folder on this device. Originals you import remain yours to keep or delete; the app only removes them with your confirmation.
- Locked-app list: the package names of apps you choose to lock, stored on the device.
- Preferences: theme, accessibility options, and similar settings.
- Backups (optional): if you create a backup, it is an encrypted file saved to a location you choose. You control where it goes; the app never uploads it.
Your vault contents, PIN, and locked-app list never leave your device.
Where your vault is stored
So that clearing the app’s data or reinstalling it does not wipe your locked content, the encrypted vault (its contents, your locked-app list, and the wrapped encryption key) is kept in a hidden folder in this device’s shared storage rather than the app’s temporary data area. It remains encrypted, never leaves the device, and your PIN is still required to open it.
Subscriptions (Pro)
LockHaven offers an optional paid “Pro” subscription. If you choose to subscribe:
- Payment is processed by Google Play. We never see or receive your card or payment details. Google’s handling of your payment is governed by the Google Play Terms of Service (https://play.google.com/about/play-terms/) and Google Privacy Policy (https://policies.google.com/privacy).
- We use RevenueCat to manage and verify subscription status. When you purchase or restore a purchase, RevenueCat receives purchase-related information (such as the Google Play purchase token/receipt and an app-generated anonymous identifier) in order to validate the subscription and tell the app whether Pro is active. This is used only to deliver the subscription you paid for. RevenueCat’s handling of this data is governed by the RevenueCat Privacy Policy (https://www.revenuecat.com/privacy/).
This purchase information is not linked to your identity by us, and it does not include any of your vault content. If you never purchase a subscription, the app makes no such requests.
Permissions and why they are used
- All files access (MANAGE_EXTERNAL_STORAGE): to keep the encrypted vault in a protected folder that survives clearing the app’s data, so your locked content is not lost. Used only to read and write the app’s own hidden vault folder; nothing is uploaded.
- Biometric (fingerprint/face): to let you unlock with biometrics instead of your PIN. Handled entirely by the Android system; the app never receives your biometric data.
- Display over other apps (SYSTEM_ALERT_WINDOW): to show the lock screen on top of an app you have locked.
- Accessibility Service: used solely to detect which app has just come to the foreground, so the app can show its lock screen when you open a locked app. It checks only the foreground app’s package name. It does not read, collect, log, or transmit the content of your screen or any other app. You can disable it at any time in Android Settings → Accessibility.
- Query installed apps: to show you a list of apps you can choose to lock. This information is used only on-device to populate that list.
- Internet / network access: used only to communicate with Google Play and RevenueCat for the optional subscription described above. It is never used to transmit your vault content, PIN, or locked-app list.
Data sharing and selling
We do not sell your data. We do not share your data with third parties except the minimum purchase information shared with Google Play and RevenueCat to process and verify an optional subscription, as described in “Subscriptions.” The app contains no advertising and no analytics or tracking libraries.
Data retention and deletion
Your vault is kept in a hidden folder on this device so it survives clearing the app’s data or reinstalling. Because of that, uninstalling the app does not automatically erase it. To remove everything, use Settings → Delete vault inside the app (or delete the app’s hidden vault folder) before uninstalling. Any backup files you exported remain wherever you saved them, under your control, and can be deleted by you at any time. Subscription records held by Google Play and RevenueCat are retained under their respective policies; you can manage or cancel your subscription in Google Play.
Children’s privacy
The app is not directed at children and does not knowingly collect any data from anyone.
Changes to this policy
If this policy changes, the updated version will be published with a new “Last updated” date.
Contact
For questions about this policy, contact: developer@digitalmarcos.com or sheraprodeveloper@gmail.com.