Locket — Privacy Policy
Last updated: 18 September 2026
Locket (“we”, “us”, “our”) is a private couples memory app. This policy explains what data we collect, why, and how it is protected. Locket is designed so that the minimum amount of data necessary is collected.
1. Who we are
Locket is an independent app. You can contact us at hello@locketfortwo.com.
2. Data we collect and why
Account
You create an account with an email address and password, or with Sign in with Apple. We store your email address so you can sign in again and recover your account if you forget your password. A display name and profile photo are optional and stored only if you add them.
Relationship data you create
Everything you add — milestones, letters, map pins, bucket list items, coupons, drawings, private notes and profile details — is stored in a database hosted by Supabase (a US-based cloud provider). This data is:
- Accessible only to you and your linked partner
- Protected by row-level security so no other user can read it
- Never sold, shared with advertisers, or used for anything other than showing it back to you inside the app
Photos
Profile photos, cover photos, drawings and photos you attach to memories are stored by Supabase. They're served from long, hard-to-guess web addresses that the app only shows to you and your partner, and no one else can browse or list them. Anyone who has the exact address of a photo could still open it, so keep those links to yourselves. Voice letters are stored privately and play through links that expire after an hour.
Locket only uploads the photos you choose. It may ask for access to your photo library so you can pick those photos or save a drawing. “On This Day” is built from the milestones you’ve saved in Locket and does not read your photo library.
Location and places
The map stores coordinates that you place manually. Locket does not track you in the background and does not log your movements. When you drop a pin, the coordinates are sent to Google Places to look up the place name, address and photo, and map tiles are served by Mapbox.
Voice letters
If you record a voice letter, the audio is stored in a private Supabase bucket for your partner to play. Locket also produces a text transcript using Apple's speech recognition, which may process the audio on Apple's servers rather than on your device.
Calendar
If you grant calendar access, Locket writes your anniversaries and date nights to your device calendar. It does not read or upload your existing events.
Notifications
To send you your partner's nudges, letters and reminders we store a push token for your device and deliver messages through Expo's push service to Apple's notification servers.
Device & crash data
Crash reports and error logs are collected through Sentry solely to fix bugs. Personal identifiers are disabled, and crash data is never linked to your relationship content.
Payments
Subscriptions are processed by Apple and managed by RevenueCat. We receive only your subscription status (free or premium) — never your card details.
3. Artificial intelligence
Locket does not use generative AI. Your photos, letters, milestones and map pins are never sent to any generative AI service, and nothing you create is used to train any model. The one machine-learning feature in the app is the speech-to-text transcription of voice letters described above, which uses Apple's speech recognition.
If generative AI features are ever introduced, you will be shown an explicit consent screen before any of your data is processed, and you will be free to opt out.
4. Data sharing
We do not sell your data and we do not share it with advertisers. The only third parties that receive data are:
| Service | Purpose | Data received |
|---|---|---|
| Supabase | Database, storage, auth | Your account and relationship content |
| Apple | Sign-in, payments, push, speech-to-text | Account identifier, payment handled by Apple, voice-letter audio for transcription |
| RevenueCat | Subscription management | Your user ID and subscription status |
| Google Places | Place lookup for map pins | Coordinates of pins you drop |
| Mapbox | Map tiles | Map view requests |
| Expo | Push notification delivery | Device push token and message content |
| Sentry | Crash reporting | Device OS, app version, error logs |
5. Data retention and deletion
- Deleted items are soft-deleted and permanently removed after 30 days.
- Delete Account removes your profile, your private notes, your photo and your drawings immediately and permanently — there is no grace period. Use Settings → Account → Delete my account. If your partner is still using Locket, the letters, milestones and pins the two of you made together remain in their account, no longer attributed to you; if nobody is left, the shared space and everything in it is deleted too.
- You may also email hello@locketfortwo.com to request deletion. We will honour it within 30 days.
6. Children
Locket is for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data. Contact hello@locketfortwo.com and we will respond within 30 days.
8. Security
Data in transit is encrypted with TLS. Data at rest is encrypted by Supabase's underlying infrastructure (AES-256). Access to your couple's data is enforced at the database level — no other user can read your records even if they know your IDs. Photos work a little differently: they're protected by their hard-to-guess addresses rather than by your account, as described under “Photos” above.
9. Changes to this policy
We will post material changes to this page and update the date above. Continued use of the app after changes constitutes acceptance.
10. Contact
hello@locketfortwo.com