Profile Locker is built with privacy as a core value. This policy is plain-English and covers all regions including the EU (GDPR), California (CCPA), and users worldwide.
Profile Locker is an Android application developed and published as an independent project. For any privacy-related questions, contact us at ir9977@gmail.com.
When this policy says "we", "us", or "our", it refers to the developer of Profile Locker.
Profile Locker stores the following information locally on your device only, using Android's Room database and DataStore Preferences. None of this data is ever transmitted to us or any third party.
To detect which app is in the foreground (required for enforcement), the app reads from Android's UsageStatsManager API. This data is processed on-device in memory only and is never stored persistently or transmitted anywhere.
Profile Locker does not collect, access, or transmit:
The app contains no internet permission in its manifest. It is technically incapable of transmitting data over the internet.
Profile Locker requests only the permissions it strictly needs. Each is used solely for the stated purpose and no data leaves your device.
| Permission | Why it's needed | Required? |
|---|---|---|
| Usage Access (PACKAGE_USAGE_STATS) |
Reads which app is currently in the foreground so profile rules can be enforced. Processed on-device only — never stored or transmitted. | Yes |
| Draw Over Apps (SYSTEM_ALERT_WINDOW) |
Displays the lock-screen overlay on top of blocked apps. Without this, the overlay cannot appear above third-party apps. | Yes |
| Foreground Service (FOREGROUND_SERVICE) |
Keeps the enforcement service running while the screen is on, including through app switches and during Kids/Study lock sessions. | Yes |
| Boot Completed (RECEIVE_BOOT_COMPLETED) |
Restores the active profile automatically after the device restarts so rules stay active without manual re-activation. | Yes |
| Wake Lock (WAKE_LOCK) |
Prevents the CPU from sleeping during the enforcement polling loop so app blocking remains responsive even on power-saving devices. | Yes |
| Notifications (POST_NOTIFICATIONS) |
Shows the persistent notification with active-profile name and quick-switch actions in the notification shade. | Optional |
| Query All Packages (QUERY_ALL_PACKAGES) |
Lets the app list all installed apps on the device so you can choose which apps to allow in each profile. No data about installed apps is transmitted off-device. | Yes |
| Vibrate (VIBRATE) |
Provides haptic feedback on button presses and PIN entry for a better user experience. | Yes |
| Biometric (USE_BIOMETRIC) |
Enables fingerprint / face unlock as an alternative to entering a PIN (feature in development). No biometric data is stored by the app. | Optional |
All app data is stored in the device's private internal storage — inaccessible to other apps without root access.
PIN security: Your master PIN is never stored in plain text. It is hashed using PBKDF2-HMAC-SHA256 with 310,000 iterations and a random 128-bit salt, meeting the OWASP 2023 recommended minimum for password hashing.
No cloud backup: The app declares android:allowBackup="false" and explicitly excludes all databases, shared preferences, and files from Android's automatic cloud backup (Google Backup). Your security configuration cannot be restored to a different device without physically setting it up again.
Network security: The app is configured with a network security policy that blocks all cleartext (HTTP) traffic. Combined with the absence of an internet permission, the app cannot communicate over the network at all.
Profile Locker is a parental-control tool. It is intended to be configured and managed by adults (parents or guardians) on a device used by a child. The app itself does not target children as its audience.
We do not knowingly collect personal information from children under 13 (or under 16 in certain jurisdictions). Because the app collects no personal data from anyone — child or adult — and operates entirely offline, it does not implicate data-collection obligations under the US Children's Online Privacy Protection Act (COPPA) or equivalent laws.
If you believe a child has inadvertently provided personal information through this app, please contact us at ir9977@gmail.com and we will address your concern promptly.
Profile Locker does not integrate with any third-party service that processes personal data. Specifically:
Google Play Store: The app is distributed through the Google Play Store. Google's own privacy policy governs any data collected by the Play Store itself during download and installation — data we do not receive or control.
All data is retained on your device for as long as the app is installed. Because we do not hold any data on external servers, there is nothing for us to delete on your behalf.
To delete all app data, use any of these methods:
If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) and/or UK GDPR may apply to you.
All data processing by Profile Locker occurs locally on your device and is necessary for the app to function (the service you explicitly requested by installing and using it). This constitutes the legal basis of contractual necessity (Article 6(1)(b) GDPR). Because we do not receive or process your personal data on our systems, we are not a data controller or processor under the GDPR with respect to your locally stored app data.
You can view all data the app holds by opening Profile Locker — your profiles and settings are fully visible in the app.
Delete all data at any time via Settings → Reset All Data, or by uninstalling the app.
Edit or update any profile, rule, or setting directly inside the app at any time.
All your data is stored locally on your device and you retain full control of it.
You can stop all processing at any time by uninstalling the app.
You can restrict processing of any specific data by editing or deleting individual profiles or settings.
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) may apply.
Profile Locker does not collect, sell, share, or disclose any categories of personal information as defined by the CCPA. All data remains on your device.
Profile Locker is available worldwide. Because the app processes all data locally on your device and never transmits data to our servers, there is no cross-border data transfer to consider.
Regardless of your country of residence, our commitment is the same: your data stays on your device, we collect nothing, and we share nothing.
We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page. For material changes, we will make reasonable efforts to notify users (for example, through an in-app notice on the next launch).
Continued use of the app after a revised policy is posted constitutes your acceptance of the updated terms. If you disagree with any changes, you can stop using the app and uninstall it at any time.
If you have questions or concerns about this Privacy Policy — including GDPR or CCPA requests — please reach out:
You also have the right to lodge a complaint with your local data protection authority. For EU residents, a list of national authorities is available at edpb.europa.eu.