Privacy Policy

Lock It
Package: com.appfactory.calculator
Policy version 4.0.8 · Effective September 20, 2026
Publisher: App Factory · support: support@afserver.dev
Companion: Terms of Use · Account deletion

Summary: Lock It is a private vault with a calculator entry screen. Your unlock equation is stored only as a salted hash. Notes, keys, media, and chat history are encrypted on this device (AES-GCM). When you are signed in we also store an encrypted recovery of notes, keys, numbers, and settings on your account. Camera photos and imported files stay on this device unless you pay Watch Bank credits for the optional encrypted cloud locker (Cloudflare). Ciphertext only — we cannot read it without your equation. We do not sell personal data. Skip is a local vault only. Messages, groups, Discover, and Encrypted Cloud need Google or email. Freemium may show Google ads (vault-home banner, occasional full-screen ads, optional rewarded ads in Watch Bank). Paid plans (Premium Pro and Offline Vault) are ad-free. Purchases go through Google Play.

1. Who we are

Publisher of package com.appfactory.calculator. Contact: support@afserver.dev, Play listing support email, or Vault → Settings → Contact publisher.

2. What this app is

Everyday / scientific calculator face. A secret equation unlocks a private on-device Vault: Notes, Media, Camera, Keys (passwords + optional 2FA), Phone Numbers, Invite Friends, Vault Weather, Secure, Settings, Features & Fixes, and optional Messages (1:1 chats and groups) plus Discover (opt-in people board and groups).

Freemium: full vault and Messages, with ads. Live 1:1 video/voice uses Watch Bank credits (1 credit = 1 minute of video or 3 minutes of voice).
Premium Pro (Play product id com.appfactory.calculator.unlimited, $4.99/mo): same product, no ads, plus live 1:1 video/voice (90 minutes video and 3 hours voice each week; extra time with Watch Bank credits)
Offline Vault (lifetime product IDs such as .offline / .plus / .premium): local vault only · no ads · no Messages, Discover, or live calls

Optional groups exist inside Messages. No in-vault web browser. No crypto trading app.

The Play listing and the Android home screen use the name Lock It and a vault-door icon. The calculator is the in-app face after you open Lock It.

3. Account requirement

First open: agree to these Terms and this Privacy Policy, then Google, email, or Skip. Skip is a local Freemium vault only. Messages, groups, Discover, Encrypted Cloud, and live calls need Google or email later. The calculator face still works after unlock. The working vault stays on-device. Recovery is ciphertext only and needs your equation.

4. Data on your device

Calculator history, memory, preferences
Salt + salted hash of your equation (never the plain equation)
Sealed vault payload (AES-GCM; key derived from equation via PBKDF2), including notes, keys, numbers, photos, and files
Privacy Gate acceptance + policy version
Local entitlement / Premium restore cache
Blocked-user list and report drafts (safety controls)

5. Data we process in the cloud (when you use those features)

Account: email, display name, Firebase Auth UID (Google or email/password)
Messages profile: display name, optional handle/bio, optional profile photo, invite code, online/offline presence (you can Appear offline)
Friend requests & 1:1 delivery: short-lived message/media transfer between two accounts; chat history is kept on each phone after delivery
Live 1:1 calls: Freemium uses Watch Bank credits. Premium Pro includes a weekly pool (90 minutes video and 3 hours voice, Monday 00:00 America/Los_Angeles) then credits. Small signaling messages go through Firebase so the call can connect. Call audio and video travel between the two phones (peer-to-peer). If a direct path fails, a relay (TURN, for example Cloudflare) may carry the media. We do not store call recordings. Weekly live time is kept on your phone with your account.
Watch Bank credits: earn by watching optional rewarded ads (capped per day) or by buying packs on Google Play ($0.99 = 10 credits, $4.99 = 75, $9.99 = 200). Credits can skip some full-screen ads, pay for Encrypted Cloud (10 credits = 1 GB for 30 days), send to a friend, start live calls on Freemium, and add extra live time after the Premium Pro weekly pool.
Encrypted cloud locker (optional): if you buy space with Watch Bank credits, files you add are encrypted on this phone with your equation, then stored as ciphertext on Cloudflare. We cannot read them. Space is 10 credits per GB per month, or 10 cloud ads = 1 GB (20 ads in a day = 2 GB). Each GB block lasts 30 days. You can turn on Keep this GB so Watch Bank credits renew that block. If a block ends and you do not add GB, we hold the files for 2 days, then remove files from Encrypted Cloud until you fit your remaining paid space (none paid = the locker is emptied). Copies you already saved to the phone or Import Media are not removed. You can save files back to your vault or remove them. A send is a sealed pointer to another Lock It user for 2 days; only they can open it. If they do not add it, we remove it and you can send again.
Discover board (opt-in): public card fields you publish (name, city/ZIP-derived coarse location, bio, Woman/Man, optional stamp photo) — not your vault notes, keys, or camera roll. Freemium and Premium Pro can publish.
Encrypted recovery: while signed in we upload a ciphertext copy of notes, keys / 2FA, phone numbers, settings, weather place, and related vault metadata. Camera photos and imported files stay on the device unless you add them to the optional cloud locker. The blob is not readable without your equation. You can also tap Save recovery now in Settings
Optional remote wipe signal: a nonce you can arm for other devices on the same account
Analytics: the Firebase Analytics SDK starts with the app and records app open, account creation, and the first vault unlock. You can turn this off in Settings. In the UK, EEA, and Switzerland it waits until the ads consent choice. Never equation, note bodies, or passwords
Purchases: Google Play Billing product IDs and entitlements (Premium Pro subscription, Offline Vault lifetime, optional Watch Bank credit packs). Google processes the payment. We receive the product id and that you paid — not your card number
Ads: AdMob may show Freemium a banner on vault home (under Calculator), occasional full-screen ads after some actions (including calculator use), app-open ads, and optional rewarded ads in Watch Bank. There is no banner on the calculator face or while the vault is opening. AdMob may process device/advertising identifiers. Paid plans are ad-free
Vault Weather: city/ZIP you enter is sent to weather providers (for example Open‑Meteo, U.S. weather.gov, ZIP lookup) to fetch forecasts — not continuous GPS tracking
Features & Fixes: feedback you submit is stored as you choose (typically on-device / publisher channel); do not include secrets or your equation

We do not sell personal data. We do not keep a permanent public chat archive of vault messages.

6. Permissions (Android)

Internet / network state — account, Messages delivery, weather
GET_ACCOUNTS / USE_CREDENTIALS — Continue with Google (account picker on the phone)
Camera — Vault Camera and optional chat capture (asked when you open the feature)
Microphone — live voice and video calls in Messages (asked when you start or take a call)
Contacts (read) — optional Phone Numbers import. The address book is not uploaded. Numbers you save in the vault can be included in encrypted recovery
Billing — Google Play purchases (Premium Pro, Offline Vault, optional credit packs)
Advertising ID — AdMob ads for Freemium

We do not need continuous GPS. Discover uses city/ZIP (and coarse geocode) when you choose to publish a card.

7. Children

Not directed to children under 13 (or higher digital-consent age where you live). You must be 13+ to accept Terms. Skip is a local vault only; Messages and groups need an account. We prohibit CSAE and CSAM. Child-safety reports: in-app Report, or support@afserver.dev. Confirmed CSAM is reported to NCMEC or your local authority.

8. Security honesty

The calculator face and on-device encryption reduce casual disclosure. They do not defeat malware, a compromised OS, advanced forensics, screen recording, or lawful process. We cannot recover a forgotten equation. If you cannot open the vault, those items can be gone. Limits on our responsibility for that loss are in the Terms of Use.

9. Your controls

Lock vault · Destroy vault contents · Wipe all data & reset app
Export / import local encrypted JSON (you control the file)
Appear offline · pin/mute chats · delete chat & unfriend
Block and Report users in Messages (and related safety flows)
Analytics on / off
Delete cloud account data (Settings when signed in) — removes Messages profile, invite code, Discover card, recovery doc, signs out; optional reset of Lock It on this phone (not Android)
Web deletion help: Account deletion

10. Retention

On-device vault (including camera photos and imported files): until you wipe or uninstall
Encrypted recovery on the account: until you delete the cloud account or overwrite it
Server message delivery: short TTL, not a permanent public chat archive
Account/profile/friends docs: until you delete account or request deletion
Discover card: until you unpublish or delete account

11. International users / rights

Depending on where you live (for example EEA/UK/California), you may have rights to access, correct, delete, or object to certain processing. Use in-app delete controls or email support@afserver.dev. We respond within a reasonable period.

12. Contact

support@afserver.dev — never send your secret equation by email if you can avoid it.

Terms · Account deletion