Last updated 30 August 2026.
Unlocked has no servers. There is no account, no login, and no analytics. Everything the app knows stays on your devices and in your own iCloud.
Challenges, points, spending history, collection progress, curfew hours and your parent PIN are stored on the device. If you are signed in to iCloud, that same data syncs through your own private iCloud database, which is what lets a parent approve from their phone.
We cannot read that data. It sits in your personal iCloud account under Apple’s encryption, not on any server we operate. We do not receive a copy.
No analytics, no advertising, no crash reporters, no third-party SDKs of any kind. Nothing is sent anywhere when you use the app.
Unlocked asks permission to send notifications so it can warn before purchased time runs out, and tell a parent when something is waiting for approval. These are generated on your device. No push service receives their contents.
Unlocked is set up and administered by a parent, for use by their own child. It asks a child for nothing — no name, no email, no photo, no account. The name entered during setup is a label shown only on the parent’s screens and never leaves your devices.
Parent settings has a scoped reset that clears history, screen-time grants, and if you choose it, the challenges and rewards themselves. Deleting the app removes its local data; deleting it from iCloud settings removes the synced copy. Because we hold nothing, there is nothing to request from us.
If this policy changes in a way that affects what is stored or shared, the date above changes and the app will say so before the change takes effect.