WonLock · Legal
Privacy Policy.
Last updated: September 23, 2026
Entity: Adrien Marsden
Covered app: WonLock for iOS. This policy covers WonLock only. Other apps by Adrien Marsden have their own policies.
1. The short version
WonLock has no accounts and no login. Nothing you put into it is sold, used for advertising, or used to track you. There is no advertising identifier and no third-party analytics or advertising SDKs.
Your record lives in two places, both of them yours: on your device, and, if you are signed in to iCloud, in your own private iCloud database, which we cannot read.
Two features do send something off your phone, and only when you use them: the AI helper, and the timer on your Lock Screen. Section 3 lists exactly what each one sends. Neither one keeps a copy.
2. What the app stores
Everything below is created by you, inside the app, and stays in your own storage:
- Your goals: the habits you committed to, their settings, and when you started.
- Check-ins: your answers to the app's prompts: whether you did the thing, and when.
- Your balance and history: earned minutes, when they expire, deductions, and savings progress.
- Your answers during setup and at later check-ups.
- Preferences: theme, reminder times, quiet hours, and which app-blocking features you turned on.
We do not keep a copy of any of it. We run no database of users.
3. What leaves your phone
- AI helper (only when you use it). When you ask the helper to set up a goal or change a setting, the text you typed, plus the goals and settings it needs to answer, goes to our relay server. The relay passes it to Google's Gemini API to write a reply and sends that reply back. The relay stores nothing. It checks an Apple App Attest key, an anonymous key for this install that is not linked to you, to confirm the request came from the real app. If you never use the helper, no text leaves your phone.
- Lock Screen timer. To start or update the countdown on your Lock Screen, the app sends the Apple push token for that countdown and the timer's state (time left, when it ends) to our relay, which forwards it to Apple. It stores nothing and receives no goal text.
- Family mode. If a parent and child link their phones, the child's tasks, check-ins and earned time are shared with the linked parent through iCloud sharing. Nobody else can see them, and either side can unlink.
- Purchases go through Apple (section 8).
4. Screen Time data never leaves your device
If you turn on app blocking, WonLock asks for Screen Time authorization and you choose which apps to shield. Two things are worth stating plainly:
- Your app selections are opaque to us and to the app itself. Apple hands the app anonymous tokens, not a readable list of what you use. They are stored on your device and in your app group, and nowhere else.
- Usage figures are walled off by iOS. The weekly pattern you see is drawn inside the Apple DeviceActivity report extension, which by design cannot pass its data back to the app, let alone off the phone. WonLock cannot read your usage and cannot report it to anyone.
You can withdraw Screen Time authorization at any time in iOS Settings → Screen Time, and every shield the app set is lifted.
5. iCloud sync
If you are signed in to iCloud, the app syncs the data in section 2 to your own private CloudKit database so your history follows you between your devices. That database belongs to your Apple Account. We have no access to it, and Apple provides us no way to read it. If you are not signed in to iCloud, the app works exactly the same way and keeps everything locally.
6. Diagnostics stay on the phone
The app keeps a small local record of anonymous product events — for example, that a check-in was answered — in a file on your device. It is never uploaded. It exists so that the app's own screens can show you your history, and it is deleted with the app.
7. Health data
WonLock does not read any Health data in this version. If a future version adds it, it will ask you first, the data will be used only to verify commitments you set yourself, and it will stay on your device — and this policy will be updated before that version ships.
8. Purchases
Subscriptions are sold and processed by Apple through the App Store. We never see or store your payment details. The app receives only the answer from Apple to “is this person subscribed?”. Manage or cancel a subscription in iOS Settings → your name → Subscriptions.
9. Notifications
Reminders are scheduled on your device by the app itself. The only push token the app sends anywhere is the Lock Screen timer's, described in section 3.
10. Deleting your data
- Inside the app: Settings → Your data → Delete everything. It removes your contracts, check-ins, balance and history from the phone and from iCloud, on every device. It cannot be undone, and it does not cancel a subscription.
- By deleting the app: everything stored on the device goes with it. To remove the iCloud copy as well, use iOS Settings → your name → iCloud → Manage Account Storage.
Because we hold nothing, there is nothing for us to delete on your behalf — and no request form you need to fill in.
11. Children
A parent can set WonLock up on their child's phone in family mode. A child's record stays on their phone and in iCloud, shared only with the parent they are linked to (section 3). We do not collect personal information from children, and we do not knowingly receive any. A parent can delete a child's data at any time as described in section 10.
12. Your rights
Under the GDPR, the UK GDPR and the CCPA you have rights of access, correction, erasure, portability and objection over personal data a company holds about you. We hold none: our two relays keep nothing they are sent, we operate no database of users, and we do not sell or share personal information. Your copy of the data is on your own devices and under your own control, and section 10 explains how to erase it.
13. Changes
If this policy changes, the date at the top changes with it, and any change that widens what the app collects will be described in the app before it takes effect.
14. Contact
Questions about this policy, or about anything the app does with your data:
Email: adrien.marsden.apps@gmail.com
Adrien Marsden