Privacy Policy

1. Overview

ShakeLock ("we", "our", "the app") is a digital wellbeing / focus app that locks selected apps on your device until you shake your phone to unlock. This privacy policy explains how ShakeLock for iOS collects, uses, and protects your data.

2. Data We Collect

2a. Data stored on your device only (never sent to servers)

• Locked-app selections, difficulty, cooldown duration, and other preferences
• Shake-detection sensor data (accelerometer, gyroscope)
• Local unlock counter (used only to throttle interstitial ad frequency)
• Tutorial progress and coach-mark completion flags

2b. Data stored on our servers (Firebase)

• Anonymous user ID (Firebase Anonymous Authentication) — used solely to authenticate access to the app-search catalog

Note: ShakeLock does NOT include SOS, teams, push notifications, streaks, medals, or any other server-synced activity feature. Your usage activity is not recorded on our servers.

2c. Data collected by third parties

• Google AdMob: Advertising-related data including IDFA, collected only if you grant permission via Apple's App Tracking Transparency (ATT) — see §4.
• Apple App Store / StoreKit: Subscription billing is handled entirely by Apple. ShakeLock does not store payment information.

3. How We Use Your Data

4. Tracking & Advertising (App Tracking Transparency)

ShakeLock uses Apple's App Tracking Transparency (ATT) framework. When you first launch the app, you'll see a system dialog asking your permission to track your activity across other companies' apps and websites.

What we track (only with your permission)

• Your device's advertising identifier (IDFA)
• Ad impression and click interaction data
• Aggregated information shared with Google AdMob for personalized advertising

If you allow tracking

• You'll see personalized ads that may be more relevant to you
• Anonymous interaction data is shared with Google AdMob

If you decline tracking (recommended for privacy)

• You'll see only non-personalized ads
• No advertising identifier is collected
• App functionality is unchanged

You can change this anytime

iOS Settings → Privacy & Security → Tracking → ShakeLock

Domains used for tracking and ad delivery

googleadservices.com, googlesyndication.com, doubleclick.net, google.com, gstatic.com

We do not sell your tracking data to any third party other than the advertising service listed above.

5. Screen Time API (Family Controls)

ShakeLock uses Apple's Screen Time API (Family Controls framework) to manage app restrictions on your device. This is the core functionality of the app.

What the Screen Time API does

• Blocks access to apps you select for locking
• Displays the shield screen when you try to open a locked app
• Temporarily removes the restriction after you complete the shake unlock

What the Screen Time API does NOT do

• Does NOT monitor which apps you use or how often
• Does NOT collect browsing history or app usage data
• Does NOT transmit any Screen Time data to servers
• All restriction management happens locally on your device

Screen Time API requires your permission. You can revoke it at any time in iOS Settings.

6. App-Search Catalog (Firebase)

When you add a new app to lock, the search feature uses Google Firebase (Firestore + Cloud Functions).

Information sent

• Your search query string (e.g., "YouTube")
• Anonymous user ID (Firebase Anonymous Authentication)

Information NOT sent

• Any personally identifying information
• History of apps you previously locked
• Unlock counts or usage data

Gemini AI usage

If a search returns insufficient results, a server-side fallback uses Google's Gemini AI to convert your query into a normalized app name. Gemini AI only receives the query string — no usage data or personal information is ever sent. Gemini's output is used only to look up entries in our curated catalog; it is never displayed directly as free-form text to the user (so no hallucinated apps appear in results).

App Check

Firebase access is protected by Apple App Attest (iOS 14+) via App Check, ensuring only genuine ShakeLock app instances can reach the server.

Server region: asia-northeast1 (Tokyo).

7. Data Sharing

• We do NOT sell your personal data to third parties.
• Advertising-related data is handled by Google AdMob in accordance with their privacy policy (only with your permission).
• Subscription billing data is handled entirely by Apple and is not shared with the app.

8. Data Retention

• On-device data: Immediately deleted when you uninstall the app.
• Firebase anonymous user ID: Retained while you use the app. Deleted immediately when you request deletion via the in-app "Delete Account" button in Settings.
• Search query logs: Not retained long-term on the server (only standard short-term Cloud Functions logs).
• Subscription information: Managed by Apple App Store.

9. Data Deletion

• Uninstall the app: All local data is immediately deleted from your device.
• Delete Account (in-app): Use the "Delete Account" button in the app's Settings screen to immediately delete your Firebase anonymous account.
• Cancel subscription: Go to iOS Settings → Apple ID → Subscriptions → ShakeLock.
• Contact us: For any questions about data deletion, contact us at k2+shakelock-ios@saki-paru.com.

10. Data Security

• All shake-detection processing happens on-device.
• Server communication uses HTTPS (TLS) encryption.
• Firebase Security Rules and App Check restrict data access to authenticated requests from genuine app instances.
• No passwords are stored (anonymous authentication only).

11. Children's Privacy

ShakeLock is not directed at children under 13. We do not knowingly collect personal data from children. The app is designed as a self-management tool for adults; use by children under 13 is not recommended.

12. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top will be revised accordingly. If we make material changes, we may also notify you within the app.

13. Contact Us

If you have questions about this privacy policy, contact us at:

k2+shakelock-ios@saki-paru.com