Privacy Policy

1. Overview

This policy describes how Rahman Mubarok handles information in connection with the LocnLock website and desktop application.

LocnLock is designed as an offline, local-first application. The desktop app does not require a LocnLock account, cloud backend, or synchronization service.

2. Desktop application data

The vault — your projects, entries, accounts, secure notes, links, and files — is stored in the app's local data folder on your own device; backups and exports are written to locations you choose. Project names, entry keys, values, and notes, all account fields, secure notes, and saved links and files are encrypted at rest with AES-256-GCM. Structural metadata — such as environment labels, the sensitive flag, display order, timestamps, relationships, per-project feature settings, and stored file sizes — remains local plaintext.

The current application does not send vault content, usage telemetry, crash reports, or analytics to Rahman Mubarok.

3. Website data

The current website does not use marketing cookies, advertising trackers, or product analytics. Standard hosting infrastructure may still process technical request data such as IP address, user agent, requested URL, and timestamps for security and delivery purposes.

If you join the macOS waitlist, the email address you submit is processed by EmailOctopus, our email service provider, under its own privacy policy, solely to notify you when the macOS version becomes available. The address is not shared further or used for any other purpose, and you can unsubscribe from any message.

If analytics, additional mailing lists, hosted support forms, or other hosted services are ever added, this policy will be updated first and the effective date above revised.

4. Purchases and support

LocnLock is purchased through the Microsoft Store. Microsoft processes billing, transaction, tax, and fraud-prevention information under its own privacy policy; Rahman Mubarok does not receive payment card data.

Information voluntarily sent in a support request may be used to answer that request and maintain necessary business records. Users should not send passwords, Recovery Keys, tokens, vault exports, or other secrets in support messages.

5. Retention, rights, and contact

Local vault data remains under the user's control; Rahman Mubarok never holds a copy and cannot access, retain, or delete it.

Website request data is kept only as long as the hosting provider's security and delivery purposes require. A macOS-waitlist address is kept until the availability notification is sent or you unsubscribe, whichever comes first. Support correspondence is kept as long as needed to resolve the request and maintain necessary business records, then deleted. Purchase records are held by Microsoft under its own privacy policy.

Depending on where you live, you may have the right to access, correct, or delete personal information handled by Rahman Mubarok — in practice that covers support correspondence and waitlist entries, since vault contents never reach the operator. Send requests to support@locnlock.com; they are honored within a reasonable time unless a legal obligation requires keeping a record.

Privacy questions may be directed to support@locnlock.com.