Privacy Policy
Effective Date: March 28, 2026
This Privacy Policy explains how Torah Lock ("we," "our," or "us") collects, uses, and protects information when you use our iOS application. We are committed to transparency and minimizing data collection.
By using Torah Lock, you agree to the practices described in this policy.
1. Information We Collect
a. Information You Provide
During onboarding and app use, you may provide the following information, which is stored locally on your device:
- First name
- Age range (e.g., 0–2, 2–5, 5–13, 13+)
- Daily phone usage estimate
- Spiritual preferences and goals
- Profile photo (captured via camera or selected from your photo library)
- Digital signature (optional, via on-screen drawing)
- Daily check-in responses (calm, readiness, and connection scores)
b. Location Data
If you grant location permission, Torah Lock collects your approximate location (city-level accuracy) to determine Shabbat times for your area. The following location data is stored locally on your device:
- City name
- Latitude and longitude coordinates
- IANA timezone identifier (e.g., "America/New_York")
Your latitude, longitude, and timezone are sent to the Hebcal API to fetch Shabbat times. No other location data is transmitted externally.
c. Analytics Data
We use PostHog, a product analytics service, to understand how the app is used and improve the experience. The following data is collected by PostHog and disclosed on the App Store:
- Name (Contact Info) — Your first name, as provided during onboarding, is sent to PostHog as a user property.
- User ID (Identifiers) — A unique anonymous identifier assigned by PostHog (not your Apple ID or device ID) is used to associate analytics events with a single user.
- Product Interaction (Usage Data) — App events such as: onboarding progress, daily flow completion, psalm interactions, paywall views, streak milestones, settings changes, and feature usage. Event metadata may include psalm IDs, segment IDs, check-in scores, session duration, and language preferences.
- Other Diagnostic Data (Diagnostics) — Application lifecycle events (app open, app close) are captured automatically for diagnostic purposes.
All analytics data is used solely for analytics purposes, is linked to your anonymous user identity, and is not used for tracking as defined by Apple. PostHog data is sent to servers in the United States. PostHog does not use this data for advertising or sell it to third parties.
d. Information Collected Automatically
- App performance data (crashes, errors) via Apple diagnostics
- Subscription and purchase status via RevenueCat (RevenueCat receives your anonymous PostHog identifier for analytics attribution but does not receive personal information from Torah Lock)
2. Screen Time / Family Controls Data
Torah Lock uses Apple's FamilyControls and ManagedSettings frameworks to temporarily restrict selected apps during the morning enforcement window (5:30 AM – 12:00 PM).
- You choose which apps to restrict. This selection is stored locally on your device only.
- All restriction and monitoring functions operate entirely on your device using Apple's system frameworks.
- Torah Lock does not collect, transmit, or store which specific apps you use or how long you use them.
- The app includes an emergency unlock feature that temporarily removes restrictions. Usage of this feature is logged as an anonymous analytics event (no app details are sent).
3. How We Use Information
We use collected information to:
- Personalize your daily spiritual experience (psalm and segment selection based on your responses)
- Determine accurate Shabbat times for your location
- Track your completion streaks and progress locally
- Understand general usage patterns to improve the app
- Diagnose bugs, crashes, and performance issues
- Manage subscriptions and purchase status
We do not use your data for advertising, behavioral profiling, or cross-app tracking. We do not sell your data to third parties.
4. Third-Party Services
Torah Lock uses the following third-party services:
- Apple App Store — purchases, subscriptions, and crash reporting
- RevenueCat — subscription management and entitlement verification. RevenueCat receives your anonymous PostHog identifier for analytics attribution.
- PostHog — product analytics (hosted in the United States). Collects anonymous usage events and your first name. See Section 1c for details.
- Hebcal — Shabbat and Jewish calendar times. Receives your latitude, longitude, and timezone. Hebcal is a free, open-source service with no authentication required.
- Apple CoreLocation / CLGeocoder — reverse geocoding to determine your city name from coordinates. Processed on-device by Apple.
Each third-party service operates under its own privacy policy. We transmit only the minimum data necessary for each service to function.
5. Data Storage and Retention
The majority of your data is stored locally on your device in a shared App Group container:
- Daily progress, preferences, streaks, and settings are stored as local JSON files.
- Streak history is maintained on a rolling 90-day window; older entries are automatically removed.
- Shabbat time data is cached locally for 4–6 weeks and refreshed weekly.
We do not maintain a user account system and do not store personal user profiles on our own servers.
Analytics data sent to PostHog is retained according to PostHog's data retention policies.
Deleting the app will remove all locally stored data from your device. To request deletion of analytics data held by PostHog, please contact us at the email below.
6. Device Permissions
Torah Lock may request the following device permissions:
- Family Controls — required for the app restriction feature
- Location (When In Use) — optional, used to determine Shabbat times for your area
- Camera — optional, used to capture a profile photo during onboarding
- Photo Library — optional, used to select a profile photo from your library
- Notifications — optional, used for reminder notifications
You can revoke any of these permissions at any time through your device's Settings app.
7. Children's Privacy
Torah Lock is rated 4+ on the App Store. We do not knowingly collect personal information from children under the age of 13. The app collects a first name and age range during onboarding; for users under 13, a parent or guardian should provide this information and supervise use of the app. If you believe that personal data has been unintentionally collected from a child, please contact us and we will take appropriate action.
8. Your Rights and Choices
You can control your data in the following ways:
- Revoke location, camera, photo library, or notification permissions in iOS Settings
- Disable analytics and diagnostics sharing in iOS Settings
- Manage or revoke Family Controls permissions through iOS Settings
- Cancel subscriptions through your Apple ID settings
- Delete the app to remove all locally stored data
- Request deletion of analytics data by contacting us
If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA, including the right to access, correct, delete, or port your data. To exercise these rights, please contact us at the email below.
9. Data Security
We take reasonable measures to protect your data:
- All network communications use HTTPS encryption
- Local data is protected by iOS's built-in file system security and App Group sandboxing
- Local files use atomic writes to prevent data corruption
No method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will include a new Effective Date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
11. Contact
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to request deletion of your data, please contact: