Privacy Policy

Effective Date: September 30, 2026

This Privacy Policy explains how Torah Lock ("we," "our," or "us") collects, uses, and protects information when you use our iOS application. We are committed to transparency and minimizing data collection.

1. Information We Collect

a. Information You Provide

During onboarding and app use, you may provide the following information, which is stored locally on your device. Some information is also included in product analytics as described below:

b. Location Data

If you grant location permission, Torah Lock collects your approximate location (city-level accuracy) to determine Shabbat times for your area. The following location data is stored locally on your device:

Your latitude, longitude, and timezone are sent to the Hebcal API to fetch Shabbat times. Advertising and analytics providers may also process coarse location inferred from technical connection data, as described below.

c. Analytics Data

We use PostHog, a product analytics service, to understand how the app is used and improve the experience. The following data is collected by PostHog and disclosed on the App Store:

Our PostHog product analytics are linked to your app identifier and, when provided, your first name. We use these data to improve the app, rather than sending these detailed responses to Meta. PostHog data is sent to servers in the United States. Advertising measurement is described separately below.

d. Information Collected Automatically

e. Advertising Measurement

We use Meta, AppSprint, and Postback to understand which advertisements lead to app installs, trials, and paid subscriptions and to improve our advertising. These services process app and device identifiers, app interactions, and technical information. AppSprint also discloses processing coarse location for analytics and developer advertising. Meta's SDK receives app activation and technical device information.

If you allow tracking through Apple's permission prompt, we associate permitted device and app identifiers with subscription events sent by RevenueCat to Meta. These events include trial starts, purchases, trial conversions, and renewals, and may include product identifiers, transaction amounts, currencies, and timestamps. This information may be linked with data from other companies' apps and websites for advertising measurement. Meta handles it under its own privacy terms.

You can decline tracking and continue using Torah Lock. When tracking is denied or restricted, our Meta integration does not collect the advertising identifier (IDFA), and RevenueCat is configured not to forward subscription events to Meta without authorized tracking consent. Aggregate attribution may still operate. Consent changes made while the app is closed are synchronized with RevenueCat the next time you open the app with a network connection.

Our Meta event parameters do not include prayer answers, religious preferences, mood responses, name, age, gender, precise location, or selected blocked apps. PostHog product analytics are described separately above.

2. Screen Time / Family Controls Data

Torah Lock uses Apple's FamilyControls and ManagedSettings frameworks to temporarily restrict selected apps during the morning enforcement window (5:30 AM – 12:00 PM).

3. How We Use Information

We use collected information to:

We also use information for advertising attribution and campaign measurement as described in Section 1e. Optional tracking is controlled through Apple’s App Tracking Transparency permission.

4. Third-Party Services

Torah Lock uses the following third-party services:

Each third-party service operates under its own privacy policy. We transmit only the minimum data necessary for each service to function.

5. Data Storage and Retention

The majority of your data is stored locally on your device in a shared App Group container:

We do not maintain a user account system and do not store personal user profiles on our own servers.

Data held by analytics, subscription, and advertising providers is retained according to the applicable service configuration, operational needs, and provider retention policies. Contact us for help with access or deletion requests concerning these providers.

Deleting the app will remove all locally stored data from your device. Deleting the app does not automatically delete data already held by service providers or cancel a subscription. To request deletion of analytics or advertising data, please contact us at the email below.

6. Device Permissions

Torah Lock may request the following device permissions:

You can revoke any of these permissions at any time through your device's Settings app.

7. Children's Privacy

We do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information, please contact us so we can investigate and arrange appropriate deletion. An App Store age rating does not constitute consent to tracking or replace parental responsibilities.

8. Your Rights and Choices

You can control your data in the following ways:

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA, including the right to access, correct, delete, or port your data. To exercise these rights, please contact us at the email below.

9. Data Security

We take reasonable measures to protect your data:

No method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will include a new Effective Date at the top of this page. We encourage you to review this policy periodically. Where required, we will provide additional notice or request consent for material changes.

11. Contact

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to request deletion of your data, please contact:

support@torahlock.app