The short version: your training data is yours, it's only shown to people you connect with, and we don't sell it. Last updated September 11, 2026.
Your account basics — name, email, handle, city, a short bio, and a profile photo if you add one. What you put into the app: workout logs, sets, weights, reps, RPE, PRs, goals, plans, streaks, squad memberships, feed posts, comments, kudos, direct messages, squad chat, and the photos and video clips you attach to a session. If you report or block someone, we keep that record. When something is reported, the reported item itself — a workout, a message, or for a reported conversation its most recent messages — is shown to our moderator to review; nothing beyond that is opened. If you turn on notifications, we store a push token for your device and a short diagnostic log of registration events so we can tell why a notification failed. If you subscribe, we store which subscription you hold and when it expires. Sign-in is handled by Clerk, our authentication provider; we never see or store your password. Our server keeps ordinary request logs, which include IP addresses, for a short time.
If you connect Apple Health or an Apple Watch, we read heart rate to show effort on the workouts you log, and — only if you turn it on — finished workouts to import into your feed. Body weight and birth year are optional, manually entered, and shown only to you. Health data is never sold and never used for advertising.
We read two things from Apple Health, and only if you grant permission: heart rate during sessions you log, and — as a separate switch — finished workouts to import. We read; we never write. Nothing we put in the app is written back into Apple Health, and no health data of any kind is stored in iCloud. Health data is never used for advertising, never used for marketing, never sold, and never mined to build profiles or train anything for anyone else's benefit. The only place heart rate travels outside our own servers is to the AI coach, and only if you turn on that separate heart-rate permission described below. You can revoke our Health access at any time in iOS Settings › Privacy & Security › Health, and revoking it stops the reading immediately.
The coach is off until you explicitly turn it on — the app asks for your permission first and nothing is sent to any AI before you grant it. With your permission, the training data you log (workouts and sets, goals, body-weight entries, and the notes you type to the coach) is sent to Anthropic's Claude to generate your coaching. Heart-rate summaries are included only if you grant that separately. Your name, email, private messages, and photos are never included, and Anthropic does not train its models on your data. The coach keeps short notes about your training; turning it off in Settings › Privacy withdraws your permission and permanently deletes those notes, your reads, and your coach conversation. Coaching output is training guidance, not medical advice, and any reply can be reported from the chat. The coach suggests; it never decides. No automated system here closes your account, changes what you pay, restricts what you can use, or makes any other decision with real consequences for you. Every number the coach gives you is a suggestion you're free to ignore.
Payment happens entirely inside Apple's system. We never see your card, your billing address, or your Apple ID. What reaches us is whether you have an active subscription and when it expires, synced through RevenueCat, which we use to keep entitlements straight across devices. That is the whole of it — no purchase history beyond your own subscription status.
If you add a GIF to a comment, your search runs through GIPHY and the GIF is loaded from GIPHY's servers. Your search terms go to GIPHY; your identity does not.
Run the app. Your workouts appear to people you've connected with — your squads and followers — because that's the point of Locked In. We don't sell your data, we don't share it with advertisers, and there are no ads.
Squad members see your finished workouts, your streak, and where you sit on the squad's weekly board if the owner turned one on. Followers see your workouts in their feed. Anyone who knows your handle can find your profile — your name, city, bio, photo, and the workouts you've posted. Direct messages and squad chat are visible only to the people in them. Your body weight, your birth year, your goals, and everything the coach tells you are yours alone and appear on nobody else's screen. Blocking someone hides your content from them and theirs from you, both directions, and closes the door on messages.
No location tracking. No contact-list uploads. No background activity monitoring. No advertising SDKs, no analytics SDKs, no crash-reporting service, no tracking across other apps or websites, and no profile of you anywhere — you can check the last part by looking at what the app is built from. What we do keep is small and boring: a push token and a short registration log if you turn on notifications, and ordinary web server logs with IP addresses. Neither is used to build a picture of you.
Six companies touch your data, each for one job. Clerk handles sign-in and holds your credentials so we don't have to. Railway hosts our servers, in the United States. Apple processes payments and delivers push notifications. RevenueCat tells us whether your subscription is active. GIPHY receives your GIF search terms, and nothing that identifies you. Anthropic receives your training data to generate coaching, and only after you turn the coach on. That is the complete list. Each of them is under a contract that requires them to protect your data to at least the standard described on this page and to use it only for the job we hired them for. We don't sell your data to anyone, and we don't hand it to advertisers, data brokers, or anyone building a profile of you.
Your data lives on servers we rent from Railway in the United States — Railway's US West region, in California. Media you upload — photos and video clips — is stored on the same infrastructure and served from it. We're based in the United States and run the service from there, so wherever you use Locked In from, your data is stored and handled in the US. If that changes, this page changes with it.
Your training data stays as long as your account does — that's the point of a log, and we don't quietly age it out. Push diagnostics and server request logs are short-lived: about 30 days. When you delete your account, everything listed in the next card goes immediately. A few things outlive it on purpose, and you should know which. Messages you sent stay in the conversations you sent them to, with your name replaced by “Someone” — a group chat isn't rewritten because one voice left it. Blocks stay in force, because a block you made should keep working after you're gone. Reports stay with the thing they were filed about, so a pattern of abuse doesn't reset when a reporter leaves. None of those three carry your name, your email, or your profile. Records tied to a purchase may persist a little longer where tax rules require it; those live with Apple, not with us.
Everything travels over encrypted connections. Access to the servers and the database is limited to the founder, over credentials held in a password manager with two-factor authentication. Sign-in credentials are Clerk's problem, not ours, which means a breach of our systems doesn't expose a password. Your photos and clips sit behind an authenticated route, not on a public URL anyone can guess. We don't hold payment details at all. None of that makes us unbreakable, and anyone who tells you their systems are is selling something.
You can see what we hold, correct it, take it with you, and have it deleted. Most of it you can do yourself: your profile and body-weight history are editable in Settings, your workouts are editable and deletable one at a time, your training history exports as a CSV, and account deletion is one screen. For anything you can't reach from inside the app — a full copy of everything, a correction we hold that you can't edit, a question about why we have something — email privacy@wearelockedin.com and we'll answer within 30 days. You can object to a use you disagree with, and you can withdraw a permission you granted, including the AI coach, without losing the rest of the app. We won't degrade your account, charge you more, or treat you differently for asking.
Settings → Delete account, and it happens on the spot — no queue, no waiting period, no email exchange. It removes your profile, your workouts, your photos and clips, your comments and kudos, your follows, your goals, your notifications, your badges, your squad and plan memberships, your push registration, and your sign-in record with Clerk. If you owned a squad or a plan, it passes to the next member; if you were the only member, it goes with you. Three things stay, and the card above says exactly what they are and why. There's no undo and no way for us to bring an account back, so export first if you want a copy.
If your data is exposed in a breach, we'll tell you — by email and in the app — as soon as we understand what happened, and we'll say what was taken rather than issuing a vague apology. Where the law sets a deadline for notifying you or a regulator, we'll meet it.
If we get a subpoena, a warrant, or a court order, we comply with what it actually demands and nothing more, and we'll tell you unless we're legally barred from it. If someone credible tells us a person is in danger, we'll share what's needed to help. If Locked In is ever sold or merged, your data goes with it, this policy follows it, and you'll hear about it before it happens — with time to export and delete first if you'd rather not come along.
We don't sell your personal information, and we don't share it for cross-context behavioral advertising — there's nothing to opt out of, because it never happens. We don't run ad networks, ad SDKs, or analytics products in the app, so there's no profile of you anywhere to object to. Depending on where you live you may have the right to know what we hold, to get a copy, to correct it, to delete it, and to limit how we use sensitive information like health data. Those rights are in the card above, and the route is the same for everyone: privacy@wearelockedin.com. If we say no to a request, tell us and we'll look again, and you can take it to your state attorney general.
Locked In is for people 13 and over. We don't knowingly collect anything from anyone younger, and we don't build features aimed at children. If you're a parent or guardian and you think your child made an account, email privacy@wearelockedin.com and we'll delete it and everything attached to it.
Locked In is made by Trevor Laibl, a sole proprietorship based in San Diego, California, and we're the ones responsible for the data described on this page. Privacy questions, requests, and complaints go to privacy@wearelockedin.com, and one person reads that inbox: the founder. We don't publish a postal address — it's a one-person operation and that address would be a home — so email is the way to reach us, and we answer.
If this policy changes in a way that matters, we'll say so in the app before it takes effect.
Health data has its own consumer health data notice, as some states require. Questions? See the support page, or our terms of use.