LIFE LOCKER

SECURE, ORGANIZE, INHERIT

Privacy Policy

Last updated: 12 October 2026

Life Locker is an app for keeping your family's important documents, photos and records on your Android phone. This page explains what happens to that information, in plain words.

The short version

• Everything you put in Life Locker stays on your phone, locked and encrypted.
• We never see it. There is no account, no advertising, no tracking and no analytics.
• Life Locker has no internet access at all. Android doesn't give it permission to go online, so it can't send anything anywhere.
• Your information leaves the phone only when you choose: when you make a backup, share a document, print, save a copy outside the app, open a saved web link, or fill in a password in another app.

What we collect

Nothing. We, the developer, have no servers and receive no data from the app: not your documents, not your name, not how you use the app, not crash reports.

What Life Locker keeps on your phone

Only what you add, such as:

• documents, scans and photos (including Photo Bank photos and signatures)
• the people in your family and your family tree (names, dates, relationships, photos)
• folders, notes, contacts, records, reminders and expiry dates
• web links you save (a name and a web address) and which documents you've marked as related
• your valuables and document details (for example an ID number, a policy amount, or where the original is kept)
• passwords, cards and other entries you save in the Credential Manager
• your settings, such as the theme and the order each folder is sorted in

All of it is encrypted and kept in Life Locker's private storage, which other apps can't read.

How it's protected

• Your PIN. The app opens only with your 6-digit PIN. Fingerprint or face unlock can be used as a shortcut. Your PIN is never stored as it is, only in a scrambled form that can't be turned back into the PIN.
• Encryption. The database is encrypted with AES-256 (SQLCipher), and every file with its own AES-256-GCM key. Those keys are protected by your phone's secure hardware (Android Keystore) and never leave the phone.
• Extra checks for secrets. Showing, copying or filling a saved password, PIN or hidden field asks for your PIN or fingerprint first. A copied password is hidden from clipboard previews and cleared after 45 seconds.
• Screenshots are blocked unless you allow them in Settings.
• Hidden from other apps' screen reading. On Android 14 and later, the PIN screen and a password you reveal are hidden from accessibility apps that aren't screen readers, so they can't read them. Screen readers such as TalkBack still work.
• No recovery. Because only your phone holds the keys, nobody (including us) can reset your PIN or open your vault for you. If you forget your PIN and have no backup, the vault can't be opened. Please keep a backup.

When information leaves your phone

Only when you do one of these things:

Backups. "Export backup" saves one file (.llbackup) wherever you choose. It is encrypted with a password you set, and can't be opened without that password.

Automatic backup (optional, off until you turn it on). Once a week, Life Locker saves a new encrypted backup file to a folder you pick, but only if something has changed. It keeps the newest three and deletes older ones it made. So that it can run on its own, your backup password is kept on your phone, encrypted. If the folder you pick is synced by another app (for example Google Drive), that app uploads the encrypted file. Life Locker itself still never goes online.

Sharing and "Open with". When you share a document or open it in another app, that app receives a readable copy, because it needs to show it. From then on, that app's own privacy policy applies. Life Locker's temporary copy is deleted soon after.

Web links. A web link is kept in your vault like a document: just its name and address, encrypted. Life Locker never opens, downloads or checks the page itself. When you tap a link, Life Locker hands the address to your browser (the first time, it tells you the link opens outside the app); the visit is then between you, your browser and that website, and their privacy policies apply. When you share a page from your browser to Life Locker, only its address is saved. "Copy address" and "Share" send the address only where you choose.

Combine into one PDF. Joining files into one PDF happens entirely on your phone. The result is saved in your vault, encrypted, unless you choose On this device, which saves a copy outside Life Locker (it is not encrypted unless you protect it with a password), or Share, which sends a copy to the app you pick.

Printing and PDFs. A family summary, claim report or family tree you print or save as a PDF is not encrypted, so keep it somewhere safe. The family summary asks for your PIN first, and only includes passwords if you switch that on each time. Printing uses Android's print service and the printer you choose.

Autofill (optional, off until you turn it on in Android's settings). Life Locker can fill a saved login into another app or website, after your PIN or fingerprint every time. Choosing which login fits is done on your phone.

Life Locker is left out of Android's own Google backup and phone-to-phone transfer, so your vault is never copied that way. A .llbackup file is the only way to move it.

Features that use Google Play services

• Document scanner. Scanning uses Google Play services' document scanner, which handles the camera itself; Life Locker doesn't ask for camera permission.
• Face finding in "Resize for upload". To place the head correctly on a passport-size photo, Life Locker uses Google Play services' face detection.

Both run on your phone. Your documents and photos are not sent anywhere. These are Google's components and follow Google's privacy policy. The optional "Remove background" tool uses a model built into Life Locker, also on your phone.

Other things the app reads

• One contact, if you pick one. When you add a contact to a note, Android's contact picker gives Life Locker only the one contact you choose. Life Locker can't see your other contacts.
• Whether the date and time are set automatically, for the free trial (see below). Life Locker only reads the setting; it doesn't change it.
• Your country, for currency. To choose a currency for your valuables, Life Locker reads the country code of your SIM card or phone region. It stays on your phone. You can change the currency in Settings.

Notifications

Life Locker can remind you about expiry dates, your own reminders and backups. These are created on your phone. On a locked screen, they don't show document or reminder names.

Permissions

Life Locker asks for:

• Notifications (optional), for the reminders above
• Fingerprint or face unlock (optional), as a shortcut for your PIN

It also uses Google Play for purchases, and restarts its reminders after your phone restarts.

It does not ask for internet, camera, contacts, location, storage, or your advertising ID.

Purchases and free trial

The one-time Unlock Unlimited purchase is handled by Google Play. We never see your card or bank details. Google's payments privacy notice applies to the payment. Life Locker keeps only the Google Play receipt, encrypted on your phone, to confirm the purchase.

The Credential Manager, "Resize for upload" and "Combine into one PDF" are free for 90 days, counted from the first time you open the app or from 15 October 2026, whichever is later. That start date is kept on your phone and inside your backups, so restoring a backup doesn't restart the trial. The trial counts only while your phone sets its date and time automatically; if the clock is set by hand, the trial pauses until automatic time is back on. All of this is worked out on your phone.

Information about other people

Your vault may hold information about family members, such as their documents or dates in the family tree. It is protected the same way as everything else and never reaches us. Please make sure you're allowed to keep that information.

Deleting your information

• Deleted items go to Trash for 30 days, so you can undo a mistake. You can empty Trash sooner.
• Uninstalling Life Locker deletes everything it holds on your phone.
• Backup files you saved elsewhere (including automatic backups) stay where they are until you delete them yourself.

Children

Life Locker is not made for children and collects no information from anyone, including children.

Changes to this policy

If this policy changes, the date at the top changes too. Any important change will come with an app update.

Contact

Questions? Email gbpappstudio@gmail.com.