Privacy Policy

Last updated: September 26, 2026

Dua Lock (“we”, “us”, or “the app”) is the operator of this app. This Privacy Policy explains what information the app handles and how. Dua Lock is built privacy-first: we collect as little as possible, and most of your data never leaves your device.

If you have any questions, contact us at dualockapp1@gmail.com.

The short version

• We do not require an account. We do not ask for your name, email, or phone number.
• We do not sell your data, show you ads, or track you across other companies’ apps and websites.
• The list of apps you choose to block stays on your device.
• Three services process data off your device: RevenueCat manages your subscription, PostHog records anonymous usage events so we can see where the app confuses people, and AppsFlyer tells us which ad campaigns bring people in. None of them receive your name, your email, or which apps you block.

1. Information we do NOT collect

Dua Lock does not collect, store, or transmit:

• Your name, email address, phone number, or any account credentials (there are no accounts).
• Your precise location, contacts, photos, microphone, or camera data.
• The contents of your messages or activity inside other apps.
• Your advertising identifier (IDFA). The app never asks for tracking permission, and our ad-measurement SDK is built without the code that reads it.

2. Information stored only on your device

The following is created and stored locally on your device and is never transmitted to us or any third party:

• Your blocked-app selection. On iOS, this selection is handled through Apple’s Family Controls framework, which is privacy-preserving by design: the app receives only opaque, anonymous tokens and cannot see which specific apps you selected. On Android, your selection is stored in the app’s private storage. In both cases, the selection stays on your device.
• Your dua and session preferences, such as how often the pause appears and which dua was last shown.
• Subscription status flags used to enforce access and the grace period.

This on-device data is removed when you delete the app.

3. Information processed to manage your subscription

If you purchase Dua Lock Pro, your purchase is processed by:

• Apple App Store or Google Play, which handle the actual payment. We never receive or store your payment-card details.
• RevenueCat, Inc., our subscription-management provider, which records your purchase history and assigns a randomly generated, anonymous app-user identifier so the app can verify whether your subscription is active.

This information is not linked to your real-world identity (because we never collect one). RevenueCat processes it on our behalf under their own privacy policy: revenuecat.com/privacy.

The data involved is limited to:

• Purchase/transaction history for Dua Lock Pro.
• An anonymous app-user ID.
• Basic device/platform info (e.g. OS version, country) provided by the app store.
• Your device’s vendor identifier (IDFV) and IP address, which help match a purchase to the install it came from.

RevenueCat also forwards subscription events, such as a free trial starting, to PostHog and AppsFlyer (section 4), so purchases can be counted alongside the rest of the app’s usage.

4. Other services that receive data

These services receive data tied to random identifiers, never to your name or email:

• PostHog, Inc., for usage analytics. It receives which onboarding screens you view, whether you allow Screen Time and notification access, how many apps and categories you choose to block (counts only, never which ones), the mood and connection level you pick before a dua, which dua is shown, and when you unlock. Each event carries a random ID created on your device, basic device details (model, OS and app version, language), and your IP address, which PostHog uses to estimate your country and city. Privacy policy: posthog.com/privacy.
• AppsFlyer Ltd., for ad measurement. It relies on Apple’s SKAdNetwork, in which Apple, not AppsFlyer or us, connects an install to an ad and reports the result without identifying you. The AppsFlyer SDK sends an install event, two onboarding milestones (finishing setup and reaching the subscription screen), device details, your IP address, and your device’s vendor identifier (IDFV). The IDFV is shared only across our own apps and cannot recognize you in other companies’ apps. Privacy policy: appsflyer.com/legal/services-privacy-policy.
• Supabase, Inc., which hosts the library of duas the app downloads. Those requests carry no identifiers or usage data, though like any internet request they reveal your IP address to the server. Privacy policy: supabase.com/privacy.

5. How we use information

We use the information above only to:

• Verify whether your Dua Lock Pro subscription is active.
• Enforce the subscription grace period.
• Restore your purchase when you reinstall the app or tap “Restore Purchases”.
• See where people get stuck in the app, so we can fix it.
• Measure, in aggregate, which ad campaigns bring people to the app.

We do not use any of it to show you ads, build an advertising profile of you, or track you across other companies’ apps and websites.

6. Notifications

Dua Lock may send you local notifications (for example, when a pause begins) if you grant notification permission. These are generated on your device. You can turn them off at any time in your device settings.

7. Sharing and disclosure

We do not sell, rent, or trade your information. We share information only:

• With the service providers named above, each only for the purpose this policy describes.
• If required by law, or to protect rights, safety, and security.

8. Data retention

On-device data persists until you delete the app or clear its data. Subscription records held by Apple/Google/RevenueCat, and usage and attribution records held by PostHog and AppsFlyer, are retained according to their respective policies and applicable law.

9. Children’s privacy

Dua Lock is rated for general audiences and is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children.

10. Your rights

Depending on your region (for example, under GDPR or CCPA), you may have rights to access, correct, or delete personal data. Deleting the app removes everything stored on your device. Records held by our providers are tied to random IDs rather than your identity. To request access or deletion, contact us at dualockapp1@gmail.com and we will work with RevenueCat, PostHog, and AppsFlyer to handle it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, through an in-app notice.

12. Contact

Questions about this policy or your data:

Dua Lock
Email: dualockapp1@gmail.com