Who we are
Locknest is a digital-wellbeing and app-blocking app with optional family controls, made and operated by Md Mahabubur Rahman, an independent developer based in Dhaka, Bangladesh, who is the data controller for the data described here. Privacy contact: tulx.app@gmail.com.
You do not need an account
Locknest works without one. In that mode your blocking rules and your settings are stored on your device only.
What we collect
| Data | When | Why |
|---|---|---|
| A random install ID, app version, platform, language | Every install, on launch — unless you turn off Settings → Send anonymous install stats | Operate the service, deliver remote configuration, and see which versions are in use |
| Name and email (or, for a child, a username), hashed password, role | Only if you create an account | Sign-in, and syncing your rules across devices |
| A child's name, username, which apps they use and for how long, and the rules set for them | Only on a device a parent manages | To provide the monitoring and parental controls that parent asked for |
| Device and advertising identifiers, via Google AdMob | When an interstitial ad is shown between actions (never on a child's device) | Serve the occasional, frequency-capped ad that keeps Locknest free |
Screen-time data read through Android Usage Access stays on your device unless a parent manages that device. We do not sell personal data.
Children
Child accounts are created and managed by a parent, and we collect the minimum needed for parental controls. Parents can review and delete their child's account and data at any time.
Advertising and your choices
Locknest is free and supported by occasional short interstitial ads shown only between actions, never at launch. They are frequency-capped (limited each day, and fewer with a free account). In the EEA and UK we ask for your consent through Google's certified consent platform before any ad is requested, and if you decline, none is requested. You can change that choice at any time in Settings → Ad privacy settings.
Remove ads. On Android you can turn every ad off with a one-time purchase in Settings → Remove ads. Google Play handles the payment: we never see your card or payment details. The app asks Google Play whether your Google account owns the purchase and remembers the answer on your device only; nothing about it is sent to our servers. Once it is bought, the advertising SDK is not started at all.
Legal bases (GDPR)
Providing and securing the service (contract and legitimate interests); remote configuration and abuse prevention (legitimate interests); advertising (consent); child data (the consent of the holder of parental responsibility).
Retention
Account data is kept while the account exists. Anonymous install telemetry is retained for 18 months after the install was last seen and then deleted. A managed child's per-app usage history is kept for 90 days. Backups are retained for 14 days.
Your rights
You can access, correct, delete, export, and object to or withdraw consent for the processing of your data. Parents may exercise these for their children. Delete everything from inside the app at Profile → Account → Delete account, which removes your account, usage history, rules and tokens. If you no longer have the app, follow the steps on our account deletion page, or write to tulx.app@gmail.com.
Sharing
We share data only with Google AdMob (advertising, never for child accounts), Google Play (payment, only if you buy Remove ads) and our hosting provider, or where the law requires it.
Security
Traffic is encrypted with HTTPS, passwords are hashed, and access to production data is least-privilege.
Changes
We post changes on this page and update the date above. Questions: tulx.app@gmail.com.