LockTied privacy policy

LockTied is operated by Taynium. For support or privacy requests, email Prioritydesk.app@outlook.com. Last updated: 17 October 2026.

What we process and why

• Installation identity and delivery: the app creates an anonymous Firebase Authentication identity on connection. Firebase installation identifiers and a messaging token support delivery and notifications. You do not enter an email address or password to pair.
• Pairing: the service stores your two installation identities, pair membership, invitation records and delivery pointers. Invitation codes are stored as hashes.
• Your creations: when you send, LockTied uploads a combined JPEG of the photo, note and drawing you selected. Photos are resized and original metadata is removed before upload. Your whole gallery is not uploaded. Camera access is used to take a photo for your creation or scan a pairing QR code. Camera photos stay in temporary app storage until imported into the draft; they are uploaded only when you send.
• Live drawings: stroke coordinates, colours, widths, revisions and participation are shared with the service and paired phone. The wallpaper behind the live drawing is not captured or uploaded.
• Security and operation: Google/Firebase processes network information such as IP addresses, SDK/app information and integrity attestations. Our backend stores action counters and timestamps to limit abuse.
• Support: if you send a report or deletion email, Taynium receives your email address, message and any references you include. The in-app email draft includes installation and pair references and the received-item sequence. You review it before sending; images are not automatically attached.
• On your phone: drafts, recent sent/received images, settings, tutorial completion and sharing-rules acceptance are stored locally. Gallery exports and applied wallpapers are managed separately by Android.

Who receives data

Your paired phone receives the content and strokes you choose to share. Google Firebase and Google Cloud process data to run the service; support email is handled through Outlook. Authorised administrators may access cloud data to operate the service, resolve support requests and investigate misuse. Transport is encrypted. LockTied does not provide end-to-end encryption.

This version has no advertising, Analytics or Crashlytics SDK and no paid features. We do not sell your content or use it for advertising.

Storage and retention

The configured Firestore database and functions are in London; other provider services may process data elsewhere. Shared messages expire after 30 days, invitations after ten minutes and live sessions after ten minutes. Expiry deletion is asynchronous, so removal may happen later. Disconnecting revokes pair access and triggers deletion of shared cloud messages and live sessions.

Disconnecting does not delete your anonymous Authentication identity, device token, user record or all action-limit records. These have no automatic application-defined expiry; request deletion through the route below. Service logs and provider backups follow the providers’ configured retention rather than the shared-content timers. Support correspondence is retained while handling your request and where needed to resolve disputes, prevent abuse or meet legal obligations. Ask us for details about a particular request.

Disconnecting clears recent shared images when each phone processes the change; an offline phone may not clear immediately. Drafts, exported pictures and applied wallpapers may remain. Clearing app storage or uninstalling removes local app data but does not itself request cloud deletion. A recipient may keep a saved copy.

Your choices and rights

You choose individual photos, can decline optional permissions, disable automatic wallpaper updates and the lock-screen drawing shortcut, and disconnect at any time. Anyone looking at your lock screen can see its artwork. Anyone holding your locked phone may be able to draw using an enabled shortcut; Android may still require unlocking on some devices.

Use Settings → Request data deletion or email Prioritydesk.app@outlook.com. You can initiate a request without reinstalling the app. We need to verify ownership before deleting an installation’s data; an installation reference alone is not proof. Because identities are anonymous, we may need additional information to locate and verify your records. We will explain what is needed and any limits. Never send pairing codes, sign-in tokens or sensitive images as proof.

A verified deletion request covers the installation’s Authentication identity, user record and delivery token, invitations, action-limit records and connected shared content. It does not erase copies saved by the recipient, gallery exports or system wallpapers. We will explain any records that must be retained, the reason and applicable period. See deletion instructions.

You may also contact us about access, correction, restriction or objections to processing and applicable privacy rights. You may raise a complaint with your data-protection authority, including the UK Information Commissioner’s Office.

Safety and updates

Use the app only with a consenting person. Report concerns through Settings → Report a concern or the support email. Child sexual abuse and exploitation are strictly prohibited. Do not attach illegal imagery to reports. We update this policy when our processing changes and show the revision date above.