Privacy Policy — Lockmode

Effective date: 21 September 2026
Last updated: 21 September 2026

Lockmode ("the app", formerly published as Overwill) is made by its developer ("we", "us"). This policy explains what the app does with information, and what it does not do.

The short version. The app blocks apps you choose, and it never learns which apps those are — Apple hands it sealed tokens rather than names (section 4). Your habits, your challenges, your check-ins, your streak and your statistics live on your phone and we have no server that holds them (section 2). We collect anonymous statistics about how the app is used, and the words you type are never among them (section 3). The answers you give while setting the app up, including the first name you enter, go to the company that runs our subscription screen so it can address you by it (section 5). There is no advertising, no tracking prompt, and no advertising identifier (section 7).

1. What the app does, and why that matters here

Lockmode is a habit app whose enforcement is a lock. You write down what the day is for, and it holds apps and websites shut in four ways: until everything due today is ticked off, for a block you start by hand, once a daily limit runs out, or inside a schedule you set. Doing that sounds like it would require watching everything you do on your phone. It does not, and this policy is mostly the explanation of why.

The blocking runs on Apple's Screen Time (Family Controls) system. You choose the apps in a picker that belongs to Apple, inside a sheet the app cannot read. What comes back to us is a set of opaque tokens — sealed references that only Apple's own system can resolve. The app hands those tokens back to iOS and says "shield these". At no point does it learn the name of a single app you picked, and it has no ability to read your Screen Time reports, your usage history, or anything you do outside itself.

2. What stays on your device

All of the following is stored only on your iPhone. There is no account, no sign-in, and no server of ours that holds any of it:

Your habits — the text of each one, which days of the week it is due, the number you set yourself to hit, the area of life you filed it under, its colour, and the time of any reminder. This is writing of yours, and like everything else in this list it stays on your phone: it is never uploaded, never sent to our analytics, and never reaches any of the companies in section 8.
Your challenges — which programmes you have taken on, when each one started, the habits it brought with it, and how many of its days you have earned. A challenge you wrote yourself is your text too, and is treated the same way.
Your record — every check-in, the days you closed, your streak, and the scores the six pillars are drawn from
Your blocking rules — your schedules and their names, hours, repeat days and on/off state; your saved quick blocks; your daily limit and how much of it you have used today
Your Screen Time app selections, as the opaque tokens described in section 4
The first name you enter during setup, and the rest of your setup answers
Your appearance and other settings

Some of it is kept in a shared container so that the parts of Lockmode that run outside the app itself — the lock screen you meet when you open a blocked app, the Home Screen and Lock Screen widgets, the Live Activity, and the background component that starts and ends scheduled blocks — can read the same information. That container is on your device. It is not a server, nothing syncs it, and no part of it is uploaded.

The widgets and the Live Activity read that container and make no network connections of any kind. Neither contains a line of analytics code: the companies in section 8 are reached only by the app itself.

Sharing a line. The quote screen can draw the line you are reading as a picture and hand it to iOS's share sheet. The picture is rendered on your phone, into the app's own temporary folder, and holds three things: the quote, its author, and the word LOCKMODE. Nothing of yours is in it — not your name, your habits, your streak or your record. Where it goes from the share sheet is your choice, made in Apple's sheet rather than ours, and the app is never told what you picked.

If you delete the app, all of it is deleted with it. You can also erase it without deleting the app, from Settings inside Lockmode — see section 11.

3. The statistics we collect

We collect anonymous usage events, through our analytics provider Amplitude, so we can see where people get stuck:

Setup progress — which of the setup screens were seen, which were completed, where people leave, and the answers described in section 5 as categories (for example "sleep" rather than any text you typed)
Permissions — that the app asked for Screen Time or notification permission, and what the answer was
Subscription events — that a subscription screen appeared, whether a purchase, trial or restore was started, completed, abandoned or failed, and which plan was involved
What you do in the app, described by its shape and never by its words — that a habit was created, edited, ticked off, un-ticked or deleted, and alongside it the area of life it belongs to, whether it has a number to hit, how many days a week it is due and whether it came from a challenge; that a challenge was browsed, joined, left or finished, and which programme from our own catalogue it was, or simply that it was one you wrote yourself; that the lock was armed, released or turned off, and how many apps it covers; that a schedule, quick block or daily limit was saved or removed; which screens were opened. The text of a habit, of a challenge you wrote, or of anything else you type is never sent.
Totals that stand for your progress — how many habits and challenges you are carrying, your current streak, and how many days you have used the app. These are numbers, never lists.
That you erased everything — if you use the erase button in Settings, the event carries how much was erased: how many habits and challenges, your streak, and how many days were on record. Only the counts. Nothing is described on the way out that was not already counted on the way in, and this is the last event that installation sends about any of it. It is recorded because erasing eight months of work and erasing an empty app are the same tap and very different things, and we would rather know which one people do.
Sessions and app lifecycle — that the app was installed, opened or updated, how long a session in the app lasted, and whether you were still using it one, three, seven, fourteen or thirty days after installing
Device and app context — app version, build number, whether the build came from the App Store, TestFlight or a development machine, and whether the phone is one of our own. We mark our test phones with a hidden switch so our use of the app can be taken out of the numbers; on your phone that flag simply says no.
Approximate location — the country, region and city that Amplitude works out from the internet address your device connects from. This is not read from your iPhone: the app does not use location services and never asks for location permission. It is worked out from the connection itself, the way it is for any website you visit. It is not a street address, cannot locate you within a city, and is never used to build a profile of you.

This data is attached to an identifier that stands for an installation, not a person. There is no account and no name attached to it, and it is not Apple's Identifier for Advertisers — the app never reads that one at all (section 7).

The name you type is not among these events. The app records only whether the name field was filled in, never what you put in it. The separate matter of the subscription screen, which does receive the name, is section 5.

There is no screen recording and no session replay. We do not record video of your screen, and the analytics library is not configured to.

4. Screen Time and app blocking

To block anything, the app needs Screen Time (Family Controls) permission. iOS asks for it once, with Apple's own wording, at the moment you first do something that needs it — arm the lock, choose apps, or add a schedule. The app never asks for it on a blank screen with no explanation.

What that permission does and does not give us:

You pick the apps and websites in Apple's picker, not ours. The app cannot see inside that sheet.
What we receive back are opaque tokens. The app never learns which apps you chose, which apps you have installed, or how long you spend in any of them.
Those tokens are stored on your device only. They are never sent to us or to anyone else, and they are meaningless off your device.
They are used for one thing: telling iOS to shield those apps while a block is running, and to lift the shield when it ends.
We cannot read your Screen Time reports. The app does not have, and has never asked for, the permission that would let it see how you use your phone.
The lock works on your own device, with your own authorisation. The app does not manage anybody else's phone and has no parental-control or family features.

Screen Time permission is optional in the sense that you can refuse it, but the lock depends on it: without it, iOS ignores every block and nothing is actually restricted. The rest of the app — your habits, your challenges, your record — works without it. iOS shows this request once per install and the refusal cannot be undone from inside the app; you would change it in the iPhone Settings app, under Screen Time.

5. Your setup answers, and the subscription screen

Setting the app up asks you a series of questions. Your answers are kept on your device, and they are also sent to Superwall, the company that runs our subscription screen, so that the screen can be written in your own terms rather than pitching cold.

What is sent:

The first name you entered. This is the one piece of directly identifying information the app collects, and it is worth naming plainly: it appears in the subscription screen's headline, and to put it there it has to leave your device.
What you said you want back — attention, sleep, time, and so on
Which kinds of app you named as distractions
How many hours a day you said you spend on your phone, and the figures the app works out from that
The score the opening assessment gave you, and which of the six areas of life it came out thinnest on

None of this is published, sold, or used to identify you beyond addressing you by the name you gave. If you would rather it not leave your device, you can enter something other than your real name — the app uses whatever you type and does not check it.

Superwall also reports back whether you are subscribed, which is what unlocks the app, and sends us its own events about what happened on the subscription screen. Those are forwarded into the statistics in section 3 under names like "checkout started" and "purchase completed".

6. Notifications

If you allow notifications, the app reminds you about a habit at the hour you set on it, on the weekdays that habit is due. That is the only notification the app sends. Blocking is silent: the lock, a schedule, a quick block and the daily limit all start and end without announcing themselves. A reminder is put together and scheduled on your device by iOS, which is why it can carry the habit's own name without that name going anywhere.

We do not operate a push server and cannot send you anything remotely. The Live Activity you see on the Lock Screen while the lock is up has no push token either, so there is nothing remote that could reach it. The app records that a permission was asked for and answered — never the contents of a notification, which would mean the text of your own habit. Notifications are optional and everything else works without them.

7. What there is none of

Some things are easier to describe by their absence, and each of these is a deliberate choice rather than an oversight:

No advertising, and no advertising identifier. The app does not read Apple's Identifier for Advertisers, does not show advertisements, and has no advertising or attribution partner. It does not track you across other companies' apps and websites, which is why you never see Apple's App Tracking Transparency prompt.
No sale or sharing of personal information, and no data brokers.
No location. The app does not use location services and has never asked for location permission. (The approximate country worked out from your internet address is a different thing, and is described in section 3.)
No camera, no photos, no contacts, no health data. Nothing you log in Lockmode is written to Apple Health or read from it.
No microphone and no audio. The app never records sound and never asks for microphone permission.
No email address or phone number. There is no account and nothing to sign in to.
No list of your apps. See section 4 — this one is worth repeating, because it is the thing people reasonably assume an app blocker must know.
No cloud sync and no backup of ours. Your record exists on the phone you wrote it on.

8. Who else receives data

We use a small number of processors. Each receives only what it needs.

Service	What it receives	Why	Their policy
Amplitude	The anonymous usage events in section 3	Product analytics — where people get stuck	amplitude.com/privacy
Superwall	Your setup answers including your first name (section 5), and subscription screen, purchase, trial and restore events	Runs the subscription screen and remembers whether you are subscribed	superwall.com/privacy
Apple	Your purchase	Apple processes all payments — we never see your payment details — and operates the Screen Time system the blocking runs on	apple.com/legal/privacy

That is the whole list. The app contacts no other server: it has no catalogue to search, no content to download, and no backend of its own.

9. Children

Lockmode is not directed at children under 13, and we do not knowingly collect information from them. There is no account, no profile and no way to communicate with anyone else through the app. If you believe a child has provided us with information, contact us and we will delete it.

10. How long we keep things

Anonymous usage events are retained by Amplitude for as long as the product needs them, and are deleted on request. Your setup answers are held by Superwall for as long as your subscription record exists there. Everything else lives on your device for as long as you keep the app.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict processing, to opt out of the sale or sharing of personal information, and to lodge a complaint with a supervisory authority.

Because the app has no account, our records are tied to an installation rather than to you, so in most cases we have no way to connect a request to a specific person. In practice:

To erase everything you have written, without deleting the app: open Settings inside Lockmode and choose to erase everything. Your habits, challenges, check-ins, streak and the assessment the pillars started from are removed from the device. It cannot be undone. Your blocking rules and your Screen Time app selections are not written by you in the same sense and are left where they are; you delete those on their own screens, or by deleting the app.
To delete everything on your device: delete the app. Your habits, record, blocking rules and app selections go with it.
To stop any further data being sent: delete the app. A later reinstall starts a new identifier that is not connected to the old one.
To have an analytics record deleted: email us at the address below with whatever you can tell us about the installation and roughly when you used the app, and we will delete what we can identify.
To have the name and setup answers held by Superwall deleted: email us and we will ask them to remove the record.

Our legal basis for processing under the GDPR is our legitimate interest in understanding how the app is used and in keeping it working, and the performance of our contract with you for the subscription itself.

12. Security

Data in transit is encrypted with HTTPS. Data on your device is protected by iOS's own file protection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. International transfers

Our providers, Amplitude and Superwall, process data in the United States. Where required, transfers rely on the European Commission's Standard Contractual Clauses.

14. Changes

If we change this policy we will update the date at the top and, for anything significant, tell you in the app.

15. A note on the name

This app was published as Overwill until September 2026 and is now called Lockmode. It is the same app, from the same developer, at the same address — only the name and the app itself changed. This policy stays at its existing address under /overwill/, so that every version of the app that printed that address keeps working.

16. Contact

Questions, requests or complaints:

Email: abeto.studio@gmail.com