Privacy Policy
Last updated: 20 October 2026
BuddyLock has no accounts, no ads and no third-party analytics or tracking. We do not sell or share personal data.
On your iPhone
- The apps, categories and websites you pick are opaque Screen Time tokens. BuddyLock cannot turn them into app names and never uploads them.
- Your schedules, exam dates, streak, settings and the first name you type stay on the device. Today's usage total is drawn by a Screen Time report extension that cannot use the network.
- A pairing secret is kept in the iOS Keychain.
On our server
The server (Cloudflare Workers, at buddylock.app) exists only so a friend can read an unlock code without installing the app. For an unlock request it stores:
- A random request ID and pairing ID.
- The one-time code, as a salted hash; the code itself only until it is used or expires.
- A short description of what is locked, made from counts only (for example “2 apps”). App names are never sent.
- The first name you entered in the app, so your friend knows who is asking.
- Timestamps for the request, the code and any emergency exit.
Links and codes expire (codes after 10 minutes, links after 24 hours). Request records are deleted about two days later. Deleting the pairing in the app deletes it from the server. Cloudflare processes IP addresses to deliver the service and to rate-limit wrong codes; we do not keep them in our records.
The friend's page sets no cookies and asks search engines not to index it. We never ask for your friend's phone number or contact them ourselves.
Purchases
BuddyLock Pro is sold through Apple's App Store. Apple processes the payment; we never see your card or Apple ID details. The app only checks with StoreKit whether Pro is active.
Children
BuddyLock is meant for students managing their own phone. It does not knowingly collect information from children under 13.
Your choices
Delete the app to remove all on-device data. Turning off Screen Time access removes the locks. To ask about or delete server data, email us.