Privacy Policy

Welcome to LockNKey

This Privacy Policy describes how flipcodex("we", "us", or "our") collects, uses, and protects your information when you use the LockNKey website at locknkey.xyz and the LockNKey mobile application (collectively, the "Service").

LockNKey is a private communication platform that lets you create secure vault conversations protected by secret keys. By using LockNKey, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect only the information necessary to provide and improve the Service:

a. Account Information

• Name, email address, and profile photo (via Google OAuth sign-in)

b. Vault Data

• Vault titles and expiry settings
• End-to-end encrypted messages, images, and voice notes
• Recovery questions (stored without answers)
• We cannot read your encrypted messages — only you hold the decryption key

c. Technical Data

• Browser type and device information
• Pages visited and interaction data (via analytics)
• IP address (for security and abuse prevention)

We do not collect location data, contacts, or access your camera or microphone (except for selecting images or recording voice notes within vaults on the mobile app).

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the LockNKey Service
• Authenticate your identity via Google sign-in
• Store and sync your encrypted vault conversations
• Detect and prevent fraud, abuse, and security issues
• Analyze usage patterns to improve the user experience

3. Vaults, Keys, and Encryption

LockNKey uses a key-based access system for vault conversations. Each vault is protected by a secret key known only to you.

All messages, images, and voice notes within vaults are encrypted on your device using AES-256-GCM encryption with PBKDF2key derivation before being sent to our servers. We never have access to your vault's plaintext decryption key.

Users are responsible for protecting their vault keys. Anyone who has the correct key may access the related vault. If you lose your key, you may use the recovery question to regain access.

4. Messages and Content

Your vault conversations belong to you. This content is stored only to provide the LockNKey experience.

We do not sell your messages, vault data, or personal information.

5. Third-Party Services

LockNKey uses the following third-party services that may collect information:

• Google OAuth — for authentication and sign-in
• Google AdSense — to serve advertisements. Google may collect cookies and ad interaction data.
• Supabase — backend infrastructure for database, authentication, file storage, and real-time features

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies.

6. Cookies and Tracking

LockNKey uses cookies and similar tracking technologies to maintain your session and analyze usage. These include:

• Essential cookies — required for authentication and session management
• Analytics cookies — help us understand how visitors use the site
• Advertising cookies — used by Google AdSense to serve relevant ads

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

7. Data Sharing and Disclosure

flipcodex does not sell your personal data to third parties.

We may share information only in the following circumstances:

• When required by law, legal process, or government request
• To protect the security, rights, or safety of LockNKey, its users, or the public
• In connection with a merger, acquisition, or sale of assets (we will notify you before your data is transferred)

8. Data Security

We implement industry-standard security measures to protect your data, including encrypted storage, row-level security policies, and secure file access with time-limited signed URLs.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information.

9. Children's Privacy

LockNKey is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Your Rights

You have the right to access, update, or delete your personal data. You can:

• Delete individual vault conversations at any time
• Request full account deletion by contacting us

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of LockNKey after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how flipcodex handles your data, please contact us at:

Developer: flipcodex
Website: https://locknkey.xyz
Email: support@locknkey.xyz