Last updated 24 August 2026
Privacy Policy
LiftLock is a screen lock for the Apple Watch. It is built so that almost nothing about you needs to leave your wrist, and this page says exactly what does.
The short version
- You can use LiftLock without an account, and most people will.
- Locking, the timer and unlocking work entirely offline. Nothing is sent anywhere.
- LiftLock never records audio and never listens for a wake word.
- LiftLock never reads your heart rate and never uploads health data.
- Analytics are off until you turn them on.
- If you do create an account, you can delete it and everything in it from inside the app.
Who we are
LiftLock is made by Kode Foundry. For anything on this page, write to hello@kodefoundry.com.
What the watch app collects
Nothing. The watch app has no networking. Your lock state, session start time and preferences are stored on the watch itself and are never transmitted. It works with your iPhone switched off, out of range, or left at home.
Health data
If you choose Maximum protection, LiftLock starts a workout session on your watch. It does this for one reason: Apple only permits an app to turn on Water Lock — which switches the touchscreen off completely — while a workout session is running.
To start that session, watchOS asks for permission to save workouts. LiftLock requests that permission and then deliberately does not use it:
- It does not read your heart rate, calories, distance or any other sample.
- It does not create a workout builder and does not save a workout to the Health app.
- It does not transmit anything about the session to us or to anyone else.
Choose Standard protection and no Health permission is requested at all.
Voice and Siri
You can say "Hey Siri, unlock LiftLock". That runs through Apple's own Siri, which you invoke — LiftLock cannot start Siri and does not try. LiftLock never opens the microphone, records audio, or listens in the background. There is no custom wake word, because watchOS does not offer one to any third-party app.
If you create an account
An account is optional. It exists only so your settings and profile picture follow you between devices. If you sign in, we store:
| Data | Why | Where it comes from |
|---|---|---|
| Email address | Identifies your account | You, or Apple/Google when you use them to sign in |
| Display name | Shown on your profile | You, or your provider |
| Profile picture | Shown on your profile | Only if you choose one |
| Account identifier | Links your settings to you | Generated on sign-up |
| Your app settings | So a new device starts configured | Your choices in the app |
That is the complete list. No workout data, no health data, no location, no contacts, no advertising identifiers.
If you use Sign in with Apple and choose to hide your address, we only ever see Apple's private relay address. That is fine — we have no reason to know your real one.
Analytics
Analytics are off by default in the app and on this website. Nothing is collected unless you switch them on.
If you do, we record a small, fixed set of anonymous product events — the app opening, a lock starting, an unlock finishing — through Google Analytics for Firebase. Session lengths are recorded as coarse buckets such as "5–15 minutes", never as an exact duration, and no event carries anything that identifies you. It is there to tell us whether the app is being used, not who is using it.
You can turn analytics back off at any time in Settings. On this website, use the Cookie preferences link in the footer.
Where your data is stored
Account data is held in Google Firebase (Cloud Firestore and Cloud Storage) in the europe-west1 region, and authentication is handled by Firebase Authentication. Google acts as our processor. Data may be transferred to and processed in other countries where Google operates, under the safeguards in Google's own terms.
How long we keep it
Account data is kept until you delete your account. Delete it and the profile document and profile picture are removed immediately, then the sign-in record itself. Anonymous analytics are retained by Google Analytics under its standard retention settings and cannot be traced back to you.
Deleting your account
In the iPhone app: Settings → Account → Delete account. You type DELETE to confirm, and it removes your profile, your picture, your synced settings and your sign-in. There is no form to fill in and no need to contact us.
Your watch keeps working afterwards exactly as before. An account was never required to lock it.
Your rights
Depending on where you live, you may have the right to access, correct, export or erase the personal data we hold about you, and to object to or restrict how it is processed. Deletion is built into the app. For anything else, email hello@kodefoundry.com and we will respond within 30 days.
Where we rely on your consent — analytics — you can withdraw it at any time, and doing so does not affect anything that happened before.
Children
LiftLock is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, email us and we will remove it.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for anything significant, say so in the app. Continuing to use LiftLock after a change means you accept the updated policy.
Contact
Kode Foundry — hello@kodefoundry.com — kodefoundry.com