LOKKI

Privacy Policy

Effective date
August 3, 2026
Last updated
August 3, 2026

LOKKI ("LOKKI," "we," "us," or "our") provides a digital locker service where people can create personal and group spaces, share content, and interact with people they choose. This Privacy Policy explains how we handle information when you use the LOKKI website, mobile application, and related services (collectively, the "Service").

1. Information we collect

Account and OAuth information

When you sign in with Google, Apple, or Discord, we may receive the provider account identifier, display name, email address, profile image, and information needed to verify and maintain the sign-in. The information received depends on the provider, your settings, and the permissions you grant. We process provider identifiers and provider-issued authentication tokens as needed to verify and maintain sign-in. LOKKI does not receive or store the password you use with Google, Apple, or Discord.

Profile, locker, and relationship information

We collect information you provide or create, including:

  • Display name, LOKKI identifier, profile image, and profile details.
  • Locker name, appearance, visibility, and other settings.
  • Personal and group locker membership and ownership.
  • Invitations, join requests, approvals, blocks, and saved lockers.

Content you create or upload

We collect and store content you create, upload, attach, send, keep, or archive through the Service. This can include sticker notes, notes, replies, photos, video content or links where supported, link previews, diary entries, game messages, and personal or group locker content. We also process reports, block actions, and information you send when contacting support.

Content may include personal information about you or other people. Only share content that you have the right to use and disclose.

Device, push, and technical information

When needed to provide, secure, and troubleshoot the Service, we may process:

  • Device platform, operating system, app version, browser, or WebView information.
  • Push token, device registration identifier, and notification delivery or error information.
  • IP address, user agent, session and authentication records, and request timestamps.
  • Deep-link and notification-open information needed to open the requested destination.
  • Basic server, security, diagnostic, and error logs.

You can disable notifications in your device settings. LOKKI does not currently request precise location or contacts access, record through your microphone, or continuously access your camera. When you choose a photo or video, your operating system may provide the selected item according to your device permissions.

Safety and moderation information

A content or user report may include the reporter, reported content, the content author or reported user, selected reason, related identifiers, a content snapshot, and moderation action. Blocking records identify the accounts involved. We use this information to enforce our Terms of Use and protect the Service.

2. How we use information

We use information to:

  • Create accounts, authenticate users, and maintain sessions.
  • Provide personal and group lockers, memberships, invitations, uploads, messages, and notifications.
  • Display content to its intended audience and remember feature and appearance settings.
  • Process reports, support blocking, enforce our Terms, and prevent fraud, abuse, and unauthorized access.
  • Respond to support requests and send account, security, policy, or operational notices.
  • Diagnose errors and improve the reliability, usability, security, and performance of core features.
  • Comply with applicable law and valid legal process, and establish or defend legal claims.

Under LOKKI's current practices, we do not sell personal information or use it for third-party behavioral advertising. We do not use private locker content to build advertising profiles.

3. Content visibility

Visibility depends on the locker type, membership, permissions, and feature you choose. Profile and personal locker information may be visible to other users or visitors where the locker is public. Content placed in a public locker can be seen by its permitted audience.

Diary content is intended for the account owner. Group locker content is available according to group membership and permissions; group identity or discovery information may be visible separately from member-only content. Review the locker and audience before posting.

If you create a shareable link or game message, anyone who receives that link may be able to access or forward it. Third-party links and embedded services are governed by the third party's own privacy practices when you open or interact with them.

4. Sharing and service providers

We disclose profile information and user content to other users or visitors only as required by the visibility, membership, and sharing features you use. We may also disclose information when you direct us to, when required by valid legal process, or when reasonably necessary to protect users, LOKKI, or the public.

LOKKI currently relies on the following providers:

ProviderRole
Google, Apple, and DiscordOAuth authentication and account sign-in.
CloudflareWeb application hosting, delivery, security, and R2 image object storage.
NeonPostgres database infrastructure for accounts, lockers, content, relationships, and operational records.
ExpoMobile application infrastructure and push-notification relay through Expo Push Service.
APNs and FCMDelivery of push notifications to Apple and Android devices.

These providers process information only as needed to perform their respective roles, subject to their terms and applicable law. We may also disclose information in connection with a merger, acquisition, reorganization, or sale of assets, subject to applicable law and appropriate notice.

5. Data retention and account deletion

We retain information while needed to operate your account and the features you choose, and as reasonably necessary for security, dispute resolution, legal compliance, and enforcement of our Terms. Retention varies by data type and purpose.

You can delete your account directly in LOKKI by opening MY and selecting Delete Account. You can also enter the same web deletion flow through our public account deletion page. The deletion flow removes the account, associated database records, and user-uploaded files assigned to that account. If you own a group locker with another eligible member, ownership is transferred; a group with no remaining eligible member is deleted. Deletion from backups and object storage may take additional time due to technical deletion cycles.

If you cannot access the app, you may request deletion of your account and associated data by emailing lokki.connect@gmail.com. We may need to verify your identity before completing the request. Limited records may be retained where required by law or reasonably necessary for security, fraud prevention, dispute resolution, or backup integrity.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of certain personal information; to object to or restrict certain processing; to withdraw consent where processing relies on consent; or to complain to a relevant data-protection authority. Legal exceptions may apply.

You can also edit profile and locker information, delete eligible content, manage group membership, block users, report content or users, control notification permission through your device, and delete your account through the Service.

7. Children and minimum age

LOKKI is not intended for children under 13, or under a higher minimum age required to use an online service without parental consent in their country. We do not knowingly collect personal information from children below the applicable minimum age. If you believe a child provided information in violation of this section, contact us so we can review and take appropriate action.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including authentication, access controls, secure transmission where applicable, and restricted production access. No online service or storage system is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your device and authentication-provider account.

9. International data processing

LOKKI and its service providers may process or store information in countries other than where you live. Those countries may have different data-protection laws. Where required, we will use appropriate safeguards for international transfers.

10. Changes to this policy

We may update this policy when the Service, data practices, service providers, or legal requirements change. We will update the date above and provide additional notice or consent where required by applicable law.

11. Contact us

Service
LOKKI
Email
lokki.connect@gmail.com
Website
https://lokkiapp.com