Privacy Policy

Last updated: 20 June 2026

This Privacy Policy explains how HanaLock handles your information. HanaLock is designed to turn distracting phone moments into short vocabulary and recognition practice, and is built to be local-first.

We do not sell your personal information. We do not use advertising tracking. We do not use third-party analytics or crash-reporting SDKs in the current version of the app.

Information HanaLock Processes

iCloud sync for learning progress

HanaLock uses Apple's CloudKit to sync your learning progress to your own private iCloud database, so your progress survives reinstalling the app or moving to a new iPhone. This data is stored in your personal iCloud account — HanaLock cannot read it, and Apple does not give us access to it. Under Apple's App Store privacy rules, this still qualifies as "data not collected" because the developer cannot access the contents.

What syncs: your learning progress (the items below under "Learning progress and preferences"). Blocking settings, Screen Time selections, and usage summaries do not sync — they stay on each device.

If you are signed out of iCloud, or have iCloud Drive disabled for HanaLock, the app works fully offline and nothing syncs.

Learning progress and preferences

HanaLock stores learning progress on your device (and, when iCloud is available, in your private iCloud DB), including things like:

• vocabulary or content item identifiers you have practiced
• correct and incorrect answer counts
• mastered status
• last practiced dates
• completed practice session count
• XP/progress totals
• selected course, language path, unit, practice difficulty, audio settings, and related learning preferences

This information is used to show progress, choose practice items, and make future practice more useful.

Blocking settings

HanaLock stores the settings you choose for blocking and unlocking, such as:

• whether protection is enabled
• unlock duration
• daily unlock limits
• daily usage limits
• schedules/time plans
• challenge modes
• selected learning units for unlock challenges
• audio and practice settings for blocked targets

These settings are stored locally so HanaLock can apply the blocking behavior you choose.

Screen Time selections and usage summaries

HanaLock uses Apple Screen Time technologies, including Family Controls, Managed Settings, Device Activity, and Screen Time shield extensions.

When you choose apps, categories, or websites to block, selection happens through Apple's Screen Time picker. HanaLock stores the resulting system tokens and related configuration locally so it can apply and remove shields. For selected websites, iOS may also make the selected domain name available to the app.

HanaLock may also create local usage summaries from Apple's Device Activity reporting, such as weekly totals, daily durations, and top app display names and durations. These summaries are used for the in-app Stats experience. In the current version, these summaries are stored locally and are not uploaded to HanaLock servers.

HanaLock does not read your messages, posts, feeds, passwords, browser page contents, or what you do inside other apps.

Notifications

HanaLock uses local notifications to help move from the iOS Screen Time shield into the HanaLock unlock challenge. For example, after you tap Continue on a shield, HanaLock may show a notification that opens the correct unlock flow.

Notifications are local/system notifications in the current version. HanaLock does not use a push notification server in the current version.

Support, reports, and feedback

If you contact us by email or through TestFlight feedback, we may receive the information you choose to send, such as:

• your email address
• your message
• screenshots or comments
• device model, iOS version, app version, build number, crash details, or other diagnostic information included by you, Apple, or TestFlight

We use this information to respond to support requests, investigate bugs, and improve the app.

Sign in with Apple and progress sync

HanaLock does not require an account in the current version.

If HanaLock adds optional Sign in with Apple and progress sync in a future version, we may use an Apple-provided account identifier, and possibly the email address or private relay address Apple provides, to save and restore vocabulary progress across installs. This Privacy Policy and the App Store privacy disclosures will be updated before any such sync feature is released.

Subscriptions and billing

HanaLock Pro is sold as an auto-renewing subscription. Purchases and renewals are processed by Apple through the App Store. HanaLock never sees your payment method, card number, billing address, or Apple ID password. Apple's handling of these details is governed by Apple's own privacy policy.

To activate and verify your subscription inside the app, HanaLock uses RevenueCat, a third-party subscription-management service. When you start a trial, subscribe, restore, cancel, or renew, RevenueCat receives the subscription information needed to confirm whether your access is active. This includes:

• an anonymous app-specific identifier (HanaLock does not link this to your name or email)
• the product you purchased (monthly or yearly)
• purchase date, trial status, renewal status, and expiration date
• your country/region and the App Store environment (sandbox or production)
• basic device and operating system information needed for receipt validation

RevenueCat acts as our data processor for subscription state. It does not receive your payment details and is not used for advertising. For details on RevenueCat's own practices, see their privacy policy.

The legal basis for this processing is the performance of the contract you enter into when you subscribe (Art. 6(1)(b) GDPR), and our legitimate interest in operating, securing, and supporting the subscription (Art. 6(1)(f) GDPR).

We retain subscription records (via RevenueCat and our App Store Connect reports) for as long as required to operate the subscription, provide support, and meet legal, tax, and accounting obligations.

How HanaLock Uses Information

HanaLock uses information to:

• apply Screen Time shields to apps, categories, and websites you choose
• open unlock challenges when you try to access a blocked target
• grant temporary access after successful practice
• reapply blocking based on your unlock limits, schedules, usage limits, and iOS Screen Time behavior
• show learning progress and practice history
• generate short vocabulary and recognition challenges
• show local usage and progress stats
• diagnose Screen Time and shield behavior during development and testing
• respond to support, bug reports, and feedback

What Leaves Your Device

HanaLock does not upload your learning progress, blocking settings, Screen Time selections, or local Screen Time usage summaries to HanaLock servers. We do not operate a backend that holds your data.

Your learning progress is synced to your own private iCloud database via Apple CloudKit so it survives reinstalling the app. This data lives in your personal iCloud account and is not accessible to HanaLock or to Apple's developer tools.

Information may leave your device when:

• you send us an email for support, feedback, or a bug report
• you submit TestFlight feedback or crash feedback through Apple
• you open the Privacy Policy or Terms links in a browser
• you start a free trial, subscribe, restore, cancel, or renew HanaLock Pro — subscription state is sent to Apple (for billing) and to RevenueCat (for entitlement verification). See "Subscriptions and billing" above
• Apple processes system services such as App Store, TestFlight, Screen Time, or crash reporting according to Apple's own policies

Sharing

We do not sell your information. We do not share information with advertising networks.

We may share or receive information through:

• Apple system services, such as App Store Connect, TestFlight, Screen Time, and local notification delivery
• RevenueCat, our subscription-management processor, for the limited purpose of confirming whether your HanaLock Pro subscription is active (see "Subscriptions and billing" above)
• your email provider and our email provider when you contact support
• service providers we may use in the future, but only if this Privacy Policy is updated first
• legal or safety reasons, if required by law or necessary to protect rights, safety, or security

Retention

Most HanaLock data in the current version is stored locally on your device. It remains until you change settings, delete it through app behavior, reset the app, or delete the app.

Some local stats are intentionally short-lived. For example, the current daily stats journal keeps a limited recent history for in-app charts.

If you contact support, we may keep the message for as long as needed to respond and maintain support records. You can ask us to delete support messages associated with your email address.

TestFlight feedback and crash information are managed in App Store Connect and Apple's TestFlight systems. Apple may make crash reports and tester feedback available to the developer according to Apple's TestFlight rules.

Your Choices

You can:

• choose which apps, categories, or websites to block
• disable protection in HanaLock
• revoke Screen Time permission in iOS Settings
• disable notifications in iOS Settings
• continue without an account in versions where account sync is optional
• delete the app to remove local app data from your device
• contact us at support@hanalock.app about privacy questions or deletion of support messages you sent us

Your Rights Under the GDPR (DSGVO)

If you are in the European Union, the European Economic Area, or another region with similar laws, you have rights regarding your personal data. Because HanaLock is local-first and, in the current version, does not upload your learning progress, blocking settings, or Screen Time data to our servers, most of your data never reaches us in a form we can access.

For the limited personal data we do receive — primarily what you send us by email or through TestFlight feedback — you have the right to:

• request access to the personal data we hold about you
• request correction of inaccurate data
• request deletion of your data
• object to or restrict certain processing
• request a copy of the data you provided (data portability)

The legal basis for processing support and feedback you send us is our legitimate interest in responding to you and improving the app (Art. 6(1)(f) GDPR), and, where applicable, your consent (Art. 6(1)(a) GDPR).

To exercise any of these rights, contact us at support@hanalock.app.

You also have the right to lodge a complaint with a data protection supervisory authority. In Germany, this is the data protection authority of your federal state (Landesdatenschutzbehörde) or the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Children And Family Use

The current version of HanaLock is designed for self-directed use. It is not a parental surveillance dashboard and does not provide a remote monitoring service for another person's device.

If HanaLock later adds child, guardian, family, or remote management features, this Privacy Policy and the App Store disclosures will be updated before those features are released.

Security

HanaLock uses Apple's platform APIs and local device storage to provide its blocking and learning features. No method of storage or transmission is perfect, but the current design intentionally avoids uploading sensitive Screen Time selections or learning progress to a server.

Changes

We may update this policy as HanaLock changes. If a future version adds account sync, analytics, crash reporting, subscriptions, cloud storage, or other data transmission, this policy will be updated before that version is released. The "Last updated" date above reflects the current version.

Contact