1. What this covers
This policy explains what Lockr collects when you visit lockr.app or use the Lockr app, why we collect it, and what choices you have. It applies to every Lockr product and sub-domain.
2. What we collect
Account information
When you sign in we collect your email address (for magic-link login) and, if you choose Google, your Google profile name and avatar. We never receive your Google password.
Trading and behavioral data
Lockr is a behavioral trading journal, so the product works by recording the trading sessions, trades, locks, and journal entries you create inside the app. This data is yours. You can export or delete it at any time from your account settings.
Device and usage data
With your consent, we use a third-party product-analytics service to understand which features are used and where users get stuck. We log anonymized IP addresses, device type, browser, the pages you visit, and (if you opted in) anonymous product events. We do not record sessions, keystrokes, or screen contents.
Error data
We use a third-party error-monitoring service to capture unhandled errors so we can fix bugs. Stack traces may include the URL you were on. It's configured not to send personal data.
3. How we use it
- To run the Lockr app and the locks/journal/score features.
- To send transactional emails — sign-in links, lock-fired alerts, your weekly review, and account/security notices.
- To improve the product. We look at aggregate funnel data, not individual trades.
- To meet legal, security, and tax obligations (audit logs, fraud prevention).
We do not use your trading data to train any model, sell to third parties, or share with brokers or prop firms.
4. Sub-processors we rely on
Running Lockr requires a small set of trusted vendors. Each one sees only what they need to do their job:
- Cloud hosting & database infrastructure
- Transactional email provider
- Product analytics (consent-gated)
- Error/performance monitoring
5. Cookies and tracking
Lockr uses the cookies it needs to keep you signed in (session cookies). Analytics cookies only load after you accept the consent banner. You can change your choice at any time using the “Cookies” link in the footer.
6. Your rights (GDPR / UK GDPR / CCPA)
You can request access, correction, export, or deletion of your data at any time. Most of this is self-serve from Account → Data; for the rest, email support@lockrjournal.com and we'll respond within 30 days.
If you're in the EU/UK, you also have the right to lodge a complaint with your local data-protection authority.
7. How long we keep things
We keep your account data while your account is active. After you delete your account, we hard-delete trading and journal data within 30 days, except where retention is required for legal, tax, or security reasons (audit logs are kept for 1 year).
8. Changes
We'll update this page when our practices change and email you about anything material. The “last updated” date at the top is always current.
9. Contact
Privacy questions: support@lockrjournal.com
Anything else: support@lockrjournal.com