Privacy Policy
- Your records are encrypted on your device with a key only you know. The key never reaches us, so we cannot read your records.
- We keep only what the app needs: your account, your encrypted records, and licensing and payment records.
- No ads, no tracking, no analytics, and nothing is sold. You can delete your account and its records in the app.
This policy explains how !Locker (“the app”, “we”, “our”) collects, uses and stores your personal information when you use !Locker on Windows, Mac, iPhone and Android.
1. Who we are
!Locker is made and run by Jesora Labs (Joji George, Aluva, Ernakulam, Kerala, India). Contact: support@jesoralabs.com.
2. Your records and your key
!Locker encrypts your records (their titles, field names and values) on your device, with a key only you know, before they leave it. The key is never sent to us. What reaches our server is the encrypted records, behind your account, which we cannot decrypt. Because we never have your key, we cannot recover a forgotten key.
3. What our server receives and keeps
| Data | Used for |
|---|---|
| Your !Locker account: your name, user name and, if you add it, your e-mail address | Your account, and resetting a forgotten password. Your password is stored only as a one-way hash. |
| Your encrypted records | Keeping them safe and in sync across your devices. We cannot decrypt them. |
| For !Locker Pro, your e-mail address | Signing you in with one-time codes, sending your license key, receipts and renewal reminders, and answering you. Sign-in codes are stored only in hashed form. |
| An anonymous device identifier (stored as a keyed hash) and whether the device is a computer or a phone | Tying the free trial and the license to your devices. |
| License and subscription records | Trial and license dates, renewals, and the devices a license was used on. |
| Payment records from Razorpay or PayPal | The payment id, amount, currency, date and status and, for PayPal, your PayPal payer id. For a subscription bought in Google Play or the App Store, the purchase token and subscription status the store reports. We never receive your card, bank, UPI or PayPal details. |
| Your consent to automatic renewal | A record of the agreement: the terms shown, the time, IP address and browser. |
| IP addresses of requests | Limiting abuse, such as repeated sign-in attempts. |
We use this information only to provide !Locker, to prevent misuse and to keep the accounting records the law requires. We do not use it for advertising or profiling.
Permissions on your phone
- Face ID / fingerprint: only to unlock the app on your phone. Biometric data never leaves your device and is never sent to us.
- Internet: to keep your account and encrypted records in sync with our server.
4. Where it is stored
Your account, encrypted records and licensing records are stored on our server at locker.jesoralabs.com, and everything is sent over an encrypted HTTPS connection. Older versions of the app connect through jojigeorge.com, which passes their requests on to this server without keeping any data.
5. How long we keep it
We keep your account and encrypted records until you delete them or your account. When you delete your account in the app, your account and all of its encrypted records are deleted permanently. License records are kept while you use !Locker, and payment records for as long as Indian tax and accounting law requires. Sign-in codes expire shortly after they are issued.
6. Your choices and rights
- Edit or delete any record in the app.
- Delete your !Locker account and its records in the app.
- Turn automatic renewal off at any time (License › Manage subscription); a subscription bought in Google Play or the App Store is managed in that store.
- To ask for a copy of your information, or for it to be deleted by e-mail, write to support@jesoralabs.com.
Records we must keep by law, such as payment records, are kept for the required period. Depending on where you live, you may have additional rights under local law, including under India's Digital Personal Data Protection Act, 2023.
7. Third parties
!Locker contains no third-party analytics, advertising or social sign-in. We share information only with service providers that help us run the service, as needed: our hosting and e-mail providers, Razorpay (India) and PayPal (elsewhere) for payments, and Google Play and the App Store for purchases made there. We do not sell or rent personal information, and we share it with others only when the law requires.
8. Security
Besides encrypting your records on your device, we use reasonable technical and organisational measures to protect information, including HTTPS connections to our server and hashed passwords and sign-in codes. No method of transmission or storage is completely secure. Keep your key somewhere safe.
9. Children
!Locker is not meant for children under 13 (under 16 in the EU), and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.
10. Changes
If we make an important change to this policy, we will update the date at the top of this page. If you keep using the app after a change, you accept the updated policy.
11. Contact
Jesora Labs (Joji George)
Aluva, Ernakulam, Kerala 683101, India
support@jesoralabs.com
The Jesora Labs company-wide policy for jesoralabs.com is at jesoralabs.com/privacy.