Privacy Policy

The short version

WaitToUnlock stores your email address and your encrypted Screen Time passcode, and nothing else about you. Your passcode is encrypted before it is stored and is only decrypted when you request a reveal after the waiting period. Nothing is sold, rented, or shared for advertising, and you can delete your account and all of your data at any time. The rest of this page explains the details.

Introduction

WaitToUnlock ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use the service.

If you have any questions about this policy or your personal data, email hello@waittounlock.com.

Information We Collect

Account Information

When you sign in with Google, we receive your email address, your name as provided by Google, and a unique Google account identifier. On your account we store:

• Your email address
• A unique Google account identifier
• Whether your account has lifetime access
• When your account was created and when you last signed in

Passcode Data

When you use WaitToUnlock, we store:

• Your encrypted Screen Time passcode
• The current state of your passcode (for example, locked, countdown, or revealed)
• Timestamps required to manage countdowns and reveal requests

What We Don't Collect

WaitToUnlock does not collect:

• Your browsing history
• Which apps you use
• Your Screen Time activity
• Your photos, messages, or contacts
• Your Screen Time settings

The service only stores the information needed to authenticate your account and securely manage your encrypted passcode.

How We Protect Your Data

Your passcode is encrypted before it is stored in the database. We use:

• Encryption before storage: Your passcode is encrypted before being written to the database
• Secure transmission: All communication between your device and our servers uses HTTPS
• Firebase security: Data is stored in Google Firebase with strict access controls

Your passcode is only decrypted when you request a reveal after the required waiting period.

How We Use Your Information

We only use your information to:

• Provide the WaitToUnlock service
• Store and manage your encrypted passcode
• Authenticate your account
• Send service-related emails when necessary

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

Data Retention

We retain your data while your account is active. You can delete your passcode at any time through the app, or delete your entire account from the user menu. When you delete your account, your personal data is permanently removed from our production systems, subject to any temporary backup retention required for security and disaster recovery.

Third-Party Services

We rely on the following providers to operate WaitToUnlock:

• Google Sign-In: For authentication (Google Privacy Policy)
• Firebase (Google Cloud): For secure data storage and authentication, hosted in the EU (Firebase Privacy Policy)
• Vercel: For application hosting, configured to run in the EU (Vercel Privacy Policy)
• Stripe: For payment processing. When you purchase lifetime access, your email address and payment details are handled by Stripe. We never receive or store your card details (Stripe Privacy Policy)
• Google Analytics: To understand aggregate website usage, and only after you have given consent (Google Privacy Policy)

Each provider has its own privacy policy governing how it processes data.

Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under applicable data protection laws:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate personal data
• Right to erasure: Delete your passcode data or your entire account and all associated data at any time
• Right to restriction: Request that we limit how we process your data
• Right to data portability: Receive your personal data in a structured, machine-readable format
• Right to object: Object to the processing of your personal data
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent

To exercise any of these rights, email hello@waittounlock.com. We aim to respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe your personal data has been processed unlawfully.

Legal Basis for Processing

Where GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Contract performance: To provide the WaitToUnlock service you requested
• Legitimate interests: To keep the service secure, prevent fraud, and maintain reliability
• Consent: Where you have explicitly agreed, such as accepting analytics cookies

International Data Transfers

Our application is hosted on Vercel in the EU (Paris, France region - cdg1). Encrypted passcode data is stored in Google Firebase with primary residency in the EU. However, as part of Google's global infrastructure, data may be replicated or backed up internationally, including to the United States. Payment data is processed by Stripe, which also operates internationally. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and other mechanisms approved under GDPR Article 46.

Cookies and Analytics

We always use the minimum technical storage required for the service to function:

• Session cookie: Keeps you signed in during your visit
• Cookie consent preference: Remembers your analytics choice (stored in your browser's local storage)

With your consent, we use Google Analytics to understand aggregate website usage, such as pages visited and time spent on the site. Analytics is only enabled after you accept it through the cookie banner.

If you decline analytics, Google Analytics will not collect information about your visit. You can withdraw your consent at any time by clearing your browser's local storage for this site.

Children's Privacy

WaitToUnlock is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Significant changes may also be communicated through the service where appropriate.

Contact

Questions about privacy, GDPR requests, or concerns about your data?

Email: hello@waittounlock.com