Privacy
Privacy
This isn't a legal policy template — it's an accurate description of how Open Lock actually behaves. Open Lock is offline and on-device by design.
Summary
Open Lock runs entirely on your device. There are no accounts, no ads, no analytics, no telemetry, and no trackers. Your locked-apps list, schedules, settings, and any intruder photos never leave your phone.
The only network use is an optional check to GitHub for a newer release, which you can turn off in Settings.
What data is stored, and where
Your config
Locked apps, schedules, settings, and the PIN verifier are stored in encrypted on-device storage (AES-256-GCM, key in the Android Keystore).
Intruder photos
If enabled, front-camera snapshots after failed attempts are kept in app-private storage and can be deleted anytime.
Your PIN
Never stored as plaintext — only a salted PBKDF2-HMAC-SHA256 verifier is kept, so the raw PIN can't be recovered from the device.
No cloud copy
Nothing is synced to a server. With allowBackup="false", app-private data is excluded from system/cloud backups.
Does data leave the device?
No — with one optional exception. If you leave update checking on, Open Lock contacts GitHub only to look for a newer release. It does not send your app list, settings, or any personal data anywhere.
Permissions, and why
| Permission | Why |
|---|---|
| PACKAGE_USAGE_STATS | Detect the foreground app so a locked app can be caught. |
| SYSTEM_ALERT_WINDOW | Draw the lock screen over other apps and launch it from the background. |
| FOREGROUND_SERVICE / FOREGROUND_SERVICE_SPECIAL_USE | Keep the guard running persistently. |
| POST_NOTIFICATIONS | Show the ongoing "protection active" notice (Android 13+). |
| RECEIVE_BOOT_COMPLETED | Restart the guard after a reboot. |
| REQUEST_IGNORE_BATTERY_OPTIMIZATIONS | Optional — reliability on aggressive OEM ROMs. |
| USE_BIOMETRIC | Fingerprint / face unlock. |
| CAMERA | Optional — silent intruder snapshot if enabled. |
| QUERY_ALL_PACKAGES | List launchable apps you can choose to lock; read locally only. |
| INTERNET + REQUEST_INSTALL_PACKAGES | Optional in-app GitHub update download. |
Backups
Backups are user-controlled. You can export a .olbackup file that's encrypted with a passphrase you choose (Argon2id-derived key). Backups only exist if you make them.
Intruder data
Intruder photos stay in app-private storage on the device and can be deleted at any time from within the app.
Update checking
Optional and toggleable in Settings. When on, it contacts GitHub only to check for a newer release.
Third-party services & analytics
None are embedded. There is no analytics SDK. GitHub is contacted only for the optional update check.
Last updated: reflects Open Lock v….