Privacy Policy
EdUnlock ("we", "us") helps you earn your own recreational screen time by answering study questions, and holds you to limits you set for yourself. This policy explains what we collect, why, who we share it with, and your choices.
Who runs EdUnlock: [legal entity / individual name], [address].
Contact: [privacy@edunlock.net]
1. Who this policy covers
This release of EdUnlock is for adults governing their own devices. Only adults create accounts: at sign-up we ask for a date of birth and block accounts for anyone under 18 (a neutral age gate).
EdUnlock does not currently offer child or family profiles, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. Should family features launch in future, this policy will be replaced by an edition that describes them, and material changes will be communicated to you.
2. What we collect
Your account
- Email address
- Display name
- Date of birth (used only to verify the 18+ requirement; we store the date)
- Password — stored only as a bcrypt hash; we never store or can see the plaintext
Your study activity
- Quiz attempts, scores, per-subject level and progress, strengths and weaknesses by topic
- Time earned, and the rules and limits you have set for yourself
- Any book, document, or other material you add in order to study from it
Signals from your device
- The list of apps installed on the device (package name, label, category), so you can choose which to govern
- Per-app usage minutes per day, and which app is in the foreground only while enforcement is active (used to pause and resume the earned-time timer)
- Whether EdUnlock's protection is on or off, and a last-seen timestamp
Your accountability partner, if you choose to add one
- The email address of the person you nominate, so we can send them the PIN that lets them approve changes on your behalf
- A bcrypt hash of that PIN
You are responsible for having that person's permission before entering their email address. They can ask us to delete it at any time using the contact details below, and we email them only in connection with your account.
We do not collect precise location, contacts, photos, microphone, camera, SMS, call logs, browsing history, or advertising identifiers. We do not use any advertising or third-party analytics SDKs.
3. Why we collect it
- Operate the earn-time-by-studying loop and grade quizzes server-side
- Enforce the time budget and the limits you set on your own device
- Apply the cooldown that delays changes to your own rules, and let a nominated accountability partner approve a change
- Send account emails (password reset, enforcement alerts, and messages to the accountability partner you designate)
- Generate study questions, study sheets and audio lessons, and an optional plain-language summary of your progress
We do not sell personal information, and we do not use it for behavioral advertising or to build advertising profiles.
4. Who we share it with
We share data only with vendors that process it on our behalf, under their terms:
| Provider | Role | What it receives |
|---|---|---|
| Neon | Managed PostgreSQL database | All stored data (encrypted at rest) |
| Oracle Cloud | Backend and API hosting | Data in transit while the app runs |
| Cloudflare | DNS, and object storage for generated audio lessons | Audio lesson files, which are topic-level content and contain no personal information |
| Anthropic (Claude API) | Generates study questions and optional progress summaries | Aggregated study statistics and app-usage labels, identified by a randomized ID rather than a name. Per Anthropic's API terms, API inputs are not used to train their models. |
| Google, xAI | Text-to-speech for audio lessons | Lesson scripts only — topic content, no personal information |
| Resend | Transactional email | Recipient email address and message content (for example a reset code) |
We may disclose information if required by law, or to protect the rights, safety, and security of our users and service.
5. Encryption and security
- In transit: all traffic is over HTTPS/TLS.
- At rest: the database is encrypted at rest by our database provider.
- Passwords, PINs, and password-reset codes are stored only as bcrypt hashes.
- Quizzes are graded on the server; correct answers never leave the database.
- Access is authenticated and scoped to your own account's data.
6. Retention and deletion
We keep data while your account is active. From within the app you can:
- Delete your account — removes the account and all data associated with it.
- Remove your accountability partner — deletes their email address and the stored PIN hash.
- Export your data on request.
Deletions are permanent. Backups age out on our providers' normal cycles.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export your data, and to withdraw consent. Use the in-app controls or contact us and we will respond as required by law.
8. Changes
We will update this policy as the app evolves and post the new effective date here. Material changes will be communicated in-app or by email.
9. Contact
[privacy@edunlock.net] — [legal entity], [mailing address].