Privacy Policy
Last updated: September 13, 2026
What we collect
We collect only what PactLock needs to function: your email, the commitments you create (title, blocked items, duration, penalty), your witness relationships, and emergency unlock requests. We do not collect browsing history, location data, or device identifiers beyond what is required for authentication.
How we use your data
Your commitment data is used solely to enforce your commitments and provide the PactLock service. We never sell your data. We never use your commitment details for advertising. Aggregate, anonymized statistics (like total commitments created) may be used to improve the service.
Your WHY statement
The personal reason you write when creating a commitment is visible only to you and your invited witness (if you choose to invite one). It is never shared publicly or used for any purpose beyond displaying it on your contract and dashboard.
Payment data
Payment processing is handled by Stripe. PactLock stores Stripe references and limited payment metadata needed to reconcile stake collection, refund, forfeiture, and subscription status. We never store full card numbers.
Community circles
Circles show your chosen alias (or a generated member label), not your account display name or email. Public circle names and descriptions are discoverable; member lists, activity posts and reactions require membership. An invitation lets someone preview a private circle, but they must join to read its posts. Direct messages are available to the sender and recipient while they are members. Leaving a circle does not erase earlier posts; account deletion removes your community content. Avoid identifying details in your alias or messages.
Drafts during sign-in
When you choose to continue a draft through sign-in, its settings and optional personal reason are saved in this browser tab for up to one hour. They are removed from temporary storage when restored. This does not create, sign or charge a commitment automatically.
Android blocker beta
With your separate consent, the Android Accessibility service checks the foreground app and address bars in supported browsers to display a shield over items you chose to block. These observations are processed locally and are not recorded or uploaded. PactLock does not read page contents, messages or passwords. The app stores commitment rules on your phone for offline blocking and encrypts its limited device connection credential using Android Keystore. We store a random installation identifier, credential digest and latest connection status to sync your rules; this is not an advertising identifier. Disconnect removes local rules and credentials, and requests server credential revocation while you are signed in and online. You can disable the service in Android Settings. Device access remains subject to your operating system, and blocking cannot prevent uninstall.
Data deletion
You can delete your account from Profile after every active commitment ends and all payments are settled. Community content and direct identifiers are deleted or anonymized. Limited transaction and audit records may be retained where required for financial, fraud-prevention, dispute, or legal obligations.
Contact
For privacy inquiries, contact us at privacy@pactlockapp.com.