1. Introduction
App Lock: Fingerprint & PIN ("the app") is an Android application published by Pivot Master Apps ("we", "us"). This policy explains what information the app handles, what leaves your device and what does not, and the choices you have.
It covers the app published on Google Play under the package name
com.pivotapps.applock, and this website.
Your PIN, your fingerprint setting and your list of locked apps stay on your phone.
2. What the app collects
"Collects" here means information that leaves your device. Everything the app does purely on your phone is listed in section 3 and is not collected by anyone.
| Information | When | Why | Where it goes |
|---|---|---|---|
| Advertising ID | Always, in the free version | To show and measure advertising | Google AdMob |
| App activity and diagnostics | Always | To see which features are used | Google Firebase Analytics |
| Crash logs and diagnostics | When the app crashes or misbehaves | To find and fix crashes | Google Firebase Crashlytics |
| Purchase status | When you subscribe | To unlock Pro and keep it across reinstalls | Google Play and RevenueCat |
What the app never collects
- Your PIN or your fingerprint
- Which apps you lock, or which apps are installed
- Which apps you open, or when
- Your name, email address or phone number
- Your precise location
- Your files, photos, contacts, calendar or messages
3. Processing that happens only on your device
App Lock stores your PIN only as a salted, one-way hash, together with the list of apps you chose to lock and your settings, in one file on the phone. Your fingerprint is checked by Android in its secure hardware; App Lock only learns whether it matched.
To know when a locked app opens, App Lock reads Android's usage events (which app came to the front) on the phone while the screen is on. These are never stored long-term, never uploaded, and never shared. The list of apps installed on your phone is read to show you what can be locked, and also never leaves the phone.
The app has no account and no server of its own. What is described below is collected by the advertising, analytics and billing services built into the app, not by the lock itself.
5. Advertising
The free version of the app shows advertisements served by Google AdMob. To do that, AdMob collects your device's advertising ID and technical information about your device, and may use it to show you personalised advertising. This is the one category of information that is genuinely shared with a third party.
You can reset or delete the advertising ID, or opt out of personalised advertising entirely, in Settings › Google › Ads on your device. Where required by law, the app asks for your advertising consent on first launch and you can change that choice later from the app's settings.
Buying the premium subscription removes advertising from the app.
6. Purchases and subscriptions
Purchases are processed by Google Play. We never see or store your card details. We use RevenueCat to record whether your subscription is active, which receives a purchase identifier and an anonymous app user id from the app.
7. Analytics and diagnostics
The app includes Google Firebase Analytics and Firebase Remote Config. These record anonymous events — app opens, which screens and features are used, device model, OS version, app version, coarse region — so we can tell which parts of the app are worth improving and can change configuration without shipping an update.
These events never contain your files, their contents, their names, or anything you typed into the app.
8. Permissions the app asks for
| Permission | What it is for |
|---|---|
| Usage access | To see, on the phone, which app has just come to the front, so a locked app can be covered by the lock screen. Never uploaded. |
| Display over other apps | To show the lock screen on top of the app you opened. |
| Biometric | To let you unlock with your fingerprint. Android checks it; the app only learns whether it matched. |
| Run in the background, start at boot, notifications | To keep protection running, bring it back after a restart, and show the required notification while it runs. |
| Internet | To load ads in the free version and check your subscription. |
Each one is requested at the moment the feature that needs it is used, and declining it only disables that feature.
9. Third-party services
The app relies on the following services. Each has its own privacy policy:
- Google AdMob — serves the ads in the free version (privacy policy)
- Google Firebase (Analytics, Crashlytics, Remote Config) — anonymous usage analytics, crash reports and remote configuration (privacy policy)
- RevenueCat — records whether your subscription is active (privacy policy)
- Google Play Billing — processes purchases (privacy policy)
We do not sell your information, and we do not share it with anyone for their own marketing.
10. Retention and security
We keep analytics events for 14 months, the Google Analytics default. Your PIN hash, locked apps and settings live only on your phone and are removed when you clear the app's data or uninstall it.
All communication between the app and any service is encrypted in transit using HTTPS/TLS. Data stored in our Firebase project is encrypted at rest by Google Cloud. Access to that project is restricted to Pivot Master Apps, and security rules limit every signed-in user to their own data.
No system is perfectly secure. If a breach affects your data we will notify affected users and the relevant authorities as required by law.
11. Your rights and choices
- Access and portability — ask us for a copy of anything we hold about you.
- Correction — ask us to correct inaccurate information.
- Deletion — uninstalling the app removes everything it stored, because it stores it only on your device.
- Advertising — opt out of personalised ads in your device settings, or subscribe to remove ads.
- Objection and complaint — if you are in the EEA or the UK, you may object to processing based on our legitimate interests and complain to your local data protection authority.
Write to pivotmasterapps@gmail.com to exercise any of these. We answer within 30 days.
12. Children
The app is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has provided us with information, contact us and we will delete it.
13. International transfers
Our service providers — Google and RevenueCat — operate globally, so information may be processed in countries other than yours, including the United States. Those transfers rely on the providers' own standard contractual clauses and equivalent safeguards.
14. Changes to this policy
We update this policy whenever the app changes what it does with your information, and change the "last updated" date above. Material changes are announced in the app.
15. Contact
Pivot Master Apps
pivotmasterapps@gmail.com
https://softwaredevelopement.github.io/applock/