What ZenLock stores, and where

All of the following is written to your device only — in UserDefaults and in a shared App Group container (group.com.js.ZenLock) used by the app and its Screen Time extensions:

• Your rules: names, emoji, schedules, weekdays, difficulty, break settings
• Your app groups (see the Screen Time section for what these actually contain)
• Shield events: when a shield was shown, and whether you continued, took a break, or used an emergency unlock
• Emergency unlock reasons you pick from the built-in list
• Protection-pause events
• Daily Screen Time minute totals produced by Apple's DeviceActivityReport extension
• App settings and onboarding progress

None of this is transmitted anywhere. There is no ZenLock backend to transmit it to.

Screen Time data

ZenLock uses Apple's Family Controls, Device Activity, and Managed Settings frameworks to shield apps you choose.

An important detail about how these work: when you pick apps or categories, iOS hands the app opaque tokens, not names or bundle identifiers. ZenLock cannot see which specific apps you selected, cannot read their contents, and cannot enumerate what is installed on your device. It stores the tokens so it can re-apply your own shields.

Screen Time totals are computed inside Apple's DeviceActivityReport extension, which runs in a sandbox that has no network access at all. It writes only aggregate minute counts into the shared App Group for the app to display.

Purchases

ZenLock Pro is sold through Apple's In-App Purchase. Payment is handled entirely by Apple — ZenLock never sees your payment details. The app reads your entitlement status from StoreKit to know whether Pro is unlocked. Apple's own privacy policy governs the transaction.

Notifications

ZenLock schedules local notifications (rule reminders, break endings, weekly reports). These are created and delivered on-device. No push server is involved and no device token is collected.

What ZenLock does not do

• No analytics or telemetry SDKs of any kind
• No advertising, no ad identifiers, no attribution
• No tracking across apps or websites (NSPrivacyTracking is false, and the tracking-domains list is empty)
• No accounts, logins, email collection, or contact upload
• No location, camera, microphone, photo, or health data access
• No third-party SDKs — the app ships with no remote package dependencies

Data retention and deletion

Because your data never leaves the device, you control all of it:

• Clear the sample data: Settings → clear demo data
• Delete everything: delete the app. iOS removes the app container and the shared App Group container with it, including all rules, events, and totals.

There is nothing for us to delete on our side, because we never received anything.

Children

ZenLock is not directed at children under 13 and does not knowingly collect personal information from them. Since it collects no personal information from anyone, this holds for all users.

Changes

If this policy changes, the effective date at the top will change with it. Material changes will also be noted in the app's release notes.

Contact

Questions about this policy: nextlab@agent.qq.com

← ZenLock