Privacy Policy
Last Updated: October 31, 2025
1. Introduction
Welcome to Lockcard ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome Extension and iOS App (collectively, the "Services"). We are committed to protecting your privacy and being transparent about our data practices.
By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.
Age Restriction: Our Services are intended for users who are at least 13 years of age. If you are under 13, please do not use our Services.
2. Information We Collect
2.1 Information You Provide
Account Information: When you create an account, we collect your email address. Account creation is optional; you can use our Services without registering.
Vocabulary Data: We collect the words you save, including:
- Words and phrases you select
- Your custom definitions, example sentences, and notes
- Source URLs where words were encountered
- Context in which words appeared
2.2 Automatically Collected Information
Chrome Extension:
- Selected text and surrounding context from websites you visit
- URLs of pages where you save words
- Browser type and version
- Operating system information
- IP address (collected via Google Analytics)
- Usage statistics (features used, frequency of use)
iOS App:
- Device identifiers (for sync purposes)
- Device type and operating system version
- App usage statistics (collected via Amplitude)
- Push notification tokens (for notification flashcards)
- Widget interaction data
- Learning progress and statistics
Important Note: We do NOT collect:
- Your browsing history
- Text you type on websites (we only read text you actively select)
- Content from websites beyond your selected words and their context
- Cookies for tracking purposes
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Provision: To provide, maintain, and improve our vocabulary learning features
- Synchronization: To sync your vocabulary across Chrome Extension and iOS App (when manually triggered)
- AI Features: To generate personalized AI podcasts using DeepSeek and Microsoft TTS services
- Analytics: To understand usage patterns and improve our Services
- Notifications: To send push notifications for flashcard reviews (iOS App only, with your permission)
- Communication: To respond to your inquiries and provide customer support
4. Data Storage and Security
4.1 Storage Locations
Chrome Extension:
- Data is stored locally in your browser by default
- When you manually sync, data is stored on Minapp Cloud (知晓云) servers located in Asia
- Minapp Cloud is operated by iFanr Technology Co., Ltd. (广州爱范儿科技股份有限公司)
iOS App:
- Data is stored locally on your device using Apple's iCloud
- iCloud storage follows Apple's privacy practices and data location policies
4.2 Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit using HTTPS/SSL
- Secure authentication mechanisms
- Regular security assessments
- Access controls and monitoring
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.
5. Third-Party Services
We use the following third-party services:
Google Analytics (Chrome Extension)
We use Google Analytics to analyze usage patterns. Google Analytics may collect device information, IP addresses, and usage data. For more information, visit Google's Privacy Policy.
Amplitude (iOS App)
We use Amplitude for app analytics. For more information, visit Amplitude's Privacy Policy.
Minapp Cloud (知晓云)
Backend infrastructure and authentication service. For more information, visit Minapp Cloud.
DeepSeek & Microsoft TTS
Used for AI podcast generation. Your selected vocabulary words are sent to these services to generate conversational audio content. These services do not store your personal information.
RevenueCat
Used for subscription management and payment processing (iOS App). For more information, visit RevenueCat's Privacy Policy.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With third-party service providers listed above who assist in operating our Services
- Legal Requirements: When required by law, court order, or government request
- Protection of Rights: To protect our rights, property, safety, or that of our users
- Business Transfers: In connection with a merger, acquisition, or sale of assets
6.1 MCP Integration
The MCP (Model Context Protocol) integration in the iOS App runs locally on your device. It does not transmit your vocabulary data to external services beyond your explicit actions. When you connect MCP-enabled applications, you control what data is shared.
7. Social and Community Features (Optional)
🔒 Privacy First: All social features are OPT-IN and disabled by default.
You have complete control over what information you share with the community.
7.1 Available Community Features
We offer optional social features to enhance your learning experience and connect with other vocabulary learners:
- Word Statistics: See how many users have saved a specific word (anonymized count)
- Community Example Sentences: View and share example sentences created by other users
- Learning Connections: Discover other users learning the same words
- Popular Words: Browse trending vocabulary in the community
7.2 What Information May Be Shared
When you opt-in to community features, you may choose to share:
✅ What Can Be Shared (With Your Permission):
- Anonymized Statistics: Number of users who saved a word (no personal identification)
- Your Example Sentences: Custom sentences you create (you control visibility)
- Your Definitions: Personal notes you choose to make public
- Your Username: Display name (if you enable public profile)
- Website Domain: General domain name where word was found (e.g., "nytimes.com") - NOT full URLs
❌ What We NEVER Share:
- Your Email Address: Always kept private
- Complete Source URLs: Full webpage URLs are never shared (only domain names, if you opt-in)
- Your Full Vocabulary List: Unless you explicitly create and share a public list
- Learning Statistics: Your progress, streaks, and study times remain private
- Private Notes: Notes marked as private are never visible to others
- URLs from Sensitive Sites: URLs containing tokens, session IDs, or from password-protected pages
7.3 Privacy Controls
You have granular control over community features through your privacy settings:
- Participate in Statistics: Allow your saved words to be counted in anonymized statistics
- Share Example Sentences: Make your custom sentences visible to other users (per-sentence control)
- Public Profile: Create a public learner profile that others can discover
- Show Word Sources: Display website domains (not full URLs) where you found words
7.4 Default Settings
All community features are disabled by default. Your vocabulary data remains completely private until you explicitly choose to participate in community features. You can:
- Enable or disable features at any time
- Choose which specific content to share
- Withdraw shared content at any time
- Delete all publicly shared data with one click
7.5 Source URL Privacy Protection
Special protection for source URLs:
- Full URLs (with paths, parameters, tokens) are NEVER shared publicly
- Only domain names (e.g., "youtube.com", "wikipedia.org") may be displayed, and only with your permission
- URLs from password-protected sites, intranets, or containing sensitive parameters are automatically excluded
- You can review and edit source visibility for each word individually
7.6 Content Moderation
Shared content (example sentences, definitions) may be moderated to ensure community guidelines are followed. We reserve the right to remove content that is offensive, inappropriate, or violates our Terms of Service.
8. Your Rights and Choices
8.1 Access and Control
- Access: You can access and view your vocabulary data at any time within the Services
- Edit: You can modify or delete individual vocabulary items
- Export: You can export your vocabulary data (Premium feature)
- Sync Control: Synchronization is manual; you decide when to sync your data
8.2 Account Deletion
You can delete your account at any time through the app settings. Upon deletion:
- Your account will be deactivated immediately
- All associated data will be permanently deleted after 90 days
- If you log in within the 90-day grace period, the deletion will be canceled
- Local data in your browser or device remains until you manually clear it
8.3 Regional Rights
EU Users (GDPR Rights):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
- Right to withdraw consent
California Users (CCPA Rights):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information (we do not sell data)
- Right to access your personal information
- Right to equal service and price
To exercise any of these rights, please contact us at bravetsia@gmail.com.
9. Data Retention
- Active Accounts: We retain your data as long as your account is active
- Inactive Accounts: We do not automatically delete inactive accounts; your data is preserved
- Deleted Accounts: Data is permanently deleted 90 days after account deletion (unless you log in again)
- Analytics Data: Anonymized analytics data may be retained indefinitely for service improvement
10. Children's Privacy
Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at bravetsia@gmail.com, and we will delete such information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to the transfer of your information to:
- Asia (Minapp Cloud servers)
- United States (Google Analytics, Amplitude, Microsoft TTS)
- Other regions where our service providers operate
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending you an email notification (if you have an account)
Your continued use of the Services after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
14. Platform-Specific Information
14.1 Chrome Extension Permissions
Our Chrome Extension requests the following permissions:
- storage: To save your vocabulary data locally in your browser
- tts (Text-to-Speech): To provide pronunciation audio for words
- Content Scripts on all websites: To enable word selection and lookup on any webpage you visit
We only access content that you explicitly select. We do not read or collect any other content from the webpages you visit.
14.2 iOS App Permissions
Our iOS App may request the following permissions:
- Notifications: To send flashcard reminders and learning prompts
- iCloud: To store your vocabulary data in your personal iCloud account