Privacy Policy

Last updated: 3 October 2026

LikeLocker is a gifting app. This policy explains what personal information it collects, why, and what your choices are. It is written to be read, not to hide things.

What we collect

• Your account: your email address, a password (stored only as a secure hash by our authentication provider), and the name you choose to display. Optionally, a profile photo, and your birthday. The friends you share your Locker with can see the day and month of your birthday (never the year), so they know when to get you something. A switch next to your birthday turns that off, and it is then private to you. We also use it to greet you on the day.
• Your Gift Radar: if you choose to fill it in, short notes and photos about what you are currently into (music, food, an event, a trip). These are shown to the people you share your Locker with, to help them choose well.
• Your Locker: the items you save, with their name, an optional link, shop, price, category, size, colour, a rough budget, your notes, an optional photo, an optional occasion and date, and how much you say you’d like each one.
• Your connections: the email addresses you use to connect with friends and family, and the connections that result. If you invite someone who is not on LikeLocker yet, we keep the email address you typed so we can send the invitation and connect you if they join.
• Occasions: names and dates you add for birthdays, anniversaries and other occasions (these are about other people, are visible only to you, and are used to remind you), optionally linked to someone you are connected with.
• Gifting activity: which items you claim from other people’s shared Lockers, any private notes you add to a claim, the LockerSwap events you create or join, and, if you take part in a LockerSplit, the amount you choose to chip in.
• Notifications: if you allow them, a code that identifies your phone to the notification services, so we can send you reminders and updates.
• Basic technical data: app version, device type and operating system, crash reports, and product-usage events (see “Analytics and crash reports” below). We do not collect your precise location.

Why we use it

• To run the app: to show your Locker, let you share it, let the people you share with claim gifts, run LockerSwaps and LockerSplits, and send you the reminders you ask for.
• To keep the service secure and working, and to fix problems.
• To understand, in aggregate, which features people use, so we can improve the app.

Our lawful bases under UK GDPR are performance of a contract (to provide the app you signed up for) and our legitimate interests (to keep it secure and to improve it). We do not use your information for advertising, and we do not sell it.

What other people can see

The point of LikeLocker is that the surprise survives, so this is enforced, not just hidden:

• When you share your Locker, the people you share it with see your items, your notes, sizes and colours, and how much you’d like each one. They also see your display name and profile photo, and anything you chose to add to your Gift Radar. They can also see the day and month of your birthday, never the year, unless you switch that off in your profile. They never see your email address.
• When someone claims a gift from your Locker, you are never told, not who, and not which item.
• In a LockerSwap, each person is told only who they are buying for. No one, including the organiser, can see the full set of pairings.
• In a LockerSplit, the people chipping in towards the same gift can see each other’s names and amounts, so they can sort out who pays what. The person the gift is for can never see any of it.
• If you create a share link, anyone who has that link can open your Locker on the web without an account. Treat it like a private link and only send it to people you want to see your Locker. You can switch it off at any time in the app. Claiming a gift always needs a signed-in account.

Photos

Item photos and profile photos are stored on our file-storage provider with unguessable web addresses. Anyone you share a Locker with can see the photos on the items in it. The files are technically reachable by anyone who has the exact address, so please don’t upload anything you wouldn’t want a gift-giver to see.

Reminders and notifications

If you allow notifications, we send reminders about occasions you have added and updates such as a new connection request or something new in a Locker shared with you. For an occasion linked to a friend, and for the birthday of a friend who shares it with you, a reminder can say how many things are in their Locker and how many are still unclaimed, but only if that friend currently shares their Locker with you. Some reminders, such as an occasional nudge about something you saved a while ago, are created on your own phone and never leave it. Notifications are delivered by Apple (iPhone) and Google (Android), through Expo’s notification service. You can switch them off in your phone’s settings at any time.

Saving from other apps

When you save a link, whether you paste it or share it to LikeLocker from another app, our servers visit that web page to read its name, picture and price, so you don’t have to type them in. On iPhone, the share sheet can save an item straight into your Locker without opening the app. To allow that, your phone keeps a private access code that we can recognise but that cannot be used to sign in or to read anything: all it can do is add an item to your own Locker. We store only a scrambled fingerprint of it, never the code itself. Signing out cancels it.

Scanning a barcode

If you use the barcode scanner, the camera is used only to read the barcode number on your phone. We do not take or store a photo. The number is sent to our server, which asks free public product databases (such as Open Food Facts, Open Library and UPCitemdb) what the product is. Only the number is sent: those services are not given your name, email or account. Product details they return can be wrong, so you are always asked to check before saving. Camera access is optional and you can turn it off in your phone’s settings.

Analytics and crash reports

We use PostHog (hosted in the EU) to count things that happen in the app, for example “saved an item” or “shared a Locker”, with coarse properties such as a price band. These events are linked to a random account number, not to your name or email, and we never send item names, notes or other content. We use Sentry (hosted in the EU) to receive crash reports from the app, which contain technical details such as your device model, operating system, app version and the technical trace of what went wrong. You can also opt out of sharing crash data with Apple in your phone’s settings.

Who processes your data for us

• Supabase: our database, sign-in and file storage. Your data is held on Supabase infrastructure on servers in the United Kingdom (London).
• PostHog (EU): product analytics, as described above.
• Sentry (EU): crash reports, as described above.
• Resend: sends the invitation email when you invite someone who is not on LikeLocker yet. It receives that person’s email address and your display name, as they appear in the invitation.
• Expo / EAS: builds and delivers app updates, and delivers push notifications.
• Apple: distributes the app through the App Store and TestFlight and delivers notifications to iPhones.
• Google: distributes the Android app through Google Play and delivers notifications to Android phones through Firebase Cloud Messaging.
• Cloudflare: hosts our website and the web page that a share link opens.
• Open Food Facts, Open Library and UPCitemdb: free public databases that identify a product from its barcode number, as described above. They receive the barcode number only.

These providers act on our instructions and are bound by contract to protect your data. Some of them, for example Expo, Resend, Google and Apple, may process data outside the UK. Where they do, the transfer relies on safeguards recognised under UK data protection law.

How long we keep it

We keep your information for as long as your account exists. Signing out does not delete anything. To delete your account and its data, use “Delete my account” in the app (on the Profile screen; the full steps are at likelocker.co.uk/delete-account), or email hello@likelocker.co.uk and we will delete it within 30 days. Some records may be kept briefly afterwards where the law requires (for example, security logs).

Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to processing based on legitimate interests. Email hello@likelocker.co.uk and we will respond within one month. If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner’s Office at ico.org.uk.

Children

LikeLocker is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will remove it.

Changes to this policy

If we change this policy we will update the date at the top, and for significant changes we will let you know in the app.