隐私政策Privacy Policy

Shenzhen YueTan Trade CO.,LTD ("we", "us") takes your privacy seriously. TTLocker (the "App") is a privacy-protection tool built on a core principle: your private content stays on your device only — we do not collect it, upload it, or have any way to view it.

This policy explains what information we collect when you use the App, how it is used and protected, and the rights you have. Please read it carefully before using the App. By using the App, you agree to this policy.

We collect a minimal set of information, solely for account identity and membership verification:

• Apple sign-in credentials: When you sign in with Apple, we receive the identity token issued by Apple to verify your identity and create your account. We receive your email address only if you choose to share it with the App; otherwise we receive no personal information.
• Device identifier: The App generates a random device identifier (UUID) on your device to recognize your subscription and membership status. It contains no name, phone number, location, or any information that directly identifies you.
• Purchase & subscription information: Purchases are processed by the Apple App Store. We receive subscription status (e.g., whether you are a member) anonymously through RevenueCat to unlock premium features. We never receive your payment card details or full billing information.

We collect nothing else.

The following content is stored only on your device, encrypted, and is never uploaded to our servers or any third-party server. Because the encryption keys live solely in your device's Keychain, we have no technical means to read it:

• Photos and videos imported into the Private Vault (encrypted with AES-256-GCM);
• Notes, files and audio recordings kept in the vault;
• Contact information imported into the vault;
• The passcode you set;
• Your location rules (area coordinates and the app restrictions attached to them);
• App usage statistics and app-control configurations.

Location data is used only on your device to determine whether you are inside a rule area and enforce the restrictions you configured. It is never logged, uploaded, or shared.

The App requests these permissions only when you use the corresponding features, and you may change them any time in system Settings:

• Photos: to import photos into the vault, or save vault content back to your photo library;
• Face ID: to unlock the App and vault quickly and securely;
• Location (when-in-use / always): to determine whether you are inside a configured area and enforce the attached app rules. Location is processed on-device only;
• Microphone: to record voice memos inside the vault;
• Contacts: to import contacts into the vault for encrypted keeping;
• Screen Time (Family Controls): to read app usage and enforce time limits, app hiding, and related controls.

• To verify your sign-in and create/manage your account;
• To recognize and verify your subscription and membership status and unlock the corresponding features;
• To process redemption codes and membership activation;
• To keep the service secure and prevent abuse or fraud.

We never use collected information for advertising, cross-app tracking, or sale to any third party.

• Apple App Store / Sign in with Apple: sign-in and payments are handled by Apple under its own privacy policy;
• RevenueCat: subscription validation working with anonymous identifiers only, with no access to your identity. See RevenueCat's privacy policy (privacy.revenuecat.com).

The App contains no ad networks, analytics, crash reporting, or any other tracking third-party SDK.

Content stored on your device remains there until you delete it or uninstall the App. Uninstalling permanently deletes all vault content with no possibility of recovery (encryption keys are device-only and do not migrate with backups).

Server-side account and subscription data is kept only as long as needed for membership verification. When you request account deletion, we delete the related data. All traffic is encrypted via HTTPS, and server-side data is protected with access controls.

• Access & deletion: anything in the vault can be viewed or deleted in the App at any time;
• Account deletion: request deletion of your account and server-side data via support@smspi.com; we will process it within a reasonable period;
• Withdraw permissions: turn off photos, location, microphone, etc. in iOS Settings at any time; the related features will stop;
• Sign out: available inside the App.

The App is intended for a general audience and is not directed to children under 14. We do not knowingly collect personal information from children under 14. If you believe a child has provided us personal information, contact us at support@smspi.com and we will delete it promptly.

We may update this policy from time to time. Updates will be posted on this page with a revised effective date. Material changes will be highlighted in the App where appropriate.

For any questions, suggestions or complaints about this policy or our handling of personal information:

• Email: support@smspi.com
• Operator: Shenzhen YueTan Trade CO.,LTD