Privacy Policy
Last updated: May 2026
App Store Privacy Summary
The following data may be collected and linked to your identity, as required by Apple's App Store privacy guidelines:
Contact Info
Name, email address (used for account creation and login)
User Content
Tasks, goals, reflections, habits, AI planner prompts, and notes you create
Identifiers
Account ID, device push notification token, Apple ID token
Usage Data
Focus session durations, Pomodoro counts, habit completion logs, feature interactions
Financial Info
Revenue and lead values you manually enter into the Growth and Leads CRM features
Other
Contact form submissions (name, email, message)
No data is sold or used for third-party advertising or tracking.
1. Overview
CreatorOS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CreatorOS mobile and web application. Please read this policy carefully. By using the app, you agree to the practices described below.
2. Detailed Data Collection Disclosures
The following subsections describe every category of data we collect, why we collect it, how long we retain it, and who it is shared with.
2.1 — AI Planner Prompt Content
What is collected: The text you type into the AI Priority Planner, including your stated goals, task titles, business type, industry, biggest struggle, available time, and weekly win targets. This content is assembled into a prompt sent to a third-party AI provider.
Why it is collected: To generate personalized, high-impact task recommendations tailored to your specific situation. Without this content the AI cannot produce relevant suggestions.
How long it is kept: Prompt text is not stored by us beyond the API call. The generated output (your AI execution plan) is stored in your account for the current day only and automatically replaced the next time you generate a plan. You may delete your account at any time to remove all stored plans.
Who it is shared with: Your prompt content is transmitted to a third-party AI language model provider (currently OpenAI / GPT-based API) solely to generate your plan. This provider's use of API input data is governed by their API data usage policy, which states that API data is not used to train their models. No other parties receive this data.
2.2 — Daily Habit & Session Activity Data
What is collected: Records of which habits you completed each day, the dates and times of habit check-ins, streak counts, daily intention text, must-win goal text, and daily log records indicating whether your top 3 priorities were completed.
Why it is collected: To display your streak, calculate your discipline score, power the weekly retrospective, and send you timely push notification reminders. This data is the core of the CreatorOS productivity system.
How long it is kept: Retained for the lifetime of your account. Upon account deletion all habit and session logs are permanently removed within 30 days.
Who it is shared with: Not shared with any third parties. Processed internally on our secure infrastructure.
2.3 — Revenue and Lead Values (User-Entered Financial Data)
What is collected: Revenue figures, lead deal values, and growth metric numbers you manually type into the Growth Entry and Leads CRM features. This includes weekly revenue amounts, estimated deal values, metric labels, and notes.
Why it is collected: To render your ROI trend charts, weekly scorecard, and leads pipeline inside the app. This data is never verified against any external financial system; it reflects only what you choose to enter.
How long it is kept: Retained for the lifetime of your account. You can delete individual entries at any time within the app. All data is permanently removed within 30 days of account deletion.
Who it is shared with: Not shared with any third parties. This data remains entirely within your account and is visible only to you.
2.4 — Push Notification Tokens
What is collected: Your browser or device push subscription object, which includes an endpoint URL and cryptographic keys used to encrypt notification payloads. On iOS, this includes your Apple Push Notification service (APNs) device token. We also store your notification preferences (morning time, evening time, interval settings) and your UTC timezone offset.
Why it is collected: To deliver the opt-in push notifications you configure in Settings → Notifications. These notifications include morning priority reminders, streak warnings, evening check-ins, and completion hype messages. Without the token we cannot deliver notifications to your device.
How long it is kept: Stored for the lifetime of your account or until you disable push notifications in Settings, which removes your subscription record. Tokens are also invalidated automatically if your device revokes the permission.
Who it is shared with: Endpoint URLs are passed to Apple APNs (for iOS) or the Web Push Protocol (for browsers) solely to route the notification to your device. These services receive only the encrypted notification payload and the device endpoint; they do not receive your account email or personal data.
2.5 — Contact Form Submissions
What is collected: Your name, email address, and the message body you submit via the Contact page.
Why it is collected: To respond to your support request, feedback, or inquiry. We do not add contact form submissions to any marketing list.
How long it is kept: Contact messages are retained in our database until they are resolved or deleted by an administrator. We do not retain contact messages beyond 12 months of inactivity.
Who it is shared with: Not shared with third parties. Internally accessible to the CreatorOS support team only.
2.6 — Pomodoro and Focus Session Data
What is collected: Records of each CreatorOS Mode focus session you start, including: the session type (deep work, workout, study, etc.), your stated session intention, planned duration, actual duration completed, start and end timestamps, whether the session was completed or abandoned, the number of friction prompts shown (attempts to exit early), and the list of distraction app categories you selected to block.
Why it is collected: To display your focus history, compute your total deep work hours, track discipline metrics, and surface insights in the stats and retrospective screens. Session data also powers streak calculations and the discipline score card.
How long it is kept: Retained for the lifetime of your account. Permanently removed within 30 days of account deletion.
Who it is shared with: Not shared with any third parties. Processed internally.
2.7 — User Identifiers and Account Data
What is collected: Your email address, full name, account ID (a system-generated unique identifier), and — if you use Sign in with Apple — your Apple ID token and any Apple private relay email address Apple provides. We also store profile attributes you set during onboarding: life focus area, business type, industry, primary goal, biggest struggle, available hours per day, and current stage.
Why it is collected: To identify your account, authenticate you, associate all your data with you, personalize the experience to your persona and goals, and send you transactional emails (e.g., subscription receipts).
How long it is kept: Retained for the lifetime of your account. Upon requesting account deletion via Settings → Danger Zone → Delete Account, all identifiers and profile data are permanently removed within 30 days.
Who it is shared with: Your email address is shared with Stripe (our payment processor) when you subscribe, solely to link your payment to your account. Your Apple ID token is validated with Apple's authentication servers at login and is not forwarded elsewhere. No other identifiers are shared with third parties.
3. Sign in with Apple
We support Sign in with Apple as an authentication option. When you use this method:
- We receive your name and email (or Apple private relay email) from Apple to create and identify your account.
- We do not receive your Apple ID password or any payment information from Apple.
- If you choose to hide your email, all communications will be sent to your Apple private relay address.
- You can revoke CreatorOS's access to your Apple ID at any time from iOS Settings → Apple ID → Password & Security → Apps Using Apple ID.
- Apple's use of your data is governed by Apple's Privacy Policy.
4. How We Use Your Information
- To provide and personalize the CreatorOS experience
- To send you push notifications and email reminders you have opted into
- To generate AI-powered task suggestions based on your goals and task list
- To track and display your productivity streaks, discipline score, and progress
- To process payments for premium subscriptions via Stripe
- To respond to contact form and support inquiries
- To improve the app through aggregated, anonymized analytics
5. Third-Party Service Providers
We do not sell your personal data. We share data only with the following service providers, strictly for the purposes described:
- AI Language Model Provider (OpenAI): Receives AI planner prompt content as described in Section 2.1. Data is used solely to generate your plan response and is governed by OpenAI's API data usage policies.
- Stripe: Receives your email address and subscription plan to process payments. Stripe is PCI-DSS compliant. Stripe's privacy policy applies to payment data.
- Apple Push Notification Service (APNs): Receives encrypted notification payloads and device tokens to deliver iOS push notifications you have opted into.
- Web Push (Browser): Receives encrypted notification payloads and browser push endpoints to deliver web push notifications you have opted into.
- Base44 (Infrastructure): Our application backend and database infrastructure provider. All data described in this policy is stored on Base44's secure cloud infrastructure.
6. Data Storage & Security
Your data is stored on secure cloud infrastructure. We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Access is restricted to authorized personnel only. No sensitive financial account numbers or payment card data are ever stored by us; all payment data is handled exclusively by Stripe.
7. Push Notifications
Push notifications are entirely opt-in. You can enable or disable them at any time in Settings → Notifications. We only send notifications related to your tasks, priorities, and streaks. You may also revoke notification permission from your device settings at any time. Disabling notifications removes your push token from our systems.
8. Data Retention & Deletion
We retain your data for as long as your account is active. You may request account deletion at any time from Settings → Danger Zone → Delete Account. Upon deletion, all your personal data — including tasks, habits, sessions, AI plans, leads, reflections, push tokens, and profile information — is permanently removed within 30 days. This applies regardless of how you signed up, including Sign in with Apple. Contact messages submitted via the Contact page are retained for up to 12 months and then deleted.
9. Children's Privacy
CreatorOS is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Your Rights
Depending on your location, you may have the right to:
- Access or export your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Opt out of push notifications and marketing communications
- Object to processing or request restriction of processing (where applicable under GDPR)
To exercise these rights, use the account deletion feature in the app or contact us at the email below. For GDPR or CCPA requests, please include your email address and a description of your request.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
support@lockedinsupport.com