Privacy Policy
Last updated: December 26, 2025
ChatLock is built with privacy at its core. This policy explains how we handle your data.
Who We Are
ChatLock is a product of ChatLock is a product operated by Francisco Requena, an independent professional (freelancer) registered in Spain..
- Email: chatlock@candelalabs.tech
- Website: https://chatlock.io
Our Privacy Principles
ChatLock follows three core principles:
- Local-first: Your chat history is stored on your device, not our servers
- Zero data retention: AI providers never store, log, or train on your conversations
- End-to-end encryption: Your data is encrypted with keys only you control
What Data We Collect
Account Data
When you create an account, we collect:
- Email address
- Name (optional)
- Password (stored as a hash, never in plain text)
Usage Data
We collect minimal usage data to operate the service:
- Login timestamps
- Subscription status
- Device type (for sync functionality)
What We Do NOT Collect
- Chat conversations: Your messages are encrypted and stored locally on your device
- AI responses: We do not log or store responses from AI models
- Browsing activity: We do not track your activity outside ChatLock
How We Use Your Data
We use your data only to:
- Provide and maintain the ChatLock service
- Process payments for subscriptions
- Send important account notifications
- Respond to support requests
We do not use your data for:
- Advertising or marketing profiling
- Selling to third parties
- Training AI models
Data Sharing
We share data only with:
- Payment processors: To process subscriptions (Stripe)
- AI providers: Minimal request data for processing (with zero retention agreements)
- Legal authorities: Only when legally required
We never sell your personal data.
Data Retention
- Account data: Retained while your account is active
- Chat history: Stored locally on your device only—we never have access
- Usage logs: Retained for 30 days for security purposes
You can delete your account and all associated data at any time from Settings.
Your Rights (GDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Delete your account and data
- Portability: Export your data in a standard format
- Object: Opt out of certain processing
To exercise these rights, contact us at chatlock@candelalabs.tech.
Security
We protect your data with:
- AES-256 encryption for data at rest
- TLS 1.3 for data in transit
- End-to-end encryption for chat history
- Regular security audits
Cookies
We use only essential cookies for authentication and session management. See our Cookie Policy for details.
Children
ChatLock is not intended for users under 16. We do not knowingly collect data from children.
Changes
We will notify you of significant changes to this policy via email or in-app notification.
Contact
Questions about this policy? Contact us:
- Email: chatlock@candelalabs.tech
- Contact form: https://chatlock.io/contact