GainLock

Privacy Policy

Effective date: 13 October 2026

Overview

This Privacy Policy explains how GainLock ("the App") handles your information.

The short version: GainLock has no accounts and no advertising, and we never sell your data. Your block list, exercise stats, camera, and step data stay on your device. The one exception is the optional Body Scan: its four photos are sent to be scored and are not kept (section 1.6). To find bugs and improve the App, we collect limited, anonymous usage information through PostHog, an analytics service, as described in section 1.1.

By using GainLock, you consent to the practices described in this policy.

1. Information We Collect

1.1 Data We Send Off Your Device

GainLock sends limited, anonymous usage data to PostHog to help us fix bugs and improve the App. This includes:

• App interactions: which screens you open, when the App is opened or closed, and how you move through it
• Session recordings: a replay of the App's screens, with all text and images masked so their content is never captured
• Device and diagnostic information: device model, Android version, app version, and basic performance information
• A random identifier generated for your install of the App

This data is not linked to your name, email, or any account. It never includes your block list, exercise stats, camera images, or step data. GainLock contains no advertising SDKs.

1.2 Data Stored Locally on Your Device

GainLock saves the following on your device only, so the App can work between sessions. This data is never uploaded:

This data is stored using Android's standard app-private storage and is removed when you uninstall the App.

1.3 Camera

GainLock uses your device camera to count exercise repetitions through on-device pose detection (Google ML Kit). Camera frames are processed in real time on your device to detect body movement. For rep counting, camera images are never saved, never uploaded, and never leave your device, and no photos or video are recorded. The optional Body Scan is the only feature that takes photos; see section 1.6. Session recordings (section 1.1) mask images, so the camera view and your photos are not captured.

1.4 App Usage Information

To enforce the apps you have chosen to lock, GainLock checks which app is currently in the foreground using Android's Usage Access permission (PACKAGE_USAGE_STATS). This check happens entirely on your device. The App uses it only to decide whether to show the GainLock intercept screen. This information is not logged long-term, not stored, and not transmitted.

1.5 Health and Fitness Data (Health Connect)

GainLock can read your step count from Android Health Connect to convert physical activity into earned screen time. This feature is optional and is only active if you grant Health Connect access. Your step count is read on your device, used solely to calculate earned time, and stored locally as part of your exercise stats. Your step data is never uploaded, never shared, and never sold. GainLock reads steps only. It writes no data to Health Connect and reads no other health data types. You can revoke access at any time in Health Connect settings or in Android Settings, and revoking it simply disables the walking-to-earn feature.

1.6 Body Scan (Optional)

Body Scan scores your physique from four photos (front, right side, back, left side) that the App takes with your camera when you choose to start a scan. Before your first scan it asks your sex and age, and optionally your height and weight. Body Scan is only available to people aged 18 or over; if you enter an age under 18, nothing is saved or sent.

When you tap Analyze, the four photos (reduced in size), your answers and the App's language are sent over an encrypted connection to our server, which runs on Google Cloud (Firebase), and from there to OpenAI to be scored. If you use Future You, your front photo and your scores are sent the same way so OpenAI can create the picture. A random identifier for your install is sent with Future You requests so we can apply a daily limit; it is not linked to you. Our server does not store or log the photos or your answers; it only passes them on and returns the result. OpenAI processes them on our behalf and may keep API data for up to 30 days to monitor for abuse, after which it is deleted; it does not use it to train its models.

The photos, your answers, your scores and any Future You pictures are saved on your device only, so you can see your history. They are deleted when you clear the App's storage or uninstall it.

2. App Permissions

GainLock requests the following permissions. Each is used solely for the App's core function: earning screen time through exercise.

2.1 Optional Uninstall Lock (Device Administrator)

GainLock includes an optional "uninstall lock." If you choose to enable it, GainLock registers as an Android device administrator solely so that the system requires you to deactivate it before the App can be uninstalled. This status accesses no data. GainLock declares no device-administrator policies. It cannot read, monitor, locate, or control your device, lock your screen, change passwords, or erase data. You can deactivate the lock at any time in Android Settings > Security > Device admin apps.

3. Information Sharing

3.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your information. The only data we receive is the anonymous usage data described in section 1.1 and, if you use Body Scan, the photos and answers described in section 1.6, which are passed on to be scored and not kept. We never sell any of it.

3.2 Service Providers

GainLock uses PostHog (posthog.com) to process the anonymous usage data described in section 1.1. PostHog processes this data on our behalf and does not use it for its own purposes. Data is processed in the United States. PostHog's privacy policy: posthog.com/privacy

If you use Body Scan, your photos and answers are processed by our server on Google Cloud (Firebase) and by OpenAI (openai.com), as described in section 1.6. Both process this data only to return your result. OpenAI's privacy policy: openai.com/policies/privacy-policy

The leaderboard shown in the App is simulated locally on your device for motivation. It does not represent real users and does not communicate with any server.

3.3 Legal Requirements

We may disclose the anonymous usage data we hold if required by law. We do not hold Body Scan photos or answers. All other data stays on your device and under your control.

4. Third-Party Services

GainLock uses Google ML Kit for pose detection. ML Kit's pose detection runs entirely on your device and does not send images or pose data to Google. For reference: developers.google.com/ml-kit/terms

GainLock can read step data from Android Health Connect, an on-device data store provided by Google. GainLock only reads your step count from Health Connect and does not transmit that data to Google or anyone else. Health Connect is governed by its own terms: health.google/health-connect-android

GainLock uses PostHog for anonymous product analytics and session recordings, as described in sections 1.1 and 3.2. PostHog's privacy policy: posthog.com/privacy

The optional Body Scan uses OpenAI to score photos and create Future You pictures, as described in section 1.6. OpenAI's privacy policy: openai.com/policies/privacy-policy

The App is distributed through Google Play. Google Play may collect information governed by its own policy: policies.google.com/privacy

5. Data Storage and Security

• All app data other than the anonymous usage data in section 1.1 is stored locally in Android's app-private storage.
• GainLock's network connections are the encrypted (HTTPS) upload of anonymous usage data to PostHog and, only when you use Body Scan, the encrypted upload of your scan to be scored.
• There are no accounts and no passwords.
• Uninstalling the App permanently deletes all of its data from your device.
• Anonymous usage data is kept by PostHog only as long as needed for analytics, after which it is automatically deleted.

6. Your Rights and Choices

• You can view and change your block list, settings, and stats within the App at any time.
• You can reset the App's data by clearing app storage in Android Settings, or by uninstalling.
• You can grant or revoke any permission at any time in Android Settings.

GDPR (European users) and CCPA (California users): You have rights to access, correct, delete, and port your personal data. The only data we hold is the anonymous usage data described in section 1.1, which is not linked to your identity; Body Scan photos and answers are not kept by us. To ask about it, email hyperfixlabs@gmail.com. All other data lives on your device and is under your control.

7. Children's Privacy

GainLock is not directed at children under 13 and does not knowingly collect data from children. Body Scan cannot be used by anyone who enters an age under 18. The only data collected from any user is the anonymous usage data described in section 1.1, plus Body Scan photos and answers from adults who choose to use it (section 1.6), which are not kept.

8. Changes to This Policy

We may update this policy. Changes take effect upon posting with a new "Effective Date." Continued use of the App constitutes acceptance.

9. Contact

For privacy questions:
Hyperfix Labs — hyperfixlabs@gmail.com

Data Practices Summary

Thank you for using GainLock.

Terms of Service