Privacy policy

The short version

This policy covers the Loki app and lokifocus.app. The PostHog section describes the analytics in current versions of Loki; versions without it do not send events to PostHog. Subscription provisions apply when subscriptions are offered.

Who we are

AimLabs ("we", "us", or "our") makes Loki and operates this website. AimLabs is responsible for the personal data described in this policy, including as the data controller where that term applies. For privacy questions or requests, contact hello@lokifocus.app.

Business address: Kwikstaartlaan 42 C6939, 3704 GS Zeist, Utrecht, Netherlands.

What stays on your device

Loki stores the information needed for your focus features on your device. This includes:

• Goals, intentions, next steps, focus notes, reflections, and feelings you record.
• Session history, including start and end times, duration, and how a session ended.
• Schedules, app and website selections, restriction settings, and local unlock information.
• Preferences such as your theme, sounds, and notification choices.

Loki's widgets and supporting components may share the local information they need to work. We do not receive the contents of this storage, and we do not send your written content or Screen Time information to analytics providers.

If you back up your device using iCloud or a computer, Loki data may be included under your Apple settings and Apple's privacy policy. We do not operate a separate cloud backup or sync service.

Usage analytics with PostHog

We use PostHog EU Cloud as a service provider to help us understand which Loki features are useful and improve the app. Analytics events are stored in PostHog's European Union hosting region. This is product analytics within Loki, not advertising tracking or monitoring your activity in other apps.

Event data is limited to selected actions within Loki, such as starting a focus timer, saving a block, or opening settings; the kinds of features and settings you use, such as a timer's length, a block's days, or whether you're on the free plan, PRO, or a free trial; the time of the event; your App Store country; and basic technical details such as app version, iOS version, device model, screen size, language, time zone, and network type. Events carry a randomly generated installation identifier and a session identifier so that related events can be understood together.

PostHog also keeps a profile for each installation with its current app settings, such as your plan, theme, and timer preferences, and simple counts like how many goals and blocks you have set up. It never includes what you write or which apps you pick.

We do not link the installation identifier to your name, email address, or Apple Account. When you subscribe while analytics is on, Loki gives Apple this identifier with the purchase, so Apple's records of that subscription carry it. We do not send transaction identifiers to PostHog.

We do not send PostHog:

• Your name, email address, contact details, or account credentials.
• Anything you type, including goals, intentions, notes, reflections, and next steps.
• Screen Time selections or tokens, selected app or website names, browsing history, other apps' usage, or records of attempts to open blocked apps or websites.
• Advertising identifiers, payment details, or precise location.

We do not use session replay or screen recordings. Analytics uses selected events, not automatic recording of everything you tap or type. PostHog uses the IP address that every network request carries to estimate an approximate location (country, region, and city) and then discards the IP address. We do not store your IP address or your precise location, and we do not use location to identify you or for advertising.

Loki does not start analytics on its own for App Store accounts in the EU, the EEA, the UK, or Switzerland. Elsewhere, analytics is on unless you switch it off. To turn analytics off, email hello@lokifocus.app and we'll reply with the steps to switch it off in the app. It stays off until you switch it back on. Whether analytics is on or off never changes the features included in your plan. You can also contact us about analytics or object to processing as explained under Your choices and rights.

If you choose to share analytics with app developers in your iPhone's settings, Apple also shares crash reports for Loki with us. Apple controls that choice and what it shares.

Screen Time and permissions

Loki asks for Apple's Screen Time permission to hold the apps and websites you choose. Your selection is represented by tokens on your device. Apple may also make an app or category label or website domain available for Loki's block screen and local unlock experience. This information stays on your device; it is not shared with us or PostHog.

You can change your selections in Loki and revoke Screen Time permission in your device's Settings. Notifications are scheduled locally and can be managed in iOS Settings. We do not need a remote push server to deliver session reminders.

Apple subscriptions and trials

All paid access offered in Loki is purchased through Apple's in-app subscriptions. We do not use another payment provider or offer purchases through this website. Apple processes your payment and manages trial eligibility, billing, renewals, cancellations, and refunds under its own terms and privacy policy.

Apple makes purchase information available to Loki so the app can check and restore access. This can include the subscription product, transaction identifiers, purchase and expiry dates, trial status, and whether access is active, expired, or revoked. Apple may also provide us with sales and financial reports. We do not receive your payment-card number or Apple Account password, and we do not send transaction identifiers to PostHog.

See the Terms of use for renewal and cancellation details.

Website and support

This website does not run PostHog, advertising tools, or other visitor analytics, and its own code does not set cookies. It is hosted by Vercel, which processes ordinary request information such as IP address, browser information, requested page, and request time to deliver and protect the site.

Fonts load from Google Fonts. Those requests send your IP address and browser request information to Google, under Google's privacy policy.

If you email us, we receive your email address, your message, and any attachments you choose to send. We use them to answer you, resolve the issue, and keep a record of the conversation. Our email service provider processes those messages to deliver and store them. We do not add you to a marketing list because you contacted support. Please avoid sending sensitive information that we do not need.

Why we process information

Where the GDPR or similar laws apply, we use the following legal grounds:

• Providing the service: processing needed to supply features you request, check subscription access, and respond to service requests.
• Consent: analytics or device permissions where consent is required. You can withdraw consent without changing the lawfulness of earlier processing.
• Legitimate interests: keeping the website secure, handling general correspondence, and improving Loki through limited analytics only where permitted without consent and where your rights do not override those interests.
• Legal obligations: records or responses we are required by law to keep or provide.

We do not use your information for automated decisions that produce legal or similarly significant effects on you.

Sharing and international processing

We do not sell or rent your personal data, or share it for targeted or cross-context behavioral advertising. Providers such as PostHog, our website host, and our email provider process only the information needed for their services. Where they process data on our behalf, we require appropriate contractual protections. Apple separately handles App Store purchases and Apple services under its own policies.

We may disclose information when legally required or reasonably necessary to protect people's rights, safety, or the security of our services. If Loki is transferred to another operator, relevant records may transfer with it, subject to applicable law and notice of any material change in how your data is used.

Our providers may process information outside your country. Where an international transfer of personal data requires safeguards, we use an applicable adequacy decision or appropriate contractual safeguards, such as standard contractual clauses. You can contact us for information about the safeguards relevant to your data.

Retention and security

Local app content stays on your device until you remove it or the app's local storage. Device backups are managed separately through Apple or your computer. Deleting the app does not cancel an Apple subscription or delete records already held by a service provider.

Raw PostHog analytics events will be kept for up to 12 months after collection and then deleted. We may keep aggregate statistics for longer only when they can no longer reasonably identify you or an installation. This retention period also applies when analytics is introduced in a future release.

Support correspondence is kept while resolving your request and for necessary follow-up or dispute handling. Security logs are retained for the period needed to detect and investigate abuse. Records required by law are kept for the applicable statutory period. Apple determines retention for the purchase records it controls.

We use reasonable technical and organizational measures to protect information, including restricting access to people who need it. No storage or transmission method can be guaranteed completely secure.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal data; restrict or object to certain processing; and withdraw consent. You may also complain to your local data protection authority. We do not discriminate against people for exercising their privacy rights.

• Local content: use Loki's available editing and deletion controls. Before removing the app, end active holds or revoke Screen Time permission. Manage any backups separately.
• Permissions: change Screen Time and notification access in your device's Settings.
• Subscriptions: manage or cancel them in Settings › your name › Subscriptions. Deleting Loki does not stop renewal.
• Analytics: to turn it off, email hello@lokifocus.app and we'll send you the steps to switch it off in Loki.
• Requests: email hello@lokifocus.app. We respond within the period required by applicable law and ask only for information reasonably needed to verify and handle your request.

We cannot access content stored only on your device. Because analytics is not linked to your name or email, we may also be unable to locate particular events from an email address alone. We will explain any such limitation and, where possible, help you use an installation identifier without asking you to disclose your private content.

Children

Loki is not directed at children under 13, or a higher minimum age where local law requires one. We do not knowingly collect personal data from children below that age. If you believe a child has provided personal data to us, contact us so we can investigate and delete it where required.

Changes and contact

We will update this page and its effective date when our practices change. For material changes, we will provide an appropriate notice, including in the app where relevant, and obtain consent when required before new processing begins.

Privacy questions: AimLabs · hello@lokifocus.app.