Privacy policy

This privacy policy explains how LYT SAS, operating the LYT brand (“LYT”), collects, uses and protects the personal data of users of the LYT mobile app and of the website www.lockyourtime.com. LYT complies with the EU General Data Protection Regulation 2016/679 (GDPR), the UK GDPR and the French Data Protection Act of 6 January 1978 as amended.

LYT SAS

55 boulevard du Commandant Charcot, 92200 Neuilly-sur-Seine, France

SIREN: 988 923 165

contact@lockyourtime.fr

The LYT app is built on the principle of data minimisation. The following information is stored locally on your phone (iPhone or Android):

• Email address entered during onboarding: stored only on your device and not sent to any server in the current version of the product.
• Settings: blocking profiles, session length, selected apps. This data never leaves your phone.
• Android version, accessibility service: on Android, LYT uses the accessibility service, only with your explicit consent, to detect when an app or website you chose to block opens and show the LYT screen on top of it. LYT only reads the name of the app in the foreground and the address of the website shown in the browser, at the moment they open. It does not read your messages, what you type or page content. Nothing is recorded or sent. You can turn this access off at any time in Android’s accessibility settings.
• Usage statistics: number of sessions, streak, best session. Calculated and stored only on your device.

No usage data, no Family Controls (Screen Time) permission, no data from Android’s accessibility service and no information about blocked apps is sent to LYT, Apple, Google or any third party. The app works without an account, without any connection to a LYT server and without analytics tracking.

When you visit the website or join the waitlist, the following data may be processed:

• Email address: collected only when you join the waitlist, to let you know when orders open.
• Payment data (once sales open): processed directly by Stripe, a PCI-DSS certified payment provider. LYT never has access to your card number or security code.
• Connection data: IP address and technical logs kept temporarily by our host Vercel for security and performance.

With your prior consent, collected through the banner shown on your first visit, the Meta pixel is placed on your device to measure the effectiveness of our ads and show you relevant ads on Facebook and Instagram. Also with your consent, Google Analytics measures traffic to the website. Without your consent, none of this data is sent to Meta or Google.

Your data is processed only to:

• Let you know when the LYT Tag is available in your country (waitlist).
• Process, ship and track your order once sales open.
• Reply to your messages sent to contact@lockyourtime.fr.
• Meet our legal and accounting obligations.
• Measure the effectiveness of our ads, only if you have consented.

Under Article 6 of the GDPR and UK GDPR, processing is based on:

• Your consent, when you join the waitlist or accept advertising cookies (Art. 6(1)(a)). You can withdraw it at any time.
• Performance of the sales contract for the LYT Tag (Art. 6(1)(b)).
• Compliance with legal and accounting obligations (Art. 6(1)(c)).
• LYT’s legitimate interest in keeping the website secure and answering users’ requests (Art. 6(1)(f)).

Your data is never sold, traded or rented. It is shared only with the processors strictly needed to run the service:

• Stripe Payments Europe Ltd. (Ireland): waitlist storage and online payments.
• Vercel Inc. (United States): website hosting.
• Meta Platforms Ireland Ltd. (Ireland): ad measurement, only if you accepted cookies.
• Google Ireland Ltd. (Ireland): website traffic measurement (Google Analytics), only if you accepted cookies.
• Delivery partners: delivering your order (name and delivery address only).

Each processor is bound by an agreement compliant with Article 28 of the GDPR. Transfers outside the European Union and the UK (notably to Vercel in the United States) are covered by the Standard Contractual Clauses adopted by the European Commission and the UK International Data Transfer Addendum.

• Waitlist email address: kept until the launch in your country, then up to 12 months unless you place an order, or deleted earlier on request.
• Order data (name, address, email): kept for as long as needed to perform the contract, then archived for 10 years to meet accounting and tax obligations.
• Payment data: kept by Stripe under its own policy. LYT stores no bank details.
• Contact emails: kept for 3 years after our last exchange.
• Technical logs: kept for up to 12 months.
• Meta advertising cookie “_fbp”: up to 90 days, and only with your consent.
• Google Analytics cookies “_ga” and “_ga_*”: up to 13 months, and only with your consent.
• Data stored locally in the LYT app: kept while the app is installed, deleted when you uninstall it.

Under Articles 15 to 22 of the GDPR and UK GDPR, you have the following rights at any time:

• Right of access: get confirmation that your data is processed and a copy of it.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): ask for your data to be deleted.
• Right to restriction: temporarily suspend the processing of your data.
• Right to data portability: receive your data in a structured, readable format.
• Right to object: object to processing on legitimate grounds.
• Right to withdraw your consent at any time, without affecting the lawfulness of earlier processing.

To exercise your rights, email contact@lockyourtime.fr. We will reply within one month at most. We may ask for proof of identity if we have reasonable doubts about who you are.

If you believe your data protection rights have not been respected after contacting us, you can complain to the French data protection authority (CNIL, www.cnil.fr) or, if you live in the UK, to the Information Commissioner’s Office (ICO, ico.org.uk).

LYT uses appropriate technical and organisational measures to protect the confidentiality, integrity and availability of your data: encrypted HTTPS (TLS) across the whole website, payments through a PCI-DSS certified provider (Stripe), app data stored locally on your phone (iPhone or Android), and access to data limited to what is strictly necessary.

This website uses technical cookies that are strictly necessary for it to work and, only after your explicit consent, the Meta advertising cookie “_fbp” (lifetime: 90 days), which measures the effectiveness of our campaigns and shows you relevant ads on Facebook and Instagram, and the Google Analytics cookies “_ga” (lifetime: 13 months), which measure traffic to the website. If you decline, no such cookie is placed and the website works normally. You can change your choice at any time with the “Manage cookies” link at the bottom of every page.

The LYT service is not specifically aimed at children under 15. Where the law requires it, the consent of a parent or guardian is needed for any processing of data about a child.

This policy may be updated at any time to reflect changes to the service or the law. Any significant change will be shown on the website and, where relevant, in the app. The date of the last update appears at the top of this page.

For any question about this policy or your personal data, you can contact us at:

contact@lockyourtime.fr