LockFramePrivacy Policy
Last updated: October 29, 2026
LockFrame (the "App") is an Android app provided by 25lab LLC (the "Operator"). This page explains what information the App handles and how.
Our approach
Photos and videos imported by the App are stored only inside the App on your device. The Operator does not run any server that stores your photos or videos, and cannot receive or view them. There is no account to create.
The App imports photos and videos only that you choose, from places you specify. It communicates with external services only for the purposes described below.
Information the App handles
| Information | When it is collected | How it is used | Where it is stored |
|---|---|---|---|
| Photos and videos | When you pick them, or when the App reads them from a folder, NAS or shared link you specified | Shown in the slideshow or as the lock screen wallpaper | On your device (the App's private storage) |
| Photo details (date taken, location recorded in the photo, size, etc.) | When a photo is imported | Ordering, and showing the date and place taken | On your device |
| Photo ratings (focus, brightness, number of faces, smiles, etc.) | When calculated on your device after import | Showing your best shots more often in "Smart" ordering | On your device |
| Display history (when and how often a photo was shown) | When a photo is shown | Avoiding showing the same photo too often | On your device |
| Calendar events and holidays | When you turn on events and allow calendar access | Showing events and holidays | Read only, not stored |
| NAS and WebDAV connection details (address, user name, password) | When you enter them | Reading photos from the folder you specified | On your device (Android encrypted storage) |
| Weather area (the place name you set and its location) | When you turn on weather and set an area | Showing the weather | On your device |
| Settings | When you change them | Applying them to how the App works | On your device |
| Usage data (which screens were opened, which features were used) | When you use the App | Improving the App | Google's servers (Google Analytics for Firebase) |
| Crash reports | When the App crashes or freezes | Fixing bugs | Google's servers (Firebase Crashlytics) |
How each photo source is handled
Google Photos (Google Photos Picker API)
- Tapping "Add" opens Google's photo picker. The App receives only the photos and videos you select there, and cannot see any other photos or albums
- Selected photos and videos are downloaded and stored inside the App on your device. They do not pass through the Operator's servers
- The access authorization (access token) for your Google account is used only to receive the photos, and is kept only on your device. It is never sent to the Operator's servers
- The only permission (scope) the App requests is `photospicker.mediaitems.readonly`, which is needed to use the picker
- The App's use and transfer to any other app of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Specifically, photos and information received are used only to provide the feature you use (showing the slideshow). They are not used for advertising, are not read by humans, are not used for any other purpose, and are not transferred or sold to third parties
- You can revoke the App's access to your Google account at any time in your Google Account settings (https://myaccount.google.com/permissions)
Device folders and Google Drive
- The App reads only the folders (and their subfolders) you choose in Android's folder picker. It does not read photos anywhere else
- Google Drive folders are likewise read only if you choose them in the same picker. Communication with Drive is handled by the Google Drive app on your device; the App does not use the Google Drive API
NAS and PCs (SMB, WebDAV)
- The App reads only the folder you specified on the server you entered. Communication takes place only between your device and that server, not through the Operator's servers
Google Photos shared links (experimental)
- The App reads only the shared link page you entered and imports the photos and videos shown on that page. It does not access any other page or account. It checks the page about once a day
Sharing from other apps and picking device photos
- Only photos handed over through "Share" in another app, or picked in Android's photo picker, are copied into the App
Sending information outside your device
The App never sends your photos, videos, photo ratings or display history to the Operator's servers or to third parties. Apart from reading photos from the sources above, it communicates externally only in the following cases.
Weather (off by default)
- Only if you turn on weather and set an area, the location of that area (latitude and longitude rounded to two decimal places, about 1 km) is sent to the Operator's relay server (running on Cloudflare, Inc.'s service). The relay server fetches the forecast for that location from the Norwegian Meteorological Institute (MET Norway) and returns it
- Only the rounded location is sent, with nothing that identifies you or your device. The relay server temporarily caches forecasts per location, but does not keep the requester's IP address or any record of which locations were requested
- Setting the area does not use your device's location permission. To look up a location from a place name, the App uses Android's place search (a Google service)
Photo location (off by default)
- Only if you turn on the photo location display, the location recorded in a photo is converted to a city or town name using Android's geocoding feature (Geocoder; a Google service on most devices). This means photo locations may be sent to Google, and are handled under Google's privacy policy
- The resulting place names are stored only on your device and never sent to the Operator's servers
Face detection
- For "Smart" ordering, the App uses Google's ML Kit on your device to detect the number and size of faces in a photo and whether people are smiling. Photos are not sent off your device. The App does not identify who anyone is
Usage data
- To improve the App, usage data is sent using Google Analytics for Firebase by Google LLC
- This includes the types of screens opened, features used, counts rounded into rough ranges, device model, OS version, language and country, and an identifier assigned per app installation
- Photos, videos, photo locations, calendar events and weather areas are not sent. The advertising ID is not collected
- The data is deleted after Google's retention period. See Google's privacy policy (https://policies.google.com/privacy) for how Google handles information
Crash reports
- To fix bugs, crash reports (where in the App it stopped, the App version, device model, OS version and similar state, and an identifier assigned per app installation) are sent using Firebase Crashlytics by Google LLC
- Photos, videos, photo locations and calendar events are not sent
Paid plans (Google Play Billing)
- Purchases and cancellations of the paid plans (LockFrame Plus: monthly, yearly and one-time) are handled through Google Play. Payment information is handled by Google, and the Operator does not receive it
- The App checks on your device, through Google Play, whether you have purchased a plan
Permissions
| Permission | Purpose |
|---|---|
| Internet | Importing photos, fetching weather, and sending usage data and crash reports |
| Display over other apps | Showing the slideshow over the lock screen when the screen turns on |
| Notifications and foreground service | Waiting for the screen to turn on, and showing progress while importing photos |
| Read calendar (optional) | Showing events and holidays. Requested only when you turn this on |
| Set wallpaper | The rotating lock screen wallpaper feature |
| Run at startup | Resuming the lock screen display after the device restarts |
Retention and deletion
- Imported photos and videos remain on your device until you remove them, or until older items are removed because the storage limit you set is exceeded
- You can remove photos per source in the App. Uninstalling the App deletes all information stored by it on your device. Photos at the source, such as in Google Photos, are not deleted
Children
The App is not directed at children under 13.
Changes to this policy
When this policy changes, we will update this page and its "last updated" date. For significant changes in how information is handled, we will also let you know in the App.
Contact
25lab LLC
contact@25lab.net