How Lox handles your information — in plain language.
Lox (the "app", "we", or "us") is an Android app locker published by Dowble. It puts a lock screen in front of the apps you choose, so they open only after you unlock with your PIN, password, pattern, or fingerprint/face. This Privacy Policy explains what the app does and does not do with information on your device.
Lox processes the following information locally on your device only. None of it is transmitted off the device.
To let you pick which apps to protect, Lox reads the list of apps installed on your device (their names, icons, and package names). Only the apps you choose to lock are saved, together with the time you locked them.
To know when to show the lock screen, Lox needs to see which app has just come to the front. It uses Android's Usage Access and, if you enable it, an Accessibility service to do this. The foreground app is compared against your locked list as it happens. Lox does not keep a history of which apps you open or how often you use them.
Your PIN, password, or pattern is salted and hashed on the device with PBKDF2-HMAC-SHA256. Only the hash, its salt, and the lock type are stored, in Android Keystore–backed encrypted storage. The original code cannot be recovered from what is stored.
If you choose fingerprint or face unlock, authentication is performed by Android's system biometric prompt. Lox only receives a "success" or "failure" result. It never receives, stores, or transmits fingerprint or face data.
If you turn on Intruder selfie (it is off by default), Lox uses the front camera to take a single still photo after repeated wrong unlock attempts. No preview is shown and nothing is recorded at any other time. Photos are saved in the app's private storage, are viewable only inside Lox, and can be deleted by you from the app.
Your settings, such as the re-lock timeout, light/dark appearance, whether protection is on, and whether uninstall protection is enabled, are stored locally on the device.
Lox does not access your contacts, call logs, SMS, location, photo gallery, microphone, or accounts, and it does not read the content of the apps you lock.
| Permission | Purpose |
|---|---|
PACKAGE_USAGE_STATS(Usage access) |
To detect when a locked app comes to the foreground so the lock screen can be shown. Checked on-device in real time; no usage history is kept or sent. |
| Accessibility service ( BIND_ACCESSIBILITY_SERVICE) |
Optional, and shown with an explanation before you enable it. It listens only for "a new window opened" events to (1) detect locked apps faster and more reliably, and (2) recognise when an uninstall screen is for Lox itself, so uninstall protection can ask for your unlock first. It does not record keystrokes, read the content of other apps, or store anything it sees. |
SYSTEM_ALERT_WINDOW(Display over other apps) |
To draw the lock screen on top of the protected app. |
QUERY_ALL_PACKAGES |
To list your installed apps so you can choose which ones to lock. The list stays on the device. |
USE_BIOMETRIC, USE_FINGERPRINT |
To unlock with fingerprint or face via Android's system prompt. Biometric data never reaches the app. |
CAMERA(Optional) |
Used only if you turn on Intruder selfie, to take a front-camera photo after repeated wrong attempts. The front camera is not required; Lox works fully without it. |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE |
To keep the protection engine running so locked apps stay locked. Android shows an ongoing notification while it runs. |
POST_NOTIFICATIONS |
To show that ongoing "protection active" notification. Lox sends no promotional notifications. |
RECEIVE_BOOT_COMPLETED |
To restart protection automatically after your device restarts. |
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS(Optional) |
To ask Android not to pause protection in the background. You can decline and the app still works. |
| Device administrator (Optional, uninstall protection) |
Enabling it stops Lox from being uninstalled until you switch it off, so nobody can remove the app to get around your locks. Lox requests no device-admin policies: it cannot wipe, lock, or otherwise control your device. |
VIBRATE |
Haptic feedback when you enter your PIN or pattern. |
The app is built without the INTERNET permission, so it is technically incapable of sending your data over the network.
Information accessed by the app is used only to provide its features: showing the lock screen in front of the apps you chose, checking your unlock, optionally capturing an intruder photo, protecting the app from being uninstalled, and remembering your preferences. We do not use your information for advertising, profiling, or any purpose unrelated to the features you see in the app.
We do not share, sell, rent, or disclose your information to anyone. Because the app has no network access, your data never leaves your device and is never sent to us or to any third party. The app's lock data and locked-app list are also excluded from Android cloud backup and device-to-device transfer. No serversNo adsNo analyticsNo cloud
The in-app Rate, Share app, and Feedback options open the Play Store, Android's share sheet, or your own email app, and only when you tap them. Sharing sends only the app's Play Store link. A feedback email is pre-filled with your device model and Android version, which you can edit or delete before sending. Anything you send goes from you, through your email provider, to us. This is you contacting us, not the app collecting data.
Your locked-app list, lock settings, and any intruder photos remain on your device until you delete them. You can:
All processing happens on-device. Your lock credential is stored only as a salted PBKDF2 hash inside Android Keystore–backed encrypted storage, and verified in constant time. App data and intruder photos are kept in Android's private per-app storage, which other apps cannot read. Biometrics never leave Android's secure framework. Because nothing is uploaded, there is no server-side database that could be breached.
Lox is a general-purpose security utility and is not directed to children under 13. It does not knowingly collect personal information from children. Since the app collects no data and has no online component, it poses no data-collection risk to users of any age.
Lox does not integrate advertising networks, analytics or crash-reporting SDKs, or social login providers, and it embeds no third-party trackers. The app is distributed through Google Play, which may process installation and update data under Google's Privacy Policy; we have no access to that data.
Depending on where you live, you may have rights under privacy laws such as the GDPR or CCPA. Since Lox does not collect or hold any of your personal data on our side, there is nothing for us to access, correct, export, or delete on your behalf. You have full control of your data on your device.
We may update this Privacy Policy if the app's features change. When we do, we will revise the "Effective" date above and publish the updated policy at this address. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
Questions or concerns about this policy or the app? Reach us at: