Lockey · Legal
Privacy Policy
This Privacy Policy explains how ENTEROPIA LLP (“we”, “us”, or “our”) handles information when you use Lockey — the desktop application and this product website.
Lockey is a local desktop locker. We do not run a Lockey cloud account. Your files, master password, item passwords, recovery answers, and vault do not leave this computer to ENTEROPIA LLP.
1. Who we are
Lockey is a product of ENTEROPIA LLP. Company website: enteropia.com.
For privacy questions about Lockey, contact ENTEROPIA LLP through enteropia.com.
2. What this covers
This policy applies to:
- The Lockey desktop application on Windows, macOS, and Linux.
- This product website, including download pages for installers.
- Optional visits to enteropia.com if you open the company link from the app or site.
It does not apply to Microsoft, Apple, GitHub, or other platforms you use to obtain Lockey, or to third-party sites you open yourself. Those parties have their own policies.
3. What we do not collect
Lockey is built so protected items and secrets stay on your computer. ENTEROPIA LLP does not:
- Create a Lockey user account, profile, or cloud login.
- Receive, store, sync, or back up your files, folders, or .lockey packages on our servers.
- Receive your master password, item passwords, or recovery answers.
- Run telemetry, advertising, or analytics in the desktop app that upload vault contents or file bytes.
- Sell personal information.
- Store payment card numbers for Lockey. There is no in-app checkout in the desktop locker.
If you email or write to us for support, that correspondence is separate from the app vault. We only see what you choose to send.
4. Information on your device
The desktop app accesses information on this computer so it can lock and unlock items you choose. That access happens locally. It is not a transfer to ENTEROPIA LLP.
4.1 Files and folders you protect
When you add a lock, Lockey reads the path you pick. For a Strong lock it encrypts file or folder bytes into a .lockey package on that disk. For a Light lock it changes local permissions. Those items may contain personal documents. They stay under your control on the device (and on copies you make).
4.2 Passwords and recovery
- The master password is processed on this computer. A verifier is stored locally; the password is not stored in plaintext.
- Item passwords are verified locally. Optional copies may be wrapped in a local vault after you unlock the dashboard, so this computer can show them.
- Recovery answers are hashed locally. They are not stored in plaintext.
- A random pepper used with the master-password verifier is kept in the operating system secret store (for example Windows Credential Manager or macOS Keychain).
4.3 Local app data
Lockey stores a local database and related files in the application data folder on this computer (for example AppData on Windows, Application Support on macOS). That registry can include item labels, local paths, protection mode, verifiers, wrapped item passwords, settings, and activity summaries (filenames, not passwords).
Next to your files, Lockey may write sidecar metadata or a .lockey package. Sidecars hold verifiers and, for Strong locks, a wrapped file key. They do not hold the master password or a plaintext item password.
4.4 Permissions the operating system may grant
To lock real files, the app needs permission to read and write the locations you select. On some systems you may also grant broader folder or disk access. You can refuse or revoke those permissions in the operating system. Doing so may limit what Lockey can protect.
4.5 Optional company link
If you choose to open enteropia.com from the app, the operating system opens that site in a browser. That visit is under the company site’s own practices, not a vault upload.
5. This website
This product site is a static page for describing Lockey and offering installers. It does not create accounts, set advertising cookies, or require sign-in.
The host that serves the site (for example GitHub Pages or another web host) may record ordinary request logs such as IP address, browser type, URL, and time. Those logs are used to deliver files and operate infrastructure. We do not use them to build a Lockey user profile.
If you download an installer, that request is a file download from the host. The installer itself is the desktop app described in this policy.
6. Microsoft Store and other stores
If you install Lockey from the Microsoft Store, Microsoft may collect information about the download, updates, device, and Store account under Microsoft’s Privacy Statement. That data is processed by Microsoft, not placed in a Lockey cloud by ENTEROPIA LLP.
Apple, GitHub, or other distributors you use similarly process data under their own terms.
This page is the privacy policy URL intended for Partner Center and Store listing for the Lockey desktop product.
7. How information is used
On your device, Lockey uses local information only to:
- Lock and unlock files and folders you register.
- Keep the dashboard, settings, and activity list on this computer.
- Verify the master password and, if you set them, recovery answers.
- Optionally reveal saved item passwords after you unlock the dashboard.
If you contact us, we use the details you send to respond. We do not use vault contents for advertising — we do not receive them.
8. Sharing
ENTEROPIA LLP does not receive your vault, files, or passwords from the app, so we cannot share those with third parties.
Limited processing that is not vault data:
- Website hosting. The provider that serves this site may process request logs to deliver pages and installers.
- App stores. Microsoft or another store operator processes distribution data under their policy if you install from them.
- Legal. We may disclose information we actually hold (for example a support email you sent) if required by law or valid legal process, or to protect rights and safety.
Copies of locked items that you move (USB, email, another PC) go where you send them. A Strong .lockey package still needs the item password to open in Lockey.
9. Retention
- Local app data remains on this computer until you factory-reset Lockey, delete those files, or uninstall and remove leftover data.
- Sidecars and .lockey packages remain next to your items until you delete them. Removing an item from the dashboard does not delete your original file.
- Factory reset deletes Lockey’s local database and the local secret-store pepper. It does not delete your documents.
- Website host logs are kept only as long as the host’s ordinary operations require.
- Support messages you send may be kept as business correspondence unless you ask us to delete what we can lawfully remove.
We cannot remotely wipe your vault. There is no Lockey account on our servers to delete. You control the data on the device.
10. Security
Measures appropriate to a local locker include:
- Argon2id verifiers for the master password and item passwords.
- AES-256-GCM for Strong encrypted packages and for wrapping saved item passwords in the local vault.
- A pepper in the operating system secret store mixed into the master-password verifier.
- Activity records that use filenames, not passwords or other secrets.
- No cloud sync of vault contents.
No method of storage is perfectly secure. Protect your master password, item passwords, and physical or account access to this computer. A forgotten Strong item password cannot be recovered from the package by us — we never had it.
11. Your rights and controls
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal data. For Lockey:
- Everything the app stores for locking is on this computer. You can inspect, export a catalog backup from Settings, or delete it locally.
- Lock dashboard drops the in-memory vault key. Files stay as they were.
- Factory reset removes Lockey’s local database and secret-store pepper, not your documents.
- Uninstall the app and delete leftover application data if you want Lockey’s registry gone from this machine.
- Revoke file or disk permissions in the operating system.
Because we do not hold your vault, we cannot produce a copy of your locked files from our servers. If you sent us a support message, contact us through enteropia.com to request access or deletion of that correspondence.
12. Children
Lockey is a desktop utility for locking files. It is not directed at children under 13, and we do not knowingly collect personal information from children. We do not create child accounts. If you believe a child has sent us personal information by email, contact us and we will delete what we hold.
13. Changes
We may update this Privacy Policy when the product or the law changes. The “Last updated” date at the top will change when we do. The current version will be posted at this URL. Material changes may also be noted on the product site.
14. Contact
ENTEROPIA LLP
Product: Lockey
Company: enteropia.com
Privacy questions: contact ENTEROPIA LLP through enteropia.com.