Privacy, without euphemisms

What stays. What leaves. Who receives it.

Locke Basic answers entirely on your Mac. Paid network features are optional, visible, and recorded in a content-free privacy receipt.

Last updated: 24 July 2026

Local answering

Basic and Plus answers run on your Mac. Your prompts, prior turns, documents, pictures, and generated answers are not sent to Locke or an answering provider.

Application and update traffic

Locke may check first-party endpoints for app updates and retrieve app/model assets. This operational traffic does not include conversation content and is not web-enabled answering.

Paid corpus downloads

A signed-in Plus owner or active Max subscriber may request a short-lived download grant. Locke receives account/device authorization and the requested release identifier. The downloaded corpus is verified and then used locally.

Locke Cloud

When you select Locke Cloud, Locke sends the current prompt and any categories shown in the confirmation—such as prior turns or document text—to Locke's service and model provider. The app records the destination, categories, time, request identifier, and outcome, without copying your content into the receipt.

Web answers

Web is a per-turn Max control and only works with Locke Cloud. A search query may be sent to Exa, and selected page content may be sent to the cloud model. Cited source URLs appear with the answer and in the privacy receipt.

Optional diagnostics

Anonymous product counts and timings are off by default. If you enable them, they never include prompts, documents, images, answers, email addresses, or source text.

Your controls

• Use On My Mac at any time, including with Max.
• Review durable disclosure receipts inside each conversation.
• Turn optional diagnostics off in Settings.
• Delete local conversations and their stored attachments from Locke.

Who controls your data

Keyholdr Inc., 868 Lorimer St, Suite 5C, Brooklyn, NY 11222, United States, is the controller for the personal data described below. Contact us at privacy@asklocke.com.

What we hold, and why

If you never sign in, we hold nothing about you. Once you create an account we hold:

• Your email address, to sign you in and to contact you about purchases and support. We need it to provide the service you asked for.
• Device descriptions and session records for the Macs you sign in on, to enforce the three-device limit and let you revoke access.
• Purchase and subscription records, to give you the access you paid for and to meet our tax and accounting obligations.
• Operational metadata for paid requests — timing, sizes, counts, outcome, estimated cost — to run the service, prevent abuse, and control cost. This never includes your prompts, answers, documents, images, corpus excerpts, or search queries.

We do not sell personal data, we do not run advertising, and we do not use your content to train models.

How long we keep it

• Per-request operational detail: 30 days.
• Daily usage totals: 400 days.
• Account, device, and profile data: until you delete your account, then removed within 30 days.
• Payment and invoice records: retained as long as tax and accounting law requires, even after account deletion.

Who else processes it

We use a small number of providers, each for one job: Stripe for payments and billing; Cloudflare for hosting, storage, database, and sign-in email; Baseten for cloud model inference; and Exa for web search. Baseten and Exa are involved only when you choose Locke Cloud or enable web for a turn. If you switch optional diagnostics on, TelemetryDeck receives anonymous counts.

These providers operate internationally, so your data may be processed outside your country under the safeguards their agreements provide.

Your rights

You can ask us for a copy of your personal data, correct it, delete it, or object to how we use it. Account deletion is available in the app and revokes every session immediately. Write to privacy@asklocke.com for anything else, and we will respond within one month. If you are in the UK or EU and unhappy with our response, you may complain to your local data protection authority.

Deleting your account also ends your ability to restore Plus or download corpus releases later. Conversations and corpus data on your Mac are yours, and are not touched by deletion of your account.

Children

Locke is not directed at children, and we do not knowingly create accounts for anyone under 16.

Changes

We will update this page when what we do changes, and the date at the top shows the current version. If a change materially affects how we handle your data, we will tell account holders before it takes effect.