Privacy

Only what the platform needs to work:

DataWhy

Email address

Signing in, and sending you things you asked for

First and last name

So chapter leaders know who is in their chapter. Your last name is never shown to other members

School and grade

Placing you in a chapter and filtering opportunities to your year

Profile picture

Optional. Either an image you upload or a set of colours and shapes you pick

What you post

Posts, comments, reactions, guides, and opportunities you submit

Files you attach

Images, PDFs, and markdown files you add to a post, guide, or listing

Volunteer hours

What you logged, who approved it, and when

Activity streak and badges

Calculated from the above; we don’t track you around the internet to build them

IP address

Kept briefly to stop spam and abuse, then deleted (see Keeping)

We do not collect your date of birth, phone number, home address, or payment details. There are no advertising trackers and no third-party analytics scripts.

We do not sell or rent student data. Not your profile, your hours, the opportunities you save, or your posts. Not to advertisers, not to colleges, not to the organisations that post opportunities here, not to anyone, ever. This is a promise about you, and it does not expire when the way Locked pays for itself changes.

WhoCan see

Other members of your chapter

Your first name, grade, profile picture, badges, and anything you post to the chapter feed

Everyone signed in to Locked

Anything you post to the global feed, and any guide or opportunity of yours that has been published

Your chapter leader

The above, plus your full name and email, so they can run the chapter and approve your hours

Your school advisor

Volunteer hours they are asked to co-sign, via a link emailed to them

Locked staff

Everything, for moderation and support

Anyone with a transcript link

The volunteer-hours transcript you chose to generate and share

Your email is never shown to other students, and your full last name is shown only to a chapter leader.

One exception: when you ask to join a club, its officers see your first name and last initial, “Sarah K.”, so they know which Sarah is asking. Nothing else about you comes with it.

A guide or post marked chapter-only is visible to your chapter and nobody else. That’s enforced by the database itself, not just the interface.

Locked is a small project and doesn’t run its own infrastructure. These companies process data on our behalf:

ServiceWhat it handles

Supabase

The database, sign-in, and uploaded files

Vercel

Hosting the website

Resend

Sending email: advisor hour approvals, the weekly summary, notices when this policy changes, and replies to feedback you send us

Google

Only if you choose to sign in with Google

YouTube, Vimeo, Loom

Only when you press play on an embedded video. Until you do, nothing is requested from them

Your account and what you post stay until you delete them. Anti-spam records, including IP addresses, are deleted automatically after a day.

From your profile you can download everything we hold about you as a single file, and you can delete your account.

Deleting removes your personal information: name, email, school, grade, profile picture, and your uploaded files. Posts and comments you left in a conversation stay, with your name replaced by “Former member”, so threads other people took part in don’t fall apart. If you want those removed too, delete them before closing your account, or ask us and we’ll do it.

Locked is built for high school students, so most people using it are minors. We keep the amount of personal information deliberately small for that reason: no date of birth, no phone number, no location beyond your school.

If you’re a parent, guardian, or school administrator and want to see what we hold about a student, have it corrected, or have it deleted, contact us and we’ll help. We would rather over-explain than have you guess.

Locked is a student project, not a company with a legal department, so this section says where we think we stand rather than pretending to more certainty than we have. If your district needs something specific in writing, ask and we will work it out with you.

RuleWhere we stand

COPPA (under 13)

You must be 13 or older to have an account. We don’t knowingly collect anything from anyone younger; if we find out, we close the account and delete what we hold

California SOPIPA

We don’t show targeted advertising, don’t build a profile of you for anything but running Locked, and don’t sell student information. If a school district asks us to delete a student’s data, we do it

FERPA

Locked isn’t a school system and doesn’t hold your grades, discipline record, or transcript. Your volunteer hours are held for you, not for your school. If a district ever wants Locked treated as a school official under FERPA, that takes a written agreement with them

CCPA / CPRA

Locked is far below the size thresholds that make these apply, so we don’t claim to be a covered business. We do the parts that matter anyway: you can see everything we hold, take it with you, and delete it

Data breach

If student information is exposed, we tell the people affected and their chapter leaders without waiting to be asked, and we say what happened rather than that “an incident occurred”

Where it lives

United States. Locked isn’t offered outside it, and we don’t move your data abroad

The promise not to sell student data is in What we collect and is not conditional on any of the above applying to us.

Every table in the database has row-level security, so access is decided by the database on each query rather than by the app remembering to check. Passwords are handled by Supabase and never reach us. Files you upload are private and served through short-lived links rather than permanent public URLs.

We’re students, not a security company. If you find a problem, please tell us at postal@locked.work rather than posting it.

Organisations that post opportunities can see how many people saved a listing, and how many opened the link. Those are running totals on the listing itself, a number that goes up. We do not record which student did either thing, so there is no row anywhere tying you to an opportunity you looked at, and nothing for us to hand over or lose.

An organisation sees “47 saves”. Nobody, including us, can turn that into a list of names.

If this changes in a way that affects you, we’ll tell you: a notice in the app the next time you open it, and an email. Both say what changed in a sentence, in plain English. We won’t quietly edit the date at the top.

That email is a notice, not a newsletter, so turning off the weekly summary in your profile doesn’t turn it off. It’s the only email we send that works that way.

postal@locked.work, or the feedback form at the bottom of the sidebar when you’re signed in. A real person reads both.