Privacy policy

Latch · Lukla Logic LLC · Effective September 28, 2026

What stays on your iPhone or iPad

The apps, categories and websites you choose to block are chosen through Apple's Screen Time picker. Apple gives Latch only opaque tokens for them, which never leave your iPhone. Screen Time usage figures (such as per-app daily averages) are drawn by Apple's system and are never available to Latch or to us.

What syncs through your iCloud account

If you're signed in to iCloud, Latch stores your keys (a name and a one-way hash of the key's secret, never the secret itself; where you keep it; and the password that locks an NFC sticker so you can change it later), profiles (names and extra websites), schedules and lock history in your private iCloud database, so your other iPhones can use them. This data is stored by Apple under your Apple ID; we can't access it. How many Break glass unlocks you've used this month is also kept in iCloud, so reinstalling doesn't reset it.

Location

If you add places (like Home or Office), their coordinates are stored with your other Latch data in your private iCloud database. Latch uses your location on your iPhone only: to lock a profile when you arrive at a place, to check that a key tied to a place is being used there, or, if you turn on Lock while driving, to notice when you start and stop driving. Your location is never stored for driving, and never sent to us or anyone else.

Motion & Fitness

If you make a steps key, Latch counts your steps on your iPhone while you walk to unlock. If you turn on Lock while driving, it reads your iPhone's motion activity (such as "in a car" or "walking") to tell when you're driving. Neither is stored or sent anywhere.

Purchases

Latch Pro is bought through the App Store. Apple processes the payment; we receive no payment details.

On Android

Latch for Android works the same way, with Android's own tools in place of Apple's:

• Accessibility service. To block apps and websites, Latch uses Android's accessibility service. It reads which app is on screen and, in supported browsers, the address of the page you're viewing, only to decide whether to cover it. It doesn't read anything else on your screen, and it keeps nothing and sends nothing anywhere.
• App usage. If you set daily limits, Latch reads Android's app-usage totals on your phone to know when an app's time is up. They never leave your phone.
• Location and activity. Places, keys tied to a place, and “lock while driving” use your location and Android's activity detection on your phone only. With places, Latch can use your location when it's closed or not in use, so it can lock when you arrive and unlock when you leave. Latch never sends your location to us or anyone else. The map on a place's page is provided by Google Maps, which receives your approximate location when it shows the map (Google's privacy policy).
• No sync yet. Latch for Android doesn't sync between devices yet: your keys, profiles, schedules, places and history stay on your phone. If sync comes later, this policy will say what it stores before it's turned on.
• Purchases. Latch Pro is bought through Google Play. Google processes the payment; we receive no payment details.

Key links

Key stickers and QR codes contain a link to this website. The secret part of the link comes after a “#”, which browsers never send to a web server, so this site never receives it. Our host, Cloudflare, keeps standard request logs (such as IP address, time and page) for security and troubleshooting; they never include a key's secret.

The waitlist on this website

This is about the website, not the app. If you type your email into the waitlist form on latch.luklalogic.ai, we keep that address and the date you joined, stored with Cloudflare, which hosts the site. When you join, we also get a short email in our own support inbox (hosted by Zoho) with your address, so we know someone signed up. We use it only to email you when Latch is available on the App Store and Google Play. We don't share or sell it, and we don't sign you up for anything else. Email support@luklalogic.ai and we'll delete it.

Free Pro codes on this website

When we give away Latch Pro codes for Android on a page of this website, we keep which code went out and when, a random id in a cookie (so coming back shows you the same code), and a keyed one-way hash of your network's IP address, used only to limit how many codes one network can take in a day. The hash can't be turned back into your address, and we don't keep anything else. Redeeming a code happens with Google Play.

Website analytics

This is about the website, not the app: the Latch app has no analytics. The website uses Google Analytics to count visits, so we can see which pages people read and how they found us (for example a search engine, another site or a link someone shared). Google Analytics records the pages you view, the site that sent you, your approximate location (city or region), and your device type and browser. It uses cookies to tell a returning visitor from a new one. Advertising features, Google signals and ad personalization are turned off.

If you're in the European Economic Area, the UK or Switzerland, Google Analytics runs without cookies and only receives anonymous, aggregate signals. Anywhere, you can block it with the Google Analytics opt-out add-on or a content blocker. See Google's privacy policy for how Google handles this data. Pages opened from a key link don't load Google Analytics, so a key's address is never sent to Google.

Children

Latch doesn't knowingly collect information from anyone, including children.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions: see the support page.