Locket Widget

"Contact information of your friends: Locket may, with your permission, access your mobile contact list including saved phone numbers and names, to help you connect with people you know on Locket. Device data: We collect information about your device such as your mobile device's operating system type and version, manufacturer and model, browser type, device type, IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G)."

Locket accesses the user's full contact list and collects extensive device information including unique identifiers, carrier info, and radio/network details, which goes beyond what a photo-sharing widget requires.

"Device data: We collect information about your device such as... IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area."

Locket collects general location data derived from IP address and network information, which enables passive location tracking without explicit GPS use.

"We engage advertising partners, including third party advertising companies and social media companies, to display ads on the Services. We use technologies provided by such parties, such as SDKs, to collect information about you over time across the Services, and we and our partners use that information to serve online ads that may be interesting or useful to you."

Locket embeds third-party advertising SDKs that collect data directly from users' devices over time, sharing profile information, activity data, IP addresses, advertising IDs, and device type with advertising companies.

"We use technologies provided by such parties, such as SDKs, to collect information about you over time across the Services, and we and our partners use that information to serve online ads that may be interesting or useful to you. The information we collect for such purpose includes your profile information and your activity on the Services."

Locket and its advertising partners use SDKs and advertising IDs to track user activity over time, enabling cross-service profiling for interest-based advertising.

"We will update this Policy from time to time. Please review this Policy periodically for any changes. Changes to this Policy are effective when they are posted on this page. If we make material changes, we will let you know."

Changes take effect simply by being posted, placing the burden on users to periodically check for updates. While material changes get a notification, non-material changes do not require any notice or consent.

"We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention procedures, and in accordance with applicable laws or until you withdraw your consent (where applicable). To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your Personal Data."

Locket provides no concrete retention timelines, using vague 'as long as necessary' language that effectively allows indefinite retention at their discretion.

"Deletion of any Personal Data that we no longer need to provide the Services or for other lawful purposes. You can delete your account in your account settings. We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention procedures."

While account deletion is available in settings, the policy provides no clear timeline for when data is actually purged after deletion, and the 'lawful purposes' exception could allow extended retention.