Privacy policy Last updated on August 14, 2026
Padlok is an app published by Illumineering SAS, a company registered in France, which acts as the data controller for the processing described below. The app is free to download, with optional paid features.
This policy explains what the app and this website collect, why, on what legal basis, how long it is kept, and what you can ask us to do about it. Terms used here have the meaning given in our Terms of service.
Your addresses stay yours
Padlok exists to hold things you would not want loose: postal addresses, door codes, intercom names, floors, entry instructions.
We never receive any of it. Your address files are stored on your device and synchronised through your own iCloud account using CloudKit, end-to-end encrypted. They travel between Apple’s servers and your devices; they do not pass through ours, and we have no key, no copy and no way to read them.
The same is true of everything the app touches on your device:
- Location is used on the device to notify you as you approach a saved address. It is never sent to us, and iOS asks your permission before the app can use it.
- Contacts are read only when you pick one to build an address from, and only on the device.
- Widgets, Siri suggestions and Apple Watch access all read the same local data.
When you share an address through a link or a Padlok QR code, the address is encrypted and the recipient’s copy is decrypted on their side. Shared addresses can be opened in the app, in an App Clip, or in a web page.
What we do collect
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Crash reports — app and iOS version, device model, the time of the crash and the technical state of the app when it stopped | Find and fix the bugs that crash the app | Legitimate interest (Art. 6(1)(f) GDPR) in a working app | 90 days |
| Usage signals — which features are used, with app version, iOS version and device model | Understand which parts of the app matter and guide what we build next | Legitimate interest (Art. 6(1)(f) GDPR) | Retained in aggregated, non-identifying form |
| A random, non-reversible installation identifier | Group signals from one installation together without identifying you | Legitimate interest (Art. 6(1)(f) GDPR) | With the record it belongs to |
| Purchase history — which Padlok Premium plan or lifetime unlock is active | Deliver and restore what you paid for | Performance of a contract (Art. 6(1)(b) GDPR) | Life of the entitlement |
| The same purchase history, counted in aggregate | See which plans people choose and whether the free tier is generous enough | Legitimate interest (Art. 6(1)(f) GDPR) | Retained in aggregated, non-identifying form |
None of this is linked to your name, your addresses or your Apple Account.
Crash reports
When the app crashes, it writes a diagnostic file on your device recording what the app was doing at the moment it stopped: the app and iOS version, the device model, the time, and the technical state of the running code. The next time you open Padlok, that file is sent to a server we operate in France and removed from your device. This happens automatically, without asking you.
The file contains no addresses, no codes and no contact details. As with any upload, our server sees the IP address the report came from; we do not use it to identify you.
Service providers used by the app
| Provider | Role | Privacy policy |
|---|---|---|
| Apple — iCloud, CloudKit, App Store | Storage and sync of your own data, purchases | Policy |
| RevenueCat, Inc. (United States) | Subscription and entitlement management | Policy |
| TelemetryDeck GmbH (Germany) | Anonymised usage analytics | Policy |
Crash reports pass through none of these. They go to a server we run ourselves in France.
TelemetryDeck processes data in Germany. RevenueCat processes data in the United States; that transfer relies on the European Commission’s Standard Contractual Clauses, together with the EU–US Data Privacy Framework where the provider is certified.
This website
Analytics. This site runs a self-hosted Matomo instance operated on our behalf. Statistics stay on that server and are not sent to Matomo’s company or to any other analytics provider. Matomo is configured without cookies: it stores nothing on your device, sets no identifier, and cannot follow you across sites. Visitor IP addresses are anonymised before storage, and records are kept for 13 months.
This site sets no cookies of its own and asks for no consent because, configured this way, none is required.
The support form. If you write to us through the form on our support page, we receive your message, the subject you picked, and your email address if you chose to give one. We use it only to answer you. The form is protected against spam by Cloudflare Turnstile, which checks that you are a real visitor and processes your IP address and basic browser signals to do so; it sets no tracking cookie.
Your message is delivered to our mailbox, hosted by our email provider MXroute on servers in the United States. That transfer relies on Standard Contractual Clauses. We keep support messages for as long as it takes to resolve your request and for up to 12 months afterwards, so we can follow up if the problem returns.
Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in answering the people who contact us.
Security
Your addresses and codes are end-to-end encrypted in CloudKit, which means their protection does not depend on us. For the limited data we do hold, we use commercially reasonable measures including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Links to other sites
The app and this site link to services we do not operate. We are not responsible for their content or their privacy practices, and we encourage you to read their policies.
Children
Padlok is rated 4+. It has no account, no advertising, no profiling and no social features, and it collects nothing that identifies a user of any age.
We do not knowingly collect personal data from children. In the European Union, where consent is the basis for an online service, the relevant age is 15 in France. If you are a parent or guardian and believe a child has provided us with personal data, contact us and we will delete it.
Your rights
Under the GDPR you may ask us to give you access to your data, correct it, erase it, restrict or object to how we use it, or provide it in a portable form. Where we rely on legitimate interest — crash reports, usage analytics, aggregated purchase counts, answering support messages — you can object at any time and we will stop unless we have compelling grounds not to.
Your addresses are a special case: because they live in your iCloud and never reach us, we cannot produce, change or delete them for you. You control them entirely from the app, and deleting the app together with its iCloud data removes them.
Write to us through the support page. We answer within one month. If you are not satisfied, you may lodge a complaint with the French supervisory authority, the CNIL, or with the authority in your country of residence.
Changes to this policy
We may update this policy from time to time and will post the new version on this page, with the date below.
This policy is effective as of August 14, 2026.
Contact us
Illumineering SAS, France. Questions about this policy or about your data: use our support page.