Privacy

What we keep, and what we never see.

The plain-language version of what Second Key collects, why, and how to delete it.

On the waiting list

Your email address, and whether you signed up to be blocked or to hold a key.
Your referral code, and the code of whoever invited you, if anyone did.
Your keyholder’s email, only if you choose to give it to us.
Where you came from: the referring page and any campaign tags (utm_*) in the link.
One cookie, sk_ref, remembers an invite link for 30 days. Your browser also keeps your place in line (so the page shows you’re in), and PostHog keeps an anonymous visitor ID when analytics are on. None of it is used for advertising.

Second Key creates an account for your phone when you open the app. It has a random ID and no email.
Signing in with Google is optional. If you do, we store the email address Google gives us, so you can use the same account on the website and keep it if you change phones. Without it, there is no email on your account.
Your display name (whatever you typed) and time zone, and who you are paired with.
A push-notification token for each of your phones, so requests, answers and alerts can reach you. Expo’s push service delivers them.

Your schedules: days, hours, strictness, and the apps you chose, stored as Android app package names.
Unlock requests: the length, the reason you typed, and your keyholder’s answer.
Block sessions and bypass alerts: when a block started and ended, and whether a protection was switched off, such as a permission removed or the clock changed.
A check-in signal while a block is scheduled: the phone sends a small message every 15 minutes with the time and whether it is inside a block window. If it goes quiet during a block, your keyholder is told that the phone has not checked in. It cannot tell them why, and it never says the phone was tampered with.

To know which app is in front, Second Key uses Android’s usage access and a screen over other apps. That raw, per-app usage never leaves your phone.
Second Key does not use Android’s accessibility service, and does not ask for the list of every app installed on your phone.

Paid plans are not on sale yet. When they are, they are bought and cancelled in Google Play. Google handles your payment details; we never see your card.
RevenueCat, our purchase service, receives your account ID and the status of your Google Play subscription, so the app can tell what you bought and restore it on a new phone.
Our server keeps your plan status and a log of purchase events. The server, not your phone, decides your plan. Keyholders never pay and are never asked to.

Crash and performance reports go to Sentry: the error, the screen it happened on, how long things took, and your phone model, OS and app version. We turn off Sentry’s collection of personal data.
Product analytics go to PostHog, without advertising identifiers: which screens and features are used, linked to your account ID. Our own server keeps a few event types for 30 days.
Never your messages or anything inside other apps.

Any feature that uses AI is optional and asks for your agreement first. Second Key does not need AI to work, and AI can never end a block or grant an unlock.
Smart Blocks: the sentence you type or say goes to our server as text. No audio leaves your phone. If our own code can’t read the sentence, that sentence is sent to Anthropic’s Claude Haiku. We do not store the words, only a count of calls.
If you also agree, the names and Android categories of your installed apps go to our server so your words can be matched to apps you really have. How long you use each app is never sent.
Claude connector: only if you connect it. Claude can then read and change your blocks through a private address you can replace or disconnect at any time. What you say to Claude is covered by your Claude account’s terms.

Your keyholder sees your requests, their answers, bypass alerts, quiet-phone alerts and your weekly tally. Nothing else.
Data is stored with Supabase. Other services we use: Expo (push delivery), RevenueCat (purchases), PostHog (analytics), Sentry (crash reports), Resend (waiting-list email) and Anthropic (Smart Blocks sentences our code can’t read). Each gets only what its job needs.

In the app: Settings, then Delete my data. It removes your account, blocks, requests, history and keyholder link from your phone and from our servers, and turns off every block.
On the web: see the account deletion page. You can delete from the website, or ask by email if you no longer have the app.
Encrypted backups of our database are kept for up to 30 days, so deleted data can remain in a backup until it expires. We use a backup only to recover from a failure.
Your waiting-list entry is separate from your app account. Email us and we remove it.
Google Play and RevenueCat keep their own purchase records under their own policies.

Questions, or a deletion request: hello@secondkey.link. See also the account deletion page and the terms. Last updated 2026-11-08.