Last updated 28 October 2026

Lock In privacy

Lock In is a student tool made by WalexLabs, an independent student project. We built it to make the morning desk rush a little calmer, and we built it to keep your things on your phone. Here is exactly what happens to your data, in plain words.

The short version

• Your login, bookings, lectures and study time stay on your phone.
• Lock In talks only to your university's own systems, using your own login, when you ask it to.
• WalexLabs receives nothing: no account, no analytics, no ads, no tracking.
• "Forget my login" removes everything from your phone at any time.

What Lock In uses, and where it goes

• Your university login (username and password) is encrypted with a key locked inside your phone's secure hardware. It is sent only to your university's own sign-in (today: UNIVPM, at sso.univpm.it and aule.univpm.it), to sign you in when you book or check a booking.
• Your account details from the university (your name, student email and tax code) are read from your university account during sign-in, because the library portal needs them in each booking. They go only back to the university's library portal, inside your booking, and are not stored by Lock In.
• Your bookings (code, desk, times and QR) are made directly with the university's library portal and saved on your phone so your widget can show them.
• Your phone number is optional. If you add it, it is saved on your phone and sent only to the university, inside your booking request, because the booking form has a phone field.
• Your course: only the course code and year are sent to the university's public timetable, to show your lectures. The timetable is cached on your phone.
• Your location, if you allow it, is used on your phone only, while you use the app, to see which campus is nearest. It is never saved or sent anywhere.
• Your focus time and tracker (Pomodoro rounds and time locked in) are saved only on your phone, in a tiny file.

What WalexLabs receives

Nothing. Lock In has no WalexLabs account, no analytics, no crash reporting, no advertising and no tracking. We never see your login, your bookings, your location or your study time.

Updates

On Android, new versions come through Google Play. On iPhone, Lock In may check lockin.walexlabs.com for a newer version about once a week; that check sends nothing about you (as with any web request, the host sees the network address it comes from).

Security

• All connections use encrypted HTTPS, and Lock In refuses to send your login anywhere other than your university's sign-in.
• On Android, screens that show your login or booking code cannot be captured by screenshots or screen recording.
• Nothing is included in phone backups or phone-to-phone transfers, so your login never leaves the phone it was entered on.

Your choices

• Forget my login (in Settings) removes your login, saved bookings, course, settings and study history from your phone. Your bookings at the university are not cancelled; cancel those first if you want to.
• Uninstalling Lock In removes all of its data from your phone too.
• Because WalexLabs holds none of your data, there is nothing to request from us; for data held by your university, contact your university.

Demo mode

Signing in with the username "demo" and password "demo" runs Lock In on built-in sample data with a DEMO label. Nothing is sent to any university in demo mode.

Who Lock In is for

Lock In is made for university students aged 18 and over.

Changes and questions

If this page changes, the date at the top changes. Questions about your data, or anything else: [email protected]. We are students too, and we read every message.

The general WalexLabs privacy page is at walexlabs.com/privacy.