Terms and Conditions & Privacy
Account agreement version: September 21, 2026. Service and privacy disclosures updated October 29, 2026.
These terms describe use of the Evidence Locker app and optional hosted backup service. Creating a cloud account requires selecting the agreement checkbox on the signup page. Opening this page is optional; agreement is not preselected. We record the accepted terms version with the account and account-creation audit record.
Cloud records and administrator access
The service operator and authorized administrators can view, inspect and download records you upload to the server. This includes journal entries, family profiles, attachments, locations and associated metadata. Server encryption protects stored backup files, but the operator holds the encryption key: it is not end-to-end encryption against administrators. Administrative evidence access is recorded in the service audit history.
Your choices, sync, and device check-ins
Cloud backup is optional. Local records are uploaded when you request a cloud backup or enable automatic backup in the app. Automatic backup sends your existing journal and subsequent saved changes while the app is open, using Wi-Fi or mobile data. Failed uploads retry; reopen the app to resume pending changes. Version 1.4.4 adds two-way sync: saved website and device changes merge across signed-in devices while sync is enabled. Different edits to the same entry are preserved as conflict copies for review. Conflicting family-profile edits pause sync for support review. Turning the switch off stops new automatic uploads but does not delete copies already on the server.
The older upload-only feature keeps the latest three automatic backup copies per device. Two-way sync and web editing retain the latest 10 recovery snapshots plus snapshots less than one hour old, within the account quota. The current journal and preservation holds are protected. Unchanged archive segments share encrypted storage within your account. Retired revisions retain compressed, encrypted entry metadata to support devices that reconnect later; media unique to retired copies is removed when no retained copy references it. Manual backups are not rotated by this policy. Older automatic copies are removed after a successful replacement upload, except where a preservation hold applies. Manual backups are separate. Cloud storage and synced-collection allowances are configured per account. The default allowances are 100 MB per synced collection and 1 GB total cloud storage; an administrator may change these allowances or grant an uncapped account allowance. Uncapped allowances do not remove available-disk, transfer-validation or service-capacity safeguards. Sync currently supports up to 2,000 entries. Keep your own independent backup. Restoring a backup replaces the journal on the target device.
App installation and launch measurement
Privacy update: October 29, 2026. Evidence Locker uses Meta App Events to measure installations and app launches and understand the effectiveness of our advertising. Android version 1.5.25 (42) adds an optional measurement choice. When that version is installed, measurement stays off until you choose Allow measurement. You can choose No thanks and continue using the app. Revisit App measurement privacy in Settings or use the shield button during account/profile setup to change your choice. Turning it off stops future automatic measurement; it does not recall information already sent.
When enabled and online, the app sends Meta installation and activation events, event times, an app-generated installation identifier, and technical information such as app version, device model, operating system, language, time zone, screen characteristics and network/carrier information. Meta receives the network IP address, which may indicate approximate location. These events are used for analytics and advertising measurement. Version 1.5.24 (41) sends these events automatically and has no separate measurement switch; update to version 1.5.25 (42) when available to use the choice.
We do not send your journal entries, notes, attachments, children's identities, account email, or recorded GPS coordinates to Meta through this integration. Advertising ID collection, automatic purchase logging, automatic screen-content collection and advanced matching are disabled. Measurement is separate from cloud backup. Meta handles received information under its Privacy Policy. Contact us through customer care for privacy or deletion requests; deleting your Evidence Locker account does not itself guarantee deletion of information already held independently by Meta.
Google sign-in
If you choose Google sign-in, Google supplies a verified account identifier and email address so we can create or authenticate your Evidence Locker account. We do not request access to your Gmail messages, Google Drive files or contacts. Google account credentials remain with Google.
Accounts, trial and payment
Keep your account password private. Eligible new subscribers can choose a 14-day free trial through Google Play with a monthly plan at $14.99 USD or an annual plan at $129.99 USD. You must approve the trial and renewal terms in Google Play. At the end of the trial, your chosen plan is charged automatically unless canceled before the trial ends. Local prices may differ. Creating an account alone does not start a paid subscription or authorize a charge. Existing account trials, complimentary access and existing subscriber prices keep their original terms unless the customer explicitly changes their plan. Google Play shows the applicable local price, taxes, billing period and renewal terms before you authorize payment. Subscriptions renew automatically unless canceled through Google Play. Uninstalling the app does not cancel a subscription. You can manage or cancel a Google Play subscription at Google Play subscriptions. Cancellation normally preserves access until the end of the paid period; refund requests are handled under Google Play's applicable refund policy. An account is required to activate new app installations. After trial or subscription expiry, adding, editing and importing entries require an active subscription or complimentary access; existing local records remain readable and exportable. Paid and trial access requires an online status check at least every seven days, and cannot continue beyond the trial or paid expiry date. Complimentary access has no scheduled expiry and works offline; its status is checked while the app is open approximately every five minutes and when returning to the app. Revocation takes effect after a successful online check, not while a device remains offline. These checks send an installation identifier and signed access credential, not your journal or attachments. Cloud backup remains optional. Older app versions may not enforce these restrictions. Existing backups remain downloadable after the trial expires, subject to account access and preservation requirements.
PDF reports and sharing
The customer website provides PDF timelines from saved backup snapshots. Raw backup inspection and browser downloads are restricted to administrator/support access; authenticated app restoration remains available. Website reports show entries and available photo previews; cached app map images are not included in older cloud backups.
Creating a share link is optional. Anyone who has the link can view and download that fixed PDF until its selected expiry (1 to 30 days) or revocation. Shared reports are separate encrypted snapshots, so later automatic-backup rotation does not change them. You can revoke links in the customer portal. Revocation and expiry stop future server access but cannot recall downloaded copies. Expired and revoked copies are removed during report cleanup; account-deletion processing includes shared reports.
Support, recovery and AI
Support can issue a time-limited cloud password reset code after verifying identity. Optional account-linked device PIN recovery must be enabled on the device in advance. Live app sharing is separately started in the app; the customer chooses viewing or tap control and can stop sharing. It ends when the app is left or locked, or after 15 minutes. Other apps and the system keyboard are not shared. AI assistance is available only to selected accounts during a private pilot. Where enabled, it requires explicit consent before sending the requested text to OpenAI for a response. It is not enabled for all customers. Review suggestions for accuracy before saving or using them; AI output does not verify an incident or replace legal advice.
Download and installation measurements
APK downloads record request time, requested version, a random browser cookie identifier and account identity when signed in. Download records are retained for up to 90 days. App check-ins record an installation identifier, app version and last-seen time for support, update delivery and adoption counts. These identifiers do not establish a unique physical phone, and download counts do not confirm installation.
Information and service providers
The service stores account names, password hashes, session records, accepted terms version, entitlement information, uploaded backups, support messages and activity records. Live support retains a temporary encrypted screen image while sharing is active. Cloudflare carries traffic between GetEvidenceLocker.com and this server and processes connection information. Google Play processes Android subscription purchases; our server verifies purchase tokens and subscription status with Google to grant account access. Purchase tokens are encrypted on the server. Map previews request tiles from OpenStreetMap's tile service, which receives connection information and tile coordinates near the selected location. Android permissions govern the app's access to your device location, media and biometrics.
Security and availability
The distributed app uses HTTPS for cloud connections. Passwords are hashed and backup files are encrypted on the server. No system is guaranteed secure. The app PIN is an access lock, not full encryption of its local database; exported ZIP backups are not password encrypted. The hosted service depends on the host computer and Cloudflare tunnel being available. Service can be interrupted. Recovery backups do not guarantee uninterrupted availability or recovery of every recent change. Keep an independent copy of important records. These disclosures do not claim an independent security certification.
Retention, requests and preservation
Manual backups, accounts and support/audit records are retained until removal or a support request is processed; the service does not automatically delete an account when its trial ends. Use the account-deletion request form or customer care to request account or record deletion, ask privacy questions, or request assistance. Records subject to a preservation hold may be retained. The operator may preserve or disclose records in response to applicable legal obligations and reviewed legal requests.
Accurate records and permitted use
Upload only material you are authorized to possess and share. Keep entries accurate, preserve original files and include relevant context. Do not use the service for unlawful access, harassment or falsification of evidence. Evidence Locker organizes your records; it does not independently verify their truth, provide legal advice, or guarantee admissibility or a court outcome.
Return to signup Customer care and privacy requests
Attorney sharing and firm-sponsored access
Attorney workspace agreement: attorney-v1, October 30, 2026. Where enabled, clients explicitly choose copies of entries, edit history and original attachments to share with one approved attorney. Entry locations are optional; original files may contain embedded metadata. This channel is separate from ordinary cloud sync. Clients can separately opt into automatic sharing of all current and future saved entries while the app is open; this is not enabled by connecting alone. Turning it off stops future automatic sharing.
The app encrypts shared content for the attorney’s sharing key before upload. The attorney’s password unlocks the key in their browser. The server stores an encrypted key backup and encrypted shared content, alongside connection identities, activity times and object sizes needed to operate the service. Ordinary cloud backups remain server-readable as described above. The service supplies the browser software; this does not guarantee protection from a compromised service or device.
Disconnecting stops new sharing but cannot recall previous shares or downloaded files. Attorneys can read, search, export and suggest changes. Only clients can accept changes to their journal. Approval is an account-access review, not certification of professional standing. Protect your key recovery file and its password: a normal password reset cannot recover unreadable encrypted content. Recovery requires the encrypted backup, its password and a support-issued account recovery code; the browser rewraps the same sharing key.
Weekly email summaries are opt-in and contain activity counts, not journal contents. Attorneys may request invitation emails containing their firm name and an activation link. Firm-sponsored seats last one year from activation; unused seats do not expire. Invitation links expire after 30 days and can be replaced. Firms see seat assignment, activation, expiry, payment status and last app check-in. Payment never shares records or cancels an existing subscription.
Reports are copies of selected records, not independent certifications of facts or guarantees of court acceptance. Companion checksums identify downloaded files; they do not establish that entries were never edited.