Terms and Conditions & Privacy
Version: September 21, 2026 · Limited internet pilot
These terms describe use of the Evidence Locker app and optional hosted backup service. Creating a cloud account requires selecting the agreement checkbox on the signup page. Opening this page is optional; agreement is not preselected. We record the accepted terms version with the account and account-creation audit record.
Cloud records and administrator access
The service operator and authorized administrators can view, inspect and download records you upload to the server. This includes journal entries, family profiles, attachments, locations and associated metadata. Server encryption protects stored backup files, but the operator holds the encryption key: it is not end-to-end encryption against administrators. Administrative evidence access is recorded in the service audit history.
Your choices, sync, and device check-ins
Cloud backup is optional. Local records are uploaded when you request a cloud backup or enable automatic backup in the app. Automatic backup sends your existing journal and subsequent saved changes while the app is open, using Wi-Fi or mobile data. Failed uploads retry; reopen the app to resume pending changes. Version 1.4.4 adds two-way sync: saved website and device changes merge across signed-in devices while sync is enabled. Different edits to the same entry are preserved as conflict copies for review. Conflicting family-profile edits pause sync for support review. Turning the switch off stops new automatic uploads but does not delete copies already on the server.
The older upload-only feature keeps the latest three automatic backup copies per device. Two-way sync and web editing retain the latest 10 recovery snapshots plus snapshots less than one hour old, within the account quota. The current journal and preservation holds are protected. Unchanged archive segments share encrypted storage within your account. Retired revisions retain compressed, encrypted entry metadata to support devices that reconnect later; media unique to retired copies is removed when no retained copy references it. Manual backups are not rotated by this policy. Older automatic copies are removed after a successful replacement upload, except where a preservation hold applies. Manual backups are separate. The pilot limits each backup to 100 MB and each account to 1 GB. Sync supports up to 2,000 entries in this pilot. Keep your own independent backup. Restoring a backup replaces the journal on the target device.
Google sign-in
If you choose Google sign-in, Google supplies a verified account identifier and email address so we can create or authenticate your Evidence Locker account. We do not request access to your Gmail messages, Google Drive files or contacts. Google account credentials remain with Google.
Accounts, trial and payment
Keep your account password private. App use and cloud features begin with a 30-day trial and then costs $79.99 USD per year unless complimentary access is granted. Signing up does not collect a payment card or start an automatic charge. Paid checkout is disabled during this test. When billing becomes available, any purchase and renewal terms must be shown before you authorize payment. An account is required to activate new app installations. After trial or subscription expiry, adding, editing and importing entries require an active subscription or complimentary access; existing local records remain readable and exportable. Paid and trial access requires an online status check at least every seven days, and cannot continue beyond the trial or paid expiry date. Complimentary access has no scheduled expiry and works offline; its status is checked while the app is open approximately every five minutes and when returning to the app. Revocation takes effect after a successful online check, not while a device remains offline. These checks send an installation identifier and signed access credential, not your journal or attachments. Cloud backup remains optional. Older app versions may not enforce these restrictions. Existing backups remain downloadable after the trial expires, subject to account access and preservation requirements.
PDF reports and sharing
The customer website provides PDF timelines from saved backup snapshots. Raw backup inspection and browser downloads are restricted to administrator/support access; authenticated app restoration remains available. Website reports show entries and available photo previews; cached app map images are not included in older cloud backups.
Creating a share link is optional. Anyone who has the link can view and download that fixed PDF until its selected expiry (1 to 30 days) or revocation. Shared reports are separate encrypted snapshots, so later automatic-backup rotation does not change them. You can revoke links in the customer portal. Revocation and expiry stop future server access but cannot recall downloaded copies. Expired and revoked copies are removed during report cleanup; account-deletion processing includes shared reports.
Support, recovery and AI
Support can issue a time-limited cloud password reset code after verifying identity. Optional account-linked device PIN recovery must be enabled on the device in advance. Live app sharing is separately started in the app; the customer chooses viewing or tap control and can stop sharing. It ends when the app is left or locked, or after 15 minutes. Other apps and the system keyboard are not shared. AI analysis is not active in this release. A future AI service will explain its data use and request separate consent before sending evidence to an AI provider.
Download and installation measurements
APK downloads record request time, requested version, a random browser cookie identifier and account identity when signed in. Download records are retained for up to 90 days. App check-ins record an installation identifier, app version and last-seen time for support, update delivery and adoption counts. These identifiers do not establish a unique physical phone, and download counts do not confirm installation.
Information and service providers
The service stores account names, password hashes, session records, accepted terms version, entitlement information, uploaded backups, support messages and activity records. Live support retains a temporary encrypted screen image while sharing is active. Cloudflare carries traffic between the public test address and this server and processes connection information. Map previews request tiles from OpenStreetMap's tile service, which receives connection information and tile coordinates near the selected location. Android permissions govern the app's access to your device location, media and biometrics.
Security and availability
The distributed app uses HTTPS for cloud connections. Passwords are hashed and backup files are encrypted on the server. No system is guaranteed secure. The app PIN is an access lock, not full encryption of its local database; exported ZIP backups are not password encrypted. This pilot uses GetEvidenceLocker.com and depends on the host computer and Cloudflare tunnel being available. Service can be interrupted. Independent recovery hosting and broader security testing are not complete.
Retention, requests and preservation
Manual backups, accounts and support/audit records are retained until removal or a support request is processed; this pilot does not automatically delete an account when its trial ends. Use the account-deletion request form or customer care to request account or record deletion, ask privacy questions, or request assistance. Records subject to a preservation hold may be retained. The operator may preserve or disclose records in response to applicable legal obligations and reviewed legal requests.
Accurate records and permitted use
Upload only material you are authorized to possess and share. Keep entries accurate, preserve original files and include relevant context. Do not use the service for unlawful access, harassment or falsification of evidence. Evidence Locker organizes your records; it does not independently verify their truth, provide legal advice, or guarantee admissibility or a court outcome.