Privacy and security
Start with what it cannot do
Locksure has no motor and no connection to the lock mechanism. It reads the position of your lock and reports it. It cannot lock or unlock your door, and neither can anyone else through it. If every Locksure server in the world were compromised tomorrow, nobody would gain a way into your house, because there is no way in to gain. Your cylinder, keys and the lock’s security rating are exactly as they were before you fitted it.
What the app keeps
| Kept | Why | For how long |
|---|---|---|
| Your name, email and, for orders, delivery address | Account and order fulfilment | Account data until you delete your account; order records 6 years (HMRC) |
| Lock and unlock events, door open and close events, with times | So the app can show state and history | Until you clear history or delete your account |
| Battery level, firmware versions, device identifiers, diagnostics | Product operation and troubleshooting | Until you delete your account |
| Support messages | Customer support | 2 years from last contact |
Usage data is stored separately from your address, under an internal account identifier, so no single system holds more about you than it needs. Full detail is in the Privacy Policy.
What it never has
- No camera. No microphone.
- No record of who turned the lock, only that it was turned.
- No location history. The optional left-home alert checks your position on your phone, against a home area you set, and never sends your location to us. It is off by default.
- No sale of personal data. We do not sell, trade or rent it.
Anonymised insights
We may produce anonymised, aggregated statistics (for example, the share of doors locked overnight across all customers) and share them with insurers, smart home partners, housing providers or researchers. They cannot identify anyone. You can opt out of contributing at any time by emailing [email protected], and the product keeps working. The Privacy Policy has the detail.
How the devices are secured
- Original monitors send each lock turn to the hub as an encrypted, authenticated message.
- Matter sensors use Matter’s own device security; there are no shared default credentials.
- Firmware updates are signed; a device rejects any update that does not validate.
- Data between the hub, the app and our servers travels over TLS.
- No universal default passwords on any product.
PSTI compliance
Lockstate Limited publishes a Statement of Compliance for every connectable product under the UK Product Security and Telecommunications Infrastructure Act 2022. A copy is supplied with each product and all statements are on the PSTI page. We commit to security updates for at least two years after the last date of sale of each product. Vulnerabilities can be reported privately through the security disclosure page; we acknowledge within five working days.
Your rights and how to use them
- Delete your account and history yourself in the app (Settings, Delete Account).
- Request a copy of your data, a correction, or portable export: email [email protected]. We respond within 30 days.
- Unsubscribe from marketing at any time with the link in any email.
- Complaints can go to the Information Commissioner’s Office at ico.org.uk.
Can Locksure be hacked to open my door?
No. There is nothing in Locksure that can move the lock. A compromised account or device could at worst show a wrong state.
Does Locksure know who locked the door?
No. It records that the lock was turned and when, not who turned it.
Does the left-home alert track me?
No. Your phone checks on its own whether it has left the home area you set. Nothing about your location is sent to Locksure or stored, and the feature is off unless you switch it on.
Who can see my door?
You, and anyone you have shared it with in the app. Sharing can be revoked at any time. See Sharing a door.
Was this page helpful?
Thank you. If you still need help, email support.