What we keep, and who can see it
You are about to type your body weight into a website. You should know exactly where it goes. This is the whole of it, in plain words.
The short version
- Your Shield Lock can see what you log. Nobody else can. Not other groups, not the public, not us for marketing.
- Nothing you log is ever published unless your leader publishes a group Challenge — and that shows the group's total, never a man's numbers.
- We do not sell anything, show you adverts, or track you across other sites.
- You can take your data with you, and you can have it erased.
What is kept
To let you in
- Your email address, and a one-way hash of your password — never the password itself.
- Failed sign-in counts, so an attacker cannot guess forever.
- Sign-in links, stored hashed, with the IP address that asked for one. Those are deleted once used or expired.
Who you are, to the men
- Your F3 name, your real first and last name, and your email.
- Which Shield Lock you are in, and when you joined or left.
- Any dates you mark yourself away, and the note you leave with them.
What you are working on
- Your goals: what they are, what you are aiming at, and when.
- Every daily number you log. Depending on the goals you set, that can include your body weight, your body fat, what you ate, whether you drank, when you went to bed, and what you are reading or praying about.
- Any note you attach to an entry, and the previous values whenever you change one.
- Comments you write, and which comments you have read.
If you choose texts or email from us
- Your mobile number, if you add one, and when and how you agreed to texts — the wording you saw, kept as the record carriers require.
- Which messages you have chosen, and a record of each one we sent you.
To keep the group honest
- A record of who invited whom, who approved whom, who was removed, and who granted somebody a role — with the date and who did it.
Who can see it
- The men in your Shield Lock
- Everything you log, and everything you write. That is the point of the thing — a group that cannot see your numbers cannot hold you to them.
- You
- Your own record, always, including from before you moved groups. What you did in an old Shield Lock stays visible to that group as their history, and to you as yours.
- Your leader
- The same as any other man, plus the roster, invitations and join requests.
- Whoever runs ShieldLock
- Can reach into a group to fix something or deal with abuse. It should be rare.
- Other Shield Locks
- Nothing — unless your leader publishes a Challenge. Then they see the group's name, its region, how far along it is, and how many men are in it. Never a name, never a number belonging to one man.
Where it is held
On Microsoft Azure, in the United States. Encrypted on disk and in transit. Email is sent through SendGrid and texts through Twilio, which deliver them and nothing else; your number and address are never sold or shared for anyone's marketing. A reminder or a notification never carries your numbers or anybody's comment — it links you back here. The one exception is your Shield Lock's weekly report, if your group turns it on: it shows every man's goals and how his week went, to the men in the group, and may appear on a lock screen. The text-message terms say what is sent and how to stop it.
We keep counts of how the product is being used — how many groups are active, how often men log, which kinds of goal get abandoned. Those are counts and rates only. There is no dashboard anywhere showing one man's numbers to whoever runs this.
How long
Until you ask otherwise. If you leave a Shield Lock, your record stays as the group's history and travels with you as yours — you are deactivated, not deleted. If a Shield Lock closes, the group's own things are deleted by hand within ninety days; the men's goals and entries remain theirs.
What you can ask for
- A copy
- Write to support@shieldlockapp.com and you will get your goals, entries, comments and dates as a file. A button to download it yourself is planned.
- Erasure
- Write to support@shieldlockapp.com and it will be done by hand and recorded. Comments you wrote on other men's records are anonymised rather than removed, because deleting them would rewrite somebody else's history. You will be told exactly what will be left before it is done.
- A correction
- Anything you can edit yourself, you can edit. Anything else, ask.
Who to ask
ShieldLock is run by Phoenix — Doug Purnell (F3 Greensboro), and you can reach him at support@shieldlockapp.com. He is one man, not a company — if something here worries you, write to him and he will answer.
Last reviewed: 1 November 2026