MoLock
العربية Free download

Privacy policy

MoLock is a privacy lock for Windows built to protect your privacy, so we want to be just as clear about our own practices. This page explains exactly what the app and website send, why, and how you stay in control.

Last updated:

In short

  • Your photos, videos and any evidence go to your own Telegram bot or stay on your PC. The developer never receives them.
  • The app never sends your files, screen contents, keystrokes, passwords or Windows user name.
  • Camera motion detection looks at the picture on your PC only, while it's locked. Nothing from the camera is uploaded except the alert photo, which goes to your own bot.
  • Device stats (technical facts about your PC and how MoLock performs) are sent only while "Send device stats" is on. Setup shows exactly what they send and never send, with a switch you can turn off at any time.
  • The website uses no cookies and no tracking IDs, and your IP address is never stored.

What the app sends with "Send device stats" on

The setup wizard shows exactly this list — what's sent and what never is — with a switch to turn the option on or off; it's also in Settings → About. While it's on, the app sends the following to the developer's MoLock server (and to the developer's private Telegram chat) when it starts and roughly every 6 hours:

  • Device name, Windows edition and version number, and system type (64-bit).
  • CPU model and core count, total RAM, GPU model and screen sizes.
  • Disk size and free space, system uptime, and overall CPU/RAM load.
  • MoLock's own CPU and RAM use.
  • The number of locks and wrong attempts in the last 24 hours (counts only — no photos or details).
  • Whether a few main features are on (Telegram, guard service, evidence) and the theme name.
  • App version, language, update channel and install type.
  • A one-time install notice, and if the app crashes, a report that may include a short technical error message.

Why: so the developer knows how many devices run MoLock, how light it is, and what to fix.

With "Send device stats" off

The app sends only the app version, language and update channel (plus install type), so updates, announcements and replies to your feedback can still reach you.

In both cases the app uses a random install number and a private access key so it can talk to our server securely, and records whether an announcement was shown, clicked or dismissed. Your approximate country is estimated by our hosting provider from the connection; the device's IP address is never stored.

What is never sent

  • Your files or file names.
  • Your screen contents or screenshots (unless you choose to attach one to feedback).
  • Your keystrokes.
  • Your password, recovery code or duress password.
  • Your Windows user name.
  • Photos, videos, audio or any evidence. These go only to your own Telegram bot, or stay on your PC.
  • Your device's location. Location is only sent to your own bot, as part of evidence or when you ask for it.

Your Telegram bot and evidence

The bot is yours: you create it with @BotFather and link it to your chat, and MoLock only answers that chat. The connection is direct between your PC and Telegram — the developer has no access to your bot, its messages or your evidence.

Evidence is also kept on your PC in the evidence timeline, with retention you set by days and size, and you can delete it any time. Messages containing secrets (such as a new password) are removed from the chat after two minutes.

Your settings get bank-grade encryption on your own PC, tied to your Windows account, and your password is stored scrambled — never as plain text, and never sent to us.

The camera, motion detection and tamper alerts

Camera motion detection is on by default and runs only while the PC is locked. The picture is analysed on your own PC to spot movement, and nothing from the camera is uploaded anywhere except the alert photo, which goes to your own Telegram bot. The developer never receives any image.

  • The camera warms up when the screen locks so the first photo is instant. With motion detection off, it switches off again after a few minutes.
  • Tamper alerts (a wrong password when someone tries to close or pause MoLock or open Settings, or ending it from Task Manager) also go only to your own bot, with a photo.
  • You can turn motion detection or tamper alerts off at any time in Settings or with /settings in your bot.

Third-party services you turn on

Some optional features talk to outside services, and only when you turn them on:

  • Uploading snapshots to your own Google Drive, and WhatsApp text alerts through a free WhatsApp alert service.
  • Widgets such as weather, prayer times, currency and crypto fetch their data from public online services.
  • If Windows Location Service isn't available, approximate location may be looked up from the IP address through a public service.

These services have their own privacy policies.

Announcements, updates and signatures

The app periodically checks our server for announcements and updates. Every announcement and update is digitally signed — the app refuses anything that isn't from us, or is outdated. Announcements never appear while the PC is locked or over a full-screen app.

Automatic updates download in the background and are verified as genuine and untampered before installing, and they never install while the PC is locked. If you start an update yourself from your bot with /update while the PC is locked, you choose: install now and lock again right away, or after you unlock. Either way, updates never touch your password, settings or evidence.

Feedback and complaints

When you send feedback or a complaint from the app, what's sent is only what you typed and its type, plus a contact and a screenshot if you choose to include them. The device name, Windows version and app version may be attached so the issue can be understood. The reply arrives on your PC.

Website analytics

The website counts visits in a simple, privacy-respecting way:

  • No cookies, and no tracking IDs stored in your browser.
  • Recorded: the page, language, screen width, download and outbound-link clicks, the name of the site you came from (the rest of its address is dropped), and the campaign name if it's in the link.
  • Approximate country and city are estimated by our hosting provider, and browser/OS type from the standard information every browser sends.
  • We count visits with an anonymous daily code that resets every day, so you can't be tracked from one day to the next. Your IP address is never stored.
  • Bots are not counted.

Fonts are loaded from Google Fonts, so Google receives your browser's request for the font files.

Retention and deletion

  • Want less sent? Turn off "Send device stats" in Settings → About.
  • When you uninstall, the app sends an uninstall notice, then stops contacting anything, and MoLock's data on your PC is deleted.
  • Want your device record removed from our server? Contact the developer (details below) and the device and all its stats will be deleted.
  • Evidence on your PC is in your hands: set retention and delete it from the evidence timeline. Anything sent to your bot stays in Telegram until you delete it.

Children

MoLock is made for device owners and is not directed at children, and it does not knowingly collect personal data about anyone. If children use the PC, we recommend a separate Windows child account through Windows family settings. Keep in mind that evidence features can photograph anyone who tries to unlock the PC, so please use them responsibly.

Changes to this policy

If this policy changes, we'll update this page and the "last updated" date at the top. Significant changes will also be noted in the changelog or an in-app announcement.

Contact

For any privacy question or deletion request, contact the developer, Mahmoud Mohamed:

Download MoLock free