Multi-factor mobile security with covert distress signaling, encrypted hidden workspaces, and post-quantum protection. Your data never touches our servers—ever.
Built for those who need it most
Core Features
Every security layer you need, built into one app with zero data collection and zero backend dependency.
Biometric + PIN for device and app unlock. Configure per-app policies supporting fingerprint, face, pattern, and PIN combinations.
Silent SOS from the lock screen via special PIN entry. A brief green dot may appear in the status bar per Android policy. Automatic GPS tracking and evidence capture sent to your emergency contacts.
Choose between XChaCha20-Poly1305 or AES-256-GCM. Post-quantum ML-KEM-1024 encrypted Secure Vault with NFC key pairing.
Hide sensitive apps in an encrypted hidden workspace with a dedicated PIN. 96 bundled cloak icons to disguise LockLoom itself.
Covert front/rear camera photos, audio, and video capture — all without flash, sound, or screen activity. Triggered by distress code or codewords.
USB insertion, SIM removal, and locked-device network isolation. Boot-time radio blocking prevents all data exfiltration before authentication.
Silence WiFi, Airplane Mode, Bluetooth, and NFC with one tap. Per-radio persistence with auto-restore on distress PIN activation.
Configure phrases detected from SMS, RCS, WhatsApp, Telegram, Signal, and any notification-sending app. Three-layer detection with SHA-256 dedup.
Optional NFC tag or Bluetooth fob — device locks immediately if absent. Combines with USB blocking and SIM protection for full physical security.
🚨 Life Safety
Designed with a zero data exfiltration policy — all SOS alerts go directly to your emergency contacts. No servers. No LockLoom infrastructure involved.
Embed the distress code in any longer credential attempt. The attacker sees a normal "wrong PIN" failure while the SOS beacon launches silently in the background.
15-minute tracking window sends 3 location updates (0, 5, 15 min) to establish direction of travel with GPS coordinates and Google Maps links.
Covert front and rear camera photos, audio recording, and video capture — all without flash, sound, or screen activity. A brief green dot appears per Android camera/mic policy. Automatically attached to SOS alerts.
SMS dispatched to your emergency contacts with location and evidence. Plus Gmail OAuth for email alerts — all sent directly from your device with no middleman.
GPS, barometric pressure, speed, heading, altitude, battery, network type, WiFi SSID, cell tower ID, ambient light, and proximity sensor status.
Configure trigger phrases detected from ALL messaging sources — SMS, RCS, WhatsApp, Telegram, Signal, iMessage bridges, and any notification-sending app.
Getting Started
LockLoom uses Android's Device Owner mode for the strongest possible protection — no root required.
Start with a fresh device or factory reset. On the Android welcome screen, tap "Welcome" 6-7 times to enter provisioning mode.
Scan the LockLoom Device Owner provisioning QR code. Android automatically installs and configures LockLoom as the device administrator.
Set your biometric + PIN policies, configure emergency contacts, choose your distress code, and enable the features you need.
Your device is now hardened with multi-factor authentication, tamper detection, and covert distress capabilities. Zero data leaves your phone unless you configure recipients — and then only what you choose, only to them.
Simple Pricing
No subscriptions. No recurring fees. No accounts. One payment unlocks everything — including all future updates.
One-time purchase • All features • Forever
Competitors charge $10+/month — that's $360 over 3 years.
LockLoom: $39.99 total. Forever.
Special Programs
Free licenses available for domestic violence survivors (via partner orgs), journalists (CPJ, RSF, EFF referrals), and human rights activists. No verification required for DV survivors — trust-based, dignity-preserving.
🌍 Internationalization
Full localization with native script display. Regional discounts auto-applied for global accessibility.
Technical Details
| Specification | Details |
|---|---|
| Platforms | Android (production) • iOS (in development) |
| Architecture | Kotlin Multiplatform (KMP) shared core • Jetpack Compose UI |
| Android Mode | Device Owner (strongest protection, no root required) |
| Encryption | XChaCha20-Poly1305 (default) or AES-256-GCM • ML-KEM-1024 for Vault |
| Biometrics | Fingerprint • Face • Pattern • PIN • Multi-factor chains |
| Backend | None — zero-backend architecture, all processing on-device |
| Data Collection | None — no telemetry, no analytics, no accounts |
| Alert Dispatch | SMS • Gmail OAuth • SMTP • Direct to your configured recipients only |
| Codeword Detection | SMS broadcast + ContentObserver + NotificationListener (3-layer) |
| Languages | 144 locales with native script display • Per-app language API |
| Minimum Android | API 33 (Android 13+) • Target API 36 |
| Purchase Model | $0.99 entry (First Step tier) • Premium tier upgrades available • No subscriptions |
Documentation
Transparency is fundamental to trust. Read our policies and technical documentation.
Zero data collection. Zero tracking. Zero backend. Read exactly what LockLoom does (and doesn't) collect.
Full disclosure of all Device Owner capabilities used, when they activate, and how to disable them.
Every permission LockLoom requests, why it's needed, and what happens if you deny it.
Source code, architecture docs, style guides, and technical documentation.
Contact us for technical support, free license programs, or bulk organizational pricing.
Scan the Device Owner provisioning QR code on Android 13+ setup screen to install LockLoom.
FAQ
Device Owner is Android's enterprise-grade administration mode that gives LockLoom the deepest possible device protection — including the ability to enforce lock policies, block USB data transfer, control radios, and auto-grant permissions. It requires enrolling during device setup (factory reset) but does not require root access.
No. LockLoom has zero backend infrastructure. There are no servers, no accounts, no analytics, no telemetry, and no crash reporting that leaves your device. All distress alerts go directly from your phone to your emergency contacts via SMS/email. We never see them.
Subscriptions require accounts. Accounts require data. Data is a liability. LockLoom's zero-data-collection promise is incompatible with subscription billing. You pay once, we forget you exist. All future updates are included.
LockLoom includes 96 bundled cloak icons to disguise itself as a family-friendly app (calculator, weather, game, etc.). When you trigger a distress code, there are zero visual indicators — no popups, no sounds, no screen changes. The attacker sees a normal authentication failure.
LockLoom is currently production-ready on Android. The iOS version is in active development using Kotlin Multiplatform with a shared core library. The shared security logic, biometric contracts, and distress management are already cross-platform.
Free licenses are available for domestic violence survivors (via partner organizations — no personal verification required), journalists (CPJ, RSF, EFF referrals or press credentials), and human rights activists (Access Now referrals). Contact us through the support page or your referral organization.
Your purchase is tied to your Google Play account. Use "Restore Purchase" on your new device after enrolling in Device Owner mode. Since LockLoom stores no data on our servers, your configurations are device-local — you'll need to re-configure security settings on the new device.
One payment. All features. Lifetime updates. Zero data collection. The last security app you'll ever buy.
Get LockLoom on Google Play