Last updated: 25 October 2026
LOCKqz blocks AI on a student's computer while a protected Brightspace quiz is open, then turns AI back on. It is open-note: notes, files and the rest of the web stay open.
Students: what LOCKqz stores
- Your school email, confirmed once with Google sign-in (LOCKqz gets only your email address from Google). When email codes are on, LOCKqz can email a 6-digit code instead (only a hash of the code is kept; it expires in 15 minutes).
- A random device ID and device key made at install, your platform (Mac or Windows), app version, macOS version (Macs), install time and last check-in.
- IP addresses: when the app registers, while a quiz is locked, when the app gets a quiz password, and when you open the pay page.
- Quiz events with times: lock, unlock, password given to the app, left the quiz, and tamper flags (for example, the AI block was removed).
- From your professor's Brightspace (when they run LOCKqz Sync): your name, email, username, Brightspace user ID, org-defined ID, role, whether you submitted a protected quiz, and whether you already had special access on it (so LOCKqz never changes accommodations).
- Pay page: typing an email there makes a payment code for that email. If you pay: the payment record from Venmo, Zelle or Stripe (payer name, amount, memo, date).
Professors: what LOCKqz stores
- Email, name, a password hash, sign-in sessions, your Brightspace user ID, and failed sign-ins and password-reset requests (email and IP).
- Your Brightspace courses, class lists and quizzes (names, dates, settings LOCKqz changes).
- Your USC sections from the public Schedule of Classes, and payment records (payer, amount, memo, date).
- Invites: the invited email, dates and whether it was used.
What LOCKqz does NOT collect
- No quiz questions, answers, or grades.
- No keystrokes, clipboard, browsing history, or page contents.
- The app checks the addresses of your open browser tabs on your computer to spot a quiz. They are not sent, except the quiz page's own address.
- No camera, microphone, screen capture, or screenshots.
- No location (beyond what an IP address shows) or contacts.
Who sees it
- Your professor can see, for their own courses: who installed LOCKqz, live lock status, quiz events, and IP addresses.
- The LOCKqz admin can see all records.
- Services that run LOCKqz: Cloudflare (hosting and database), Google (Gmail sends codes and reads payment alerts; Google sign-in if you use it), Stripe (if you pay by card), Venmo and Zelle (if you pay).
- Never sold, and never used for ads or anything other than running LOCKqz.
Your control
- Uninstall LOCKqz any time; it then sends nothing. Windows: Settings → Apps → Installed apps → LOCKqz → Uninstall. Mac: in Terminal,
curl -fsSL https://lockqz.com/uninstall.sh | sudo bash. Linux:curl -fsSL https://lockqz.com/uninstall-linux.sh | sudo bash. Android: uninstall the app. - Quiz events are deleted after 120 days.
- Ask and we delete everything stored for your email; it is not re-imported from Brightspace.