← Home

Privacy Policy

Last updated: 28.09.2026

1. Introduction

Welcome to LeafU. Your privacy is important to us. This Privacy Policy explains what personal information LeafU collects and processes when you use the LeafU iOS app or leafu.org website, how that information is used, and the choices available to you.

2. Information We Collect

Using LeafU without an account

You can use LeafU without creating an account.

When you use LeafU without an account, your notes and other content you create in LeafU are stored locally on your device. LeafU does not transmit this content to our servers.

Creating a LeafU account

If you create an account, we collect and process information necessary to create and manage your account, such as your email address and account identifier.

Creating an account does not cause your notes or other LeafU content to be uploaded or synced. Unless you have an active subscription that includes syncing, your LeafU content remains stored locally on your device.

Using LeafU with a subscription

If you purchase a subscription that includes syncing, we process the information necessary to provide that service. This includes:

  • Your LeafU content, including notes and related information that you choose to sync. This content is stored on our backend so that it can be synced and made available to you across your devices.

  • Subscription information, such as your subscription status, subscription identifier and billing period.

Payments are processed by Stripe. LeafU does not store your full payment card details. Stripe processes payment and transaction information in accordance with its own privacy practices.

3. How We Use Your Information

We use your personal information only as necessary to provide and operate LeafU, including to:

  • create and manage your account;

  • store and sync your LeafU content across your devices;

  • provide your subscription;

  • maintain the security and operation of the service; and

  • respond to requests relating to your account or the service.

We do not use the contents of your notes for advertising, profiling or marketing.

We process your account information where necessary to provide and manage your LeafU account. If you purchase a subscription, we process your subscription information and synced LeafU content where necessary to provide the subscription and syncing service. Our lawful basis for this processing is performance of our contract with you.

We may also retain certain information where required by law, for example records relating to payments and transactions that we are required to keep for tax or accounting purposes.

4. How We Share Your Information

We do not sell your personal information.

We use third-party service providers to operate LeafU. These providers may process personal information on our behalf only where necessary to provide their services.

These include:

  • Supabase, which provides authentication, database and backend infrastructure used to operate accounts and store synced LeafU content.

  • Stripe, which processes subscription payments and provides billing and subscription services.

These providers process information in accordance with their respective contractual and data protection obligations.

We may also disclose information where required by law.

5. Data Storage and Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or loss.

Content belonging to users who do not use an account or subscription remains stored locally on their device and is not stored in LeafU's backend.

For subscribed users, synced LeafU content is stored securely using our backend infrastructure and is associated with the user's account.

6. How Long We Keep Your Information

We keep personal information only for as long as necessary to provide LeafU and meet our legal obligations.

If you have a LeafU account, we retain the account information necessary to provide and manage your account.

While you have an active subscription that includes syncing, we store your synced LeafU content in order to provide the syncing service.

If you cancel your subscription, syncing will remain available until the end of your current paid subscription period. When your subscription ends, your synced LeafU content will be deleted from our active systems. Your LeafU content stored locally on your devices will not be affected.

If you subscribe again later, your locally stored LeafU content may be synced to our servers again as part of the syncing service.

If you delete your LeafU account, we will delete the personal information associated with your account that we no longer need, including synced LeafU content stored in our active systems.

Deleted information may remain temporarily in routine database backups. These backups are retained for a limited period and are used for disaster recovery and service restoration. Information remaining only in a backup is not used as part of the normal operation of LeafU and will be removed as those backups expire.

We may retain certain information for longer where required by law, for example records relating to payments and transactions that we are required to keep for tax or accounting purposes.

7. Your Rights

Under UK data protection law, you have rights in relation to your personal information, including:

  • Access – you can ask us for a copy of the personal information we hold about you.

  • Correction – you can ask us to correct personal information that is inaccurate or incomplete.

  • Deletion – you can ask us to delete your personal information in certain circumstances

  • Restriction – you can ask us to restrict how we use your personal information in certain circumstances.

  • Data portability – where applicable, you can ask to receive certain personal information you have provided to us in a structured, commonly used and machine-readable format.

Some of these rights apply only in particular circumstances, depending on the type of information and why we are processing it.

To exercise your rights, please contact us at contact@leafu.org.

You also have the right to raise a concern with the UK Information Commissioner's Office (ICO).

8. International Data Transfers

LeafU uses service providers to operate parts of the service, including Supabase for authentication, database and backend infrastructure and Stripe for subscription payments.

Our primary Supabase database is hosted in the United Kingdom. Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards are used in accordance with applicable data protection law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when LeafU's features or the services we use change.

If we make significant changes, we will provide appropriate notice through LeafU, our website, or other suitable communication channels.

10. Contact Us

If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact us at: contact@leafu.org.