Leafnote
Privacy Policy
The short version
- Your notes live on your iPhone and in your own iCloud. We don't store them.
- When you use the AI, what you add, your note titles and a little related context go to our AI provider, Anthropic, through our server, plus the open note when you use the AI mic in a note. Only after you allow it, and you can switch it off in Settings.
- Our server keeps no note content and logs no requests.
- There are no accounts, ads, analytics or tracking.
Who we are
Leafnote is made by Eduardo Alba ("we"). Questions about privacy: support@getleafnote.app.
Your notes
Everything you write or say in Leafnote, including the raw things you add, is stored in a database on your iPhone. If iCloud is on, it syncs through Apple's CloudKit to the private database in your own iCloud account, with the contents in encrypted fields. We can't read your private iCloud database. Apple's privacy policy covers iCloud.
If iCloud is off, or you sign out, your notes stay on your iPhone. They are never uploaded into a different iCloud account.
Search runs on your iPhone. Voice input is transcribed on your iPhone by Apple's speech recognition, and the audio isn't sent to us or to the AI provider.
When you record with the Action Button or the Record to Leafnote shortcut, the recording is kept on your iPhone only until it has been turned into text, and then it's deleted. It's left out of iCloud and device backups. If it can't be turned into text right away (for example, because the speech model hasn't downloaded yet), it waits on your iPhone and Leafnote tries again the next time you open it.
AI filing
Filing what you add is the AI part of Leafnote, and it's part of Leafnote Pro. Nothing is sent to the AI until you tap Allow on the screen that asks. If you choose Not now, what you add is still saved on your iPhone and waits.
You can switch it off or on at any time in Leafnote's Settings (Sort with AI). While it's off, nothing is sent.
When something is filed, Leafnote sends:
- what you added;
- the titles of your notes;
- short excerpts from the few notes that match it, and a few related past inputs;
- when you use the AI mic in a note, that note's text (up to a limit);
- the local date, time and time zone when you said it, so “tonight” or “next Friday” means the right time for a reminder.
It never sends your whole notebook.
This goes to our relay, a small server we run on Cloudflare, which passes it to our AI provider, Anthropic (the Claude API). Anthropic processes it to work out where it belongs and sends the result back to your iPhone, where the change is made. Anthropic may keep the data for a limited time under its own terms, for example for safety and abuse checks. See Anthropic's privacy policy.
Reminders
When something you add has a time, Leafnote can set a reminder on it. Your iPhone schedules the reminder's notification itself. When lines of your notes go to our AI provider as related context, their reminder times go with them. Reminders are part of your notes, so they stay on your iPhone and sync through your own iCloud.
Our relay
The relay keeps no note content and logs no request or response bodies, including the time and time zone sent with them. It holds only:
- whether an anonymous ID has Leafnote Pro, and until when (kept for at most a day);
- how much AI use, in dollars, each anonymous ID has had today and this month, to enforce spending limits (cleared once the day or month is over).
Cloudflare handles the network traffic, including your IP address, to deliver the request. We don't keep IP addresses. See Cloudflare's privacy policy.
Subscriptions
Apple handles payment. We never see your card, name, email or Apple Account. Subscriptions are managed through RevenueCat, which receives an anonymous ID (a random ID made on your iPhone, not linked to you), your purchase and subscription details from Apple, and basic technical details such as app and iOS version. Our relay asks RevenueCat whether that ID has Pro. See RevenueCat's privacy policy.
Manage subscription and Restore Purchases are in Leafnote's Settings.
What we don't do
- No accounts, sign-up or email.
- No analytics, crash reporting or advertising SDKs.
- No tracking across apps or websites, and no selling or sharing for ads.
- No location, contacts or photos.
If you've chosen to share analytics with app developers in iOS Settings, Apple may send us crash reports and usage statistics. Apple controls this, and you can turn it off in Settings → Privacy & Security → Analytics & Improvements.
How long data is kept
| Data | Where | Kept |
|---|---|---|
| Your notes and inputs | Your iPhone, your iCloud | Until you delete them |
| Pro status | Our relay | At most a day |
| Spending totals | Our relay | Until the day or month ends |
| What was sent for filing | Anthropic | Under Anthropic's terms |
| Subscription records | RevenueCat, Apple | Under their terms |
Deleting your data
Deleting a note in Leafnote removes it from your notes, and you can undo it. Leafnote keeps the raw things you added in your own database so nothing is lost. To erase everything:
- Delete the app from your iPhone. This removes its data on the device.
- Delete Leafnote's iCloud data: Settings → [your name] → iCloud → Manage Storage → Leafnote → Delete Data. The labels vary a little between iOS versions.
The relay's records clear on their own. For RevenueCat records, email us. Because there's no account, include the order ID from your Apple receipt so we can find them.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to its use, and to complain to your data protection authority. Most of your data is already on your own devices and iCloud. For anything else, email support@getleafnote.app.
In the EU and UK, we process data to provide the service you asked for, with your consent for AI filing, and for our legitimate interest in preventing abuse (spending limits). Our providers (Cloudflare, Anthropic and RevenueCat) may process data in the United States.
Children
Leafnote isn't directed at children under 13, and we don't knowingly collect personal data from them. If you think a child has sent us data, email us and we'll delete it.
Changes
We'll post changes on this page and update the effective date above. If a change affects what's sent to the AI provider, we'll ask again in the app first.
Contact
Eduardo Alba
support@getleafnote.app