Leafolio (“Leafolio,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Leafolio mobile application, website, and related services, collectively referred to as the “Services.”
Leafolio is operated by The Two Trees LLC.
By using the Services, you acknowledge that your information will be handled as described in this Privacy Policy.
1. Contact us
If you have questions, comments, or requests regarding this Privacy Policy or our privacy practices, you may contact us at:
2. What we don’t do
For clarity:
- We do not sell your personal information.
- We do not use your personal information for third-party advertising.
- We do not share your personal information with advertisers or advertising networks.
- We do not use Apple’s Identifier for Advertisers, also known as IDFA.
- We do not request Apple App Tracking Transparency permission.
- We do not use your plant collection records, photos, notes, breeding records, vendor records, or order records for third-party advertising.
3. Information we collect
A. Information you provide
We may collect information you choose to provide through the Services, such as:
- account and login information
- profile information
- plant collection records and related content
- plant photos, notes, care records, breeding records, wishlist items, vendor records, order records, and other information you create or upload
- communications you send to us, including support requests
- subscription-related information, such as your subscription status or entitlement level
B. Information collected automatically
When you use the Services, we may automatically collect certain information, such as:
- device information
- app version
- operating system and platform information
- technical identifiers
- usage, interaction, and performance information
- screens viewed, actions taken, and feature usage
- diagnostic, crash, and error information
- approximate location inferred from device, language, region, network, or other general technical settings, where applicable
C. Information from third parties
We may receive information from third parties that help us operate the Services. These may include providers that support authentication, subscriptions, hosting, analytics, diagnostics, communications, storage, database services, or similar business functions.
For example, authentication and sign-in providers such as Apple, Google, and Supabase may process information needed to create, authenticate, and secure your account.
4. How we use information
We may use information we collect to:
- provide, operate, maintain, and improve the Services
- create, authenticate, and manage user accounts
- save, organize, display, and support your plant collection records and related app functionality
- provide subscription features and verify purchase or entitlement status
- support features such as plant records, photos, notes, vendors, orders, wishlist items, breeding records, reminders, and related app tools
- personalize and improve the user experience
- monitor usage, performance, reliability, and security
- troubleshoot issues, detect bugs, and prevent fraud, abuse, or misuse
- provide customer support and respond to your requests
- communicate with you about your account, subscriptions, updates, support inquiries, or important service-related notices
- comply with legal obligations and enforce our terms, policies, and rights
5. How we share information
We do not sell your personal information.
We may share information only in the following circumstances:
A. Service providers
We may share information with vendors and service providers that perform services on our behalf. These may include providers that support hosting, authentication, database services, storage, subscriptions, analytics, diagnostics, communications, security, and similar operational functions.
For example, we may use service providers such as Supabase for authentication, database, storage, and backend services; RevenueCat for subscription entitlement management; PostHog for product analytics; and Sentry for diagnostics, crash reporting, and reliability monitoring.
These providers are permitted to process information only as needed to provide services to us, subject to their own terms, privacy policies, and applicable law.
B. Legal and safety reasons
We may disclose information if we believe doing so is reasonably necessary to:
- comply with applicable law, regulation, legal process, or governmental request
- protect our rights, property, or safety
- detect, investigate, or prevent fraud, abuse, security issues, or technical problems
- protect the rights, safety, or property of users or others
- enforce our terms, policies, or agreements
C. Business transfers
If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.
6. Device permissions
Leafolio may request access to certain device features or permissions, such as photos, camera, or notifications, in order to provide features you choose to use.
For example:
- Photos or camera access may be used so you can add plant photos, document your collection, or record plant and breeding history.
- Notifications may be used for reminders, such as plant care reminders or breeding harvest windows.
If you decline a permission, some features may be unavailable or function differently. You may change permissions later through your device settings.
7. Analytics, diagnostics, and service improvement
We may use analytics, diagnostics, and similar tools to better understand how the Services are used, improve product performance, troubleshoot issues, monitor reliability, and support the operation of the Services.
These tools may collect information such as device and app information, app version, feature usage, screens viewed, actions taken within the app, crash data, error logs, performance information, and other technical or diagnostic information.
Where practical, we take steps to limit unnecessary personal information in diagnostics and error reporting.
We do not use analytics or diagnostics data for third-party advertising.
8. Purchases and subscriptions
If you purchase a subscription or other paid feature, payment processing is handled by the applicable app platform, such as the Apple App Store or Google Play, or their payment partners. We do not receive your full payment card information.
We may receive information related to your subscription or purchase status, such as whether you have an active subscription, the product or tier associated with your purchase, renewal or expiration status, and related transaction or entitlement details needed to operate subscription features.
We may use service providers, such as RevenueCat, to help manage subscription status and entitlement access.
9. Data storage and security
Your information may be stored on your device, on our systems, or on systems operated by service providers acting on our behalf.
We use reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
10. Data retention
We retain information for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, protect our rights, maintain security, and support legitimate operational purposes.
Retention periods may vary depending on the type of information, how it is used, and applicable legal or operational requirements.
Some information may remain in backups or logs for a limited period after deletion, where permitted by law and where deletion from active systems has already occurred.
11. Your choices and deletion requests
You may be able to:
- view and edit certain information directly in the app
- delete individual records within the app
- revoke device permissions through your device settings
- delete your account directly in the app
- contact us regarding privacy-related questions or requests
You can delete your Leafolio account directly in the app by going to Settings → Delete Account. When you delete your account, Leafolio deletes your authentication account and clears Leafolio-owned data stored locally on your device, including plants, vendors, orders, notes, photos, breeding records, reminders, and related app data.
You may also request account deletion and associated data deletion by visiting:
You may also contact us at support@leafolio.app.
When you request deletion, we will take reasonable steps to delete or de-identify personal information associated with your account, subject to information we are required or permitted to retain for legal, security, fraud-prevention, backup, billing, dispute-resolution, or operational purposes.
Deleting your account does not cancel Leafolio Premium or any active subscription. To stop future charges, you must cancel your subscription through the platform where you purchased it, such as Apple Subscriptions in the iOS Settings app or Google Play subscriptions on Android.
12. Privacy rights
Depending on where you live, you may have certain rights regarding your personal information. These may include the right to request access, correction, deletion, or a copy of certain personal information, or to object to or restrict certain processing.
To make a privacy-related request, contact us at support@leafolio.app.
We may need to verify your identity before responding to certain requests.
13. Children’s privacy
Leafolio is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
If you believe a child under 13 has provided personal information to us, please contact us at support@leafolio.app and we will take reasonable steps to delete it.
14. International processing
If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other jurisdictions where we or our service providers operate.
These jurisdictions may have data protection laws that differ from those in your location.
15. Third-party services
The Services may rely on, integrate with, or link to third-party services. This Privacy Policy does not govern the privacy practices of third parties.
We encourage you to review the privacy policies of third-party services you choose to use or interact with, including app platforms, authentication providers, subscription providers, analytics providers, diagnostics providers, and other services.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make changes, we will revise the “Last updated” date above.
Your continued use of the Services after a revised Privacy Policy becomes effective means you acknowledge the revised Privacy Policy.
17. Contact us
If you have questions, comments, or requests regarding this Privacy Policy, contact us at: