The short version: Leaf does not collect, store, transmit, or share any of your personal data. The app runs entirely on your device. There is no server, no account, no login, and no cloud. Zero.
Leaf ("the App," "we," "us," or "our") is an Android productivity application developed independently by Hassan Amechtal, operating under the Leaf brand at leafapp.info.
Leaf is available for purchase through the Google Play Store at a one-time price of $0.99. This Privacy Policy applies to the Leaf Android application and the leafapp.info website.
If you have any questions about this policy, you can contact us at: privacy@leafapp.info
The Leaf application collects no personal data whatsoever. There is no telemetry, no usage analytics, no crash reporting sent to any external server, and no account creation required to use the app.
You never create an account. No email, no username, no password.
No analytics SDK, no event tracking, no usage metrics sent externally.
No advertising IDs, no ad networks, no remarketing pixels.
Your data is never transmitted to any external server or cloud service.
Leaf explicitly disables push notifications. Your device is never pinged.
No Firebase, no Facebook SDK, no third-party data collection libraries.
All data you generate within Leaf — your tasks, habits, streaks, notes, calendar entries, achievement progress, and analytics — is stored exclusively in a local SQLite database on your Android device.
This database resides inside the Android application sandbox, which is an isolated, private storage partition that other apps on your device cannot access without root-level device compromise. Leaf does not request any permissions to read or write to shared storage on your device.
What happens if you uninstall Leaf? All of your data is permanently deleted when you uninstall the app. There is no cloud backup. There is no way to recover it. This is by design — your data belongs to your device, not to us.
Leaf uses Android's WorkManager API to run scheduled background tasks. This is used exclusively to generate your daily algorithmic challenges and update your momentum metrics while the app is closed.
This background processing:
The WorkManager process accesses only the app's own sandboxed database. It can be stopped at any time by clearing the app's data from your Android system settings.
Leaf requests only the minimum permissions necessary to function. Below is a complete list of the Android permissions Leaf uses and the reason for each:
Leaf is distributed through the Google Play Store. When you purchase or download Leaf from Google Play, Google collects information related to that transaction — including your Google account, payment method, and purchase history. This collection is governed by Google's Privacy Policy, not ours.
We, as the developer, receive only the following aggregated information from Google Play:
We receive no information that can identify you personally through the Google Play developer console.
The Leaf website at leafapp.info may collect limited information when you visit or interact with its forms:
If you voluntarily submit your email address through the Closed Beta Tester signup page on this website, that email address is stored in a secure database operated via Supabase (supabase.com). This email is used solely to add you to the Google Play Closed Testing group. We will not use it for marketing, newsletters, or any other purpose. You may request deletion at any time by emailing privacy@leafapp.info.
If you voluntarily submit feedback through the website's Feedback section, your message and optional email address are stored securely for the purpose of improving the app. We do not share this information with third parties.
The website may log basic server access data (IP address, browser type, page visited, timestamp) through standard web server logs. This information is not linked to your identity and is used solely to monitor server health and diagnose issues. We do not use third-party analytics on this website (e.g., Google Analytics is not installed).
Leaf is intended for users aged 13 and older. The app does not knowingly collect any data from children under 13. Because the app collects no personal data at all, there is no risk of a child's personal information being stored or shared.
If you are a parent or guardian and believe your child has submitted personal information through the Leaf website forms, please contact us at privacy@leafapp.info and we will promptly delete it.
Because the Leaf app stores all data locally on your device, you have complete and absolute control over it at all times. You can:
For any data submitted to the leafapp.info website (tester email, feedback), you have the right to:
To exercise any of these rights, email us at: privacy@leafapp.info.
For data within the app, the Android operating system provides native sandboxing and file-level encryption on supported devices. Leaf relies on these built-in security mechanisms. No additional encryption layer is applied at the application level beyond what Android provides.
For the small amount of website form data (tester emails and feedback), we use Supabase as our backend service, which provides industry-standard security including row-level security policies, HTTPS encryption in transit, and AES-256 encryption at rest.
No security system is perfect. While we take these measures seriously, we cannot guarantee absolute security. If you believe there is a security vulnerability, please contact us responsibly at privacy@leafapp.info.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this page. We may also post a notice on the leafapp.info website. Continued use of the app after any changes constitutes your acceptance of the updated policy.
Since the app collects no personal data, most changes to this policy will relate to our website or how we describe existing practices, not to new data collection activities.
If you have any questions, concerns, or requests related to this Privacy Policy, please reach out:
We aim to respond to all privacy-related inquiries within 5 business days.