Privacy Policy
Leaf by Leaf (“the app”, “we”) is a reading-habit app operated by Sang Woo Yang, an individual developer in the Republic of Korea. This policy explains what personal information we process and why. We do not sell or share your personal information, and we do not use it for advertising.
1. What we collect
When you sign in (Apple, Google, or Kakao)
- An account identifier from the sign-in provider
- Your name/nickname and profile image, if you allow the provider to share them
- Your email address, if you allow the provider to share it
While you use the app
- Reading log: books you add, pages read, the lines and notes you write, and when
- Social activity: follows, likes, comments, reading groups, and invites
- Your device’s time zone and the app language — so your day, streak, and reminders follow your local time and notifications use your language
- If you allow notifications: a device push token and your notification settings (such as reminder time)
- Error diagnostics: when the app hits an error, a technical report (error message, app version, device model) is sent to our own error-tracking server
What we never collect — photos you take of book pages are read (text recognition) on your device only. They are never uploaded or stored on our servers. This is a core design rule of the app.
2. Why we use it (and our legal basis)
- To run your account and the app’s features — your log, stats, streaks, feed, and reading groups (performance of our contract with you)
- To send reminders and social notifications you turned on (your consent, which you can withdraw in the app or your phone settings at any time)
- To keep the service secure, fix errors, and prevent abuse (our legitimate interests)
3. Who we share it with
- We do not sell, rent, or share your personal information with third parties for their own purposes.
- Expo (650 Industries, Inc., USA) delivers push notifications; it receives only your device push token, and only if you allow notifications.
- Book data providers — when you search for a book, our server sends the search words (never your identity) to Google Books, Open Library, YES24, or Kakao to look up book details and covers.
- We run our own servers; no other processors handle your data.
4. Where your data is stored
Your data is stored on our servers in the Republic of Korea. If you live outside Korea, your information is transferred to and processed in Korea.
5. How long we keep it
- We keep your information while your account exists. When you delete your account in the app, everything is deleted immediately and cannot be recovered (Settings → Delete account). See Account deletion.
- Server backups are overwritten within 14 days.
6. Your choices and rights
- See and edit your profile and records in the app at any time.
- Delete your account in the app — it takes effect immediately.
- Turn notifications off in the app or in your phone’s settings.
- Ask us to access, correct, delete, or export your information, or object to processing, by emailing [email protected]. We reply within 30 days and won’t treat you differently for asking.
7. Region-specific information
California (United States)
We collect the categories of information listed in section 1 for the purposes in section 2. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you. You may request to know, delete, or correct your information as described in section 6.
Canada
Your information is stored and processed in Korea (section 4) and may be accessible to Korean authorities under Korean law. You can access and correct it as described in section 6.
Australia and New Zealand
We handle personal information in line with the Australian Privacy Principles and the New Zealand Information Privacy Principles. Your information is held in Korea (section 4). You can ask to access or correct it (section 6) and may complain to the OAIC (oaic.gov.au) or the NZ Privacy Commissioner (privacy.org.nz).
8. Children
The app is not intended for anyone under 16, and we do not knowingly collect information from children under 16.
9. Security
- All connections are encrypted with HTTPS.
- Access to personal information is limited to the operator.
10. Contact
- Data controller and privacy contact: Sang Woo Yang (operator)
- Email: [email protected]
11. Changes
If we change this policy, we’ll post the update here and in the app at least 7 days before it takes effect.