Privacy policy

Who we are

Leaf is made by an independent developer ("we", "us"). This policy covers the Leaf extension for Chrome, Leaf Pro and the website at leafnotes.co. For anything about your privacy, write to support@leafnotes.co.

Your notes, on your computer

Everything you write in Leaf, including notes, labels, notepads, drafts and settings, is saved inside Chrome on your computer. Without Leaf Pro sync, none of it is sent to us or anyone else, and Leaf works offline.

If you uninstall Leaf, Chrome deletes this data. You can export your notes from Settings at any time. If Leaf ever offers AI features, they'll run on your computer. Anything that would send your notes elsewhere for AI will be off unless you choose to turn it on.

Accounts

You only need an account for Leaf Pro. You create one when you upgrade, by signing in with Google or with a code sent to your email. For your account we keep:

• your email address, and your name if you sign in with Google
• whether you have Leaf Pro, monthly or yearly, and when it renews or ends
• a reference to your customer record at Stripe, our payment provider

An account is kept even if you don't finish upgrading, until you delete it. From Google we use only your name and email address, to sign you in and show which account you're using. Google also sends a profile picture, which we discard. Leaf's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Sync

If you turn on sync, your notes, labels, notepads and the order you keep them in are stored on our servers so they can appear on each computer where you sign in.

• Synced notes are encrypted in transit and at rest. Note titles and text, and label and notepad names, are encrypted before they're stored, with keys held only by Leaf's servers.
• We don't access your synced notes, except where the law requires us to.
• When you delete a note, label or notepad, its text is removed from our servers as soon as the deletion syncs. A small marker (an ID and dates, no text) stays for up to 180 days so your other computers delete it too.
• If your Leaf Pro ends, the synced copy on our servers is deleted 90 days later. The notes on your computer stay where they are, and if you subscribe again, Leaf uploads them again.

Payments

Leaf Pro is sold through Stripe, which acts as the reseller and merchant of record. Stripe handles your card, billing address and any sales tax or VAT under its own privacy policy. We never see your full card number. Stripe tells us only what we need to run your subscription: your plan, its status and when it renews.

Emails

If you have an account, we send sign in codes, receipts and important notices about your account or Leaf Pro. Sign in codes are sent through Resend. We may occasionally email account holders news about Leaf, and every one of those emails has an unsubscribe link. If you use Leaf without an account, we don't have your email address and never email you.

If you write to us, we keep the conversation with our email provider so we can help you, and delete it if you ask.

Error reports

When something goes wrong, Leaf can send an anonymous error report so we can find and fix the problem. This is on by default, and you can turn it off at any time in Leaf's Settings, under Send error reports. A report contains only technical details:

• what went wrong (the type of error and where in Leaf's code it happened)
• the Leaf version, Chrome's version and your operating system (for example, Windows)
• a random ID created when Leaf was installed, which isn't linked to you or your account

Reports never include the text or titles of your notes, or anything you type, and anything quoted in an error message is removed before it's sent. Leaf doesn't attach your IP address to reports, and we never use it to identify you. Reports are processed by Sentry in the United States, kept for at most 90 days, and used only to fix bugs and to improve Leaf.

With the same switch on, Leaf also counts a few steps on the way to Leaf Pro, with the same random ID and technical details: when the Leaf Pro sheet opens and which feature opened it, when you choose to get Pro, and that Pro is on. These counts include roughly how many notes you have (a range such as 11 to 100), never what's in them. When you buy Leaf Pro, the feature that led you there is saved with your subscription.

Permissions

Leaf asks Chrome for the fewest permissions it can:

• Storage and unlimited storage, to save your notes on your computer
• Side panel, so you can open Leaf next to the page you're reading

Leaf can't read the pages you visit, your browsing history or your other tabs.

This website

leafnotes.co has no ads, no analytics and no tracking cookies. When you sign in, the page keeps your sign in session in your browser so it can hand it to Leaf, and it shows Google's sign in button, which may use Google's own cookies under Google's privacy policy. The site is hosted by Vercel, which keeps short-lived server logs (such as IP addresses) to run and protect it.

Who else handles your data

We use a small number of services to run Leaf. Each handles data only to provide its service to us:

• Supabase: our database and sign in (accounts and synced notes), in the United States
• Vercel: hosting for leafnotes.co and Leaf's servers, in the United States
• Stripe: payments for Leaf Pro, as described above
• Google: sign in, if you choose Sign in with Google
• Resend: sign in code emails
• Sentry: error reports, in the United States
• our email provider, for messages you send us

We never sell your data, and we never use your notes to train AI models, ours or anyone else's. We share information with authorities only when the law requires it. If Leaf is ever sold or passed to someone else, your data would move with it under this policy, and we'd tell account holders first.

Because these services are in the United States, your data may be stored and processed there, which may have different privacy laws from where you live. We rely on these providers' contractual commitments to protect it.

How long we keep it

• Notes on your computer: until you delete them or uninstall Leaf.
• Your account: until you delete it.
• Synced notes: until you delete them or your account, or 90 days after your Leaf Pro ends.
• Markers for deleted items: up to 180 days.
• Error reports: up to 90 days.
• Billing records: as long as Stripe and tax law require.

Your choices and rights

• Export your notes at any time from Leaf's Settings.
• Delete your account, and everything stored with it on our servers, from Leaf's Settings under Delete account, or by writing to us.
• Turn off error reports in Settings, and unsubscribe from news emails with the link in any of them.
• Ask us what data we hold about you, or to correct it.

Write to support@leafnotes.co and we'll reply within 30 days. Depending on where you live, you may also have further rights under local law, such as the right to complain to your data protection authority (in Canada, the Office of the Privacy Commissioner).

Keeping it safe

Data travels over encrypted connections, synced notes are encrypted at rest, and access to our systems is limited. No system is perfectly secure, but if a breach ever puts your information at risk, we'll tell you as the law requires.

Children

Leaf isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, write to us and we'll delete it.

Chrome Web Store

Leaf's use of data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use data only to provide and improve Leaf's features as described here, and never to personalise ads or for credit decisions.

Changes

If this policy changes, we'll update it here and change the date at the top. For significant changes, Leaf Pro subscribers get an email at least 30 days before they apply. If we ever want to use your information in a new way, we'll ask you first.