Privacy Policy

Last updated: May 14, 2026

Leaf Bookmarks is an app for saving, organizing, and enriching web links. This Privacy Policy explains what information we collect, how we use it, which services we share it with, and what choices you have regarding your data.

By using Leaf Bookmarks, you agree to the handling of your information as described in this Privacy Policy.

1. Data controller

The controller responsible for Leaf Bookmarks is: Tomás Frechou / Leaf Bookmarks

  • Contact: support@leafbookmarks.com.
  • Website: https://leafbookmarks.com.

If you have questions about privacy, access to your data, or account deletion, you can contact us at that email address.

2. Information we collect

We collect the information needed to make Leaf Bookmarks work properly, protect the service, and improve the product responsibly.

2.1 Account information

When you create an account or sign in, we may collect:

  • Name or display name.
  • Email address.
  • Internal user identifier.
  • Authentication method used, such as email or Apple.
  • Session status.
  • Preferred language.

2.2 Content you save in the app

Leaf Bookmarks stores the information you choose to save, including:

  • Link URLs.
  • Titles.
  • Descriptions.
  • Generated summaries.
  • Thumbnails or favicons.
  • Folders.
  • Tags.
  • Creation and update dates.
  • AI autofill preferences.

This content belongs to your account and is used to display, sync, and organize your bookmark library.

2.3 Information generated by AI features

If you use AI features, we may process:

  • The link URL.
  • Public page metadata, such as title, description, or thumbnail.
  • Extracted page content when needed to generate a summary.
  • Existing tags.
  • Existing folders.
  • Preferred language.
  • Generated summary.
  • Suggested tags.
  • Suggested folder.
  • Embeddings or other technical representations used for Pro features.
  • Daily AI feature usage.

AI is used to help you understand and organize your links. You should not save links containing highly sensitive information if you do not want that information to potentially be processed by external AI services.

2.4 Subscription information

We may process:

  • User identifier used to associate the subscription.
  • Subscription status: Free, Trial, or Pro.
  • Trial expiration date, if applicable.
  • Relevant changes to subscription status.

Payments are processed through Apple and RevenueCat. Leaf Bookmarks does not store card numbers or complete payment details.

2.5 Product analytics

We use PostHog to understand how the app is used and to improve the product.
Analytics are configured manually and in a limited way. We do not use autocapture, session replay, screen recording, or automatic interaction tracking. Events are sent through AnalyticsService.
By default, we do not send sensitive content to PostHog, such as:

  • Email addresses.
  • Passwords.
  • URLs.
  • Link titles.
  • Descriptions.
  • Summaries.
  • Folder names.
  • Tag names.
  • Personal names.

When an event needs context, we use safe properties such as source, mode, outcome, enabled, counts, or boolean values.

2.6 Technical information

We may collect technical information necessary for security, diagnostics, and functionality, such as:

  • Internal identifiers.
  • Error logs.
  • Timestamps.
  • Sync status.
  • Basic device or system information when provided by third-party services.
  • AI limits and usage.
  • Information necessary to prevent abuse or excessive use.
  • Backend validation results, such as email checks or rate limits.

3. How we use information

We use information to:

  • Create and maintain your account.
  • Authenticate you securely.
  • Sync your links across devices.
  • Display, edit, and organize your library.
  • Generate summaries, tags, and folder suggestions.
  • Apply free-plan limits and Pro benefits.
  • Manage subscriptions.
  • Restore purchases.
  • Improve the app through privacy-conscious analytics.
  • Detect errors, abuse, or technical issues.
  • Respond to support requests.
  • Process account deletion requests.

4. Third-party services

Leaf Bookmarks uses external providers to operate the product.

4.1 Supabase

We use Supabase for:

  • Authentication.
  • PostgreSQL database.
  • Account data storage and synchronization.
  • Backend validations.
  • Sensitive operations, such as account deletion.

Supabase processes app data as an infrastructure provider.

4.2 PostHog

We use PostHog for product analytics. Our configuration avoids automatic capture, session replay, and personal content. We only send manual events and sanitized properties.

4.3 RevenueCat

We use RevenueCat to manage subscriptions, Pro status, free trials, and purchase restoration. RevenueCat may receive technical and transactional information related to purchases.

4.4 OpenRouter and AI providers

We use OpenRouter to access AI models that generate summaries, suggested tags, suggested folders, and embeddings. To generate those results, we may send the URL, extracted page content, and organizational context from your account.

OpenRouter may route requests to different model providers. Retention and training policies may depend on the selected provider and the configuration of the OpenRouter account.

4.5 Jina AI or other content extraction services

We may use services such as Jina AI to read or transform public web page content and generate context for AI features.

4.6 Apple

If you use Sign in with Apple or in-app purchases, Apple processes data according to its own policies. Leaf Bookmarks does not control Apple's privacy practices.

5. Local data on your device

Leaf Bookmarks may store a local copy of your links, folders, and tags on your device. This makes the experience faster and supports synchronization.

When you sign out, the app is designed to clear local data associated with the account so that information from one account does not appear in another session.

6. Account deletion

You can request account deletion from within the app.

When you delete your account:

  • Your links are deleted.
  • Your folders are deleted.
  • Your tags are deleted.
  • Relationships between links and tags are deleted.
  • Your Leaf Bookmarks profile is deleted.
  • Your Supabase Auth user is deleted.
  • Your local session is cleared.

Before deleting the account, we may ask for structured reasons and an optional comment. That feedback is stored separately to understand why users leave and improve the product. It should not include sensitive information.

Some data may need to be retained for legal obligations, fraud prevention, security, dispute resolution, or aggregated or anonymous records.

7. Data retention

We keep your data while your account is active or while it is necessary to operate Leaf Bookmarks.

We may retain:

  • Account data while the account exists.
  • Saved content until you delete it.
  • Technical logs for a reasonable period for security and diagnostics.
  • Purchase or subscription information according to Apple, RevenueCat, or applicable legal requirements.
  • Aggregated or anonymized data that does not identify you.

When you delete your account, we delete the main personal data associated with your account, unless we must retain something for legal, accounting, security, or rights-defense purposes.

8. Security

We take reasonable measures to protect your data, including:

  • Authentication through Supabase.
  • User-scoped data separation.
  • Authenticated sessions.
  • Backend functions for sensitive operations.
  • Sensitive keys kept server-side.
  • Reduced data sent to analytics.
  • Analytics property sanitization.
  • Secure communication through modern services.

Even so, no system is 100% secure. If you discover a vulnerability or security issue, contact us at support@leafbookmarks.com.

9. International transfers

The providers we use may process data in other countries, including the United States or the European Union, depending on the service and its configuration.

By using Leaf Bookmarks, you understand that your data may be transferred to and processed outside your country of residence, in accordance with the applicable measures and contracts of each provider.

10. Changes to this policy

We may update this Privacy Policy when the product, the law, or our providers change. We will publish the updated version on this page with the corresponding date.

If the change is important, we will make reasonable efforts to notify you within the app or through other appropriate means.

11. Contact

For questions about privacy, security, personal data, or account deletion: support@leafbookmarks.com.