Privacy Policy

Last updated: October 10, 2026

Leaf Bookmarks is an app for saving, organizing, and rediscovering web links. This Privacy Policy explains what information is handled when you use the app and this website, where it is stored, and what choices you have.

The short version: Leaf Bookmarks has no accounts and no servers that store your library. Your links live on your devices and in your own iCloud, and the AI features run on your device.

1. Who is responsible

Leaf Bookmarks is developed by Tomás Frechou.

  • Contact: support@leafbookmarks.com
  • Website: https://leafbookmarks.com

2. Your library stays with you

Everything you save in Leaf Bookmarks is stored on your device:

  • Link URLs, titles, descriptions, and notes.
  • Summaries and the text extracted from a page to produce them.
  • Thumbnails you choose.
  • Folders and tags.
  • Dates, read-later status, and how often you opened a link.
  • Technical data used for search (embeddings).

If you are signed in to iCloud, the app syncs this library across your devices through your private iCloud database, which is part of your Apple Account. We do not operate that database and we cannot read, access, or recover its contents. Apple handles it under its own privacy policy.

If you are not signed in to iCloud, your library stays only on that device.

We do not have a copy of your library. This also means we cannot restore it for you: if you delete the app and do not use iCloud, the data is gone.

3. AI features run on your device

Summaries, suggested tags, suggested folders, and search by meaning are computed on your device using Apple's on-device technologies (Apple Intelligence and the system language frameworks). Your links and their content are not sent to us or to an external AI service for this purpose.

Summaries are available on devices that support Apple Intelligence. How Apple Intelligence processes requests is governed by Apple's policies.

4. Network requests the app makes

To do its job, the app contacts the following from your device:

  • The pages you save. When you save a link, the app downloads that page to read its title, description, image, and text. The website receives a request from your device, as it would from a browser.
  • Images. Link thumbnails are loaded from the websites that host them. When a page has no image, the app may load the site icon from Google's favicon service, which receives the domain name of the link. Thumbnails for YouTube links are loaded from YouTube.
  • Apple. iCloud sync and purchases go through Apple.
  • Analytics. See the next section.

5. Product analytics

We use PostHog to understand how the app is used and to improve it. Analytics are limited and sent manually; we do not use autocapture, session replay, or screen recording.

Events are associated with an anonymous identifier generated on your device. They are not linked to your name, email, or Apple Account.

We do not send your content to analytics. This includes URLs, link titles, descriptions, summaries, notes, folder names, and tag names. When an event needs context, it uses neutral properties such as a source screen, a count, or a yes/no value. Examples: "a link was saved", "an import finished with 40 links".

Two more things are part of these analytics:

  • Approximate location. PostHog estimates a country and city from the IP address of the request. We do not collect precise location.
  • Ad attribution. If you installed the app after tapping an ad on the App Store, the app asks Apple once which campaign it came from (for example, a campaign and keyword identifier) and records it with your anonymous identifier. This uses Apple's privacy-preserving attribution; it does not track you across other apps or websites.

You can turn analytics off. In the app, go to Settings → Privacy and switch off "Share anonymous usage". From then on the app stops sending analytics events, including from the share sheet, and stops asking Apple for ad attribution. If you use iCloud, the choice applies to all your devices. When you switch it off, the app sends one last event that only records that sharing was turned off, so we can tell how many people opt out. You can switch it back on at any time.

6. Purchases

The free trial and the Leaf Lifetime purchase are processed by Apple through the App Store. We do not receive or store your payment details. The app reads your purchase status from the App Store on your device to know whether to unlock.

7. Search and Siri

If you use them, your saved links can appear in Spotlight and be used from Shortcuts and Siri. This index is created on your device by the operating system.

8. If you used Leaf Bookmarks before version 2.0

Earlier versions required an account and stored libraries on our servers (Supabase), with subscriptions managed through RevenueCat and optional AI features processed by external providers. Version 2.0 does not use any of these.

  • Moving your library. The app offers to import your earlier library into your device and iCloud. To do this it connects once to the previous service using your earlier session or a code sent to your email.
  • Transition period. Earlier accounts and their data are kept in read-only form for up to six months after the release of version 2.0 so that you can import them. After that period they are permanently deleted.
  • Earlier deletion. You can ask us to delete your earlier account and data at any time by writing to support@leafbookmarks.com from the email address of the account.

9. This website

This website does not require an account and does not use advertising trackers. We use privacy-friendly, aggregated analytics (Vercel Analytics) to count visits, and a preference cookie to remember your language.

If you write to us by email, we use your address and message only to reply.

10. Your choices and rights

  • Access and portability. You can export your whole library from the app at any time as a bookmarks file (HTML) or a full copy (JSON), including after a free trial has ended.
  • Deletion. Deleting links, folders, or tags removes them from your device and your iCloud. Deleting the app removes the local copy; you can remove the iCloud copy from your iCloud storage settings.
  • Analytics. You can turn off analytics in Settings → Privacy, and you can ask us to delete the analytics events associated with your anonymous identifier.

Depending on where you live, you may have additional rights over your personal data. Write to support@leafbookmarks.com and we will respond.

11. Children

Leaf Bookmarks is not directed to children under 13, and we do not knowingly collect personal information from them.

12. Security

Your library is protected by your device and by your Apple Account. Communication with external services uses encrypted connections. No system is completely secure; if you find a vulnerability, please write to support@leafbookmarks.com.

13. International transfers

The providers involved (Apple, PostHog, Vercel, and, during the transition period, Supabase) may process data in other countries, including the United States, under their own safeguards.

14. Changes to this policy

We may update this Privacy Policy when the product, the law, or our providers change. We will publish the updated version on this page with its date, and we will make reasonable efforts to notify you of important changes.

15. Contact

For questions about privacy or your data: support@leafbookmarks.com.