Leaf Privacy Policy

Account and user data

We process your email address and account identifier to create and authenticate your Leaf account. If you use sync, projects, ideas, mind maps, notes, tasks, and related change history are processed on our servers.

Subscription and purchase information

To verify Leaf Plus access, restore purchases, and resolve errors, we use product and transaction identifiers, account-linking information, subscription status, and related processing timestamps. Payments are handled through Apple’s in-app purchase system. Neurinlab does not directly collect payment details such as card numbers.

Email and customer support

Authentication emails use your email address and message content such as authentication or password-reset links. Customer support uses your email address, inquiry, and any attachments you provide.

Leaf uses Supabase for account authentication, data storage and synchronization, and subscription entitlement verification. Its primary database is located in the Seoul, Republic of Korea region. Apple iCloud Mail is used to send authentication and password-reset emails and to handle customer inquiries. Subscription payments are processed through Apple’s in-app purchase system.

Account-linked data

When account deletion is completed successfully, we delete user-created server data, sync history, Leaf entitlements, and account-specific recovery copies linked to that account.

Apple subscription notification records

These records are retained for 90 days from receipt and cleaned up daily. They may contain transaction identifiers and are managed separately from account deletion. The same retention period applies to Apple notifications received after account deletion.

Purchase error diagnostics

These records are retained for 30 days and cleaned up daily. They contain only the feature category, error category, numeric response code, and timestamp. Passwords, authentication tokens, user-created content, and original receipts are not stored in these diagnostic records.

Temporary database recovery copies

Temporary recovery copies are retained for seven days from creation and cleaned up daily.

Support messages, replies, and attachments

These are reviewed monthly and deleted from the trash one year after the inquiry is resolved. Monthly review may result in up to one additional month of retention.

Sync records

Sync request and change history and conflict records are retained for 90 days. Device sync records are retained for one year after the device’s last activity. Cleanup occurs during relevant sync or conflict processing, so records may remain until the next such event. Sync records linked to the account are deleted when the account is deleted.

Items cleaned up daily may remain for up to one additional day after their retention period.

These retention periods apply to records managed directly by Neurinlab and are separate from operational logs and infrastructure backups managed independently by external service providers.

You can delete your account in Leaf’s account settings after confirming your password. Once deletion is completed, the authentication account, server data, sync history, and Leaf entitlements linked to the account are deleted.

Leaf also clears local data and cache on the device used to delete the account. This does not immediately remove exported files or data on other devices that remain offline.

Deleting your Leaf account or the app does not automatically cancel or refund an Apple subscription. To stop renewal, cancel the subscription separately in your Apple account’s subscription settings.

If you need help deleting your account, contact dev@neurinlab.com.

You may request access to, correction or deletion of, or restriction of processing for your personal information. Use the data-management or account-deletion features in Leaf, or contact dev@neurinlab.com.

After confirming your identity and the scope of your request, we will process it under applicable law and inform you of the outcome. If applicable law prevents us from fulfilling all or part of a request, we will explain why.

Leaf restricts access to server data to authenticated accounts and applies account-level access controls. When an account is deleted, the server verifies the current session and recent password authentication and removes login sessions linked to the account.

Leaf does not use user data for third-party advertising or tracking.

Send privacy questions and requests to exercise your rights through the following channels.

• Operator: Neurinlab
• Email: dev@neurinlab.com
• Support: https://www.neurinlab.com/en/leaf/support/

If we update this policy because our processing practices or applicable laws change, we will publish the revised terms and effective date on this page. Changes that require additional notice or consent will follow the procedures required by applicable law.