Effective September 1, 2026

Privacy Policy

The Leaf Message operator (“we”) processes only the information needed for the service. We do not sell data, serve targeted advertising, or track you across services.

Information we process

• Account: your chosen nickname and random user/session identifiers.
• Connections and messages: invite digest and redemption state, connection IDs, notes up to 40 characters, selected appearance, and server timestamps.
• Widget operation: hashed installation credential, Widget Push token, selected connection, and app/OS version. Message text is never placed in the APNs payload.
• Support and safety: feedback category and text, reported connection/message IDs and reason, and block records. Reports do not duplicate message text.
• Other service data: the Terms version you accepted (2026-09-01) and the server-recorded acceptance timestamp. We link these values to your account to prove affirmative agreement before signup and identify the Terms that apply.
• Operations: request ID, API path, random user ID, status, and latency. Cloudflare may process network data for delivery, security, and rate limiting; our database stores a keyed irreversible rate-limit digest rather than the raw IP address.

Purposes

We use this data only to provide accounts, connections, messaging and widgets; prevent duplicate sends and abuse; recover errors; review reports; and provide support.

Retention and deletion

Deleting your account in Settings removes its related service data, including feedback and reports, except where safety or law requires limited retention. APNs delivery records contain no message body and are removed when no longer operationally necessary.

Processors

Cloudflare Workers and D1 provide the API and storage. Apple APNs processes content-free Widget update signals. We do not use the data for tracking or advertising.

Home Screen visibility

A widget may show a selected person's nickname and latest note on an unlocked Home Screen. Anyone who can see the device may see that content.

Your choices and contact

You can rename or delete your account in Settings. For access, deletion, safety, or privacy requests, email support@hiorio.com.