App privacy policy

Who is responsible

The Leeway app is run by Tanel Petelot, in France. Contact: privacy@joinleeway.app.

This policy covers the Leeway iPhone app, including its test versions on TestFlight. The website and the waitlist have their own policy.

Where your journal is kept

Your entries, their recordings, transcripts, scores, maps, your own ratings, intentions and settings are stored on your iPhone. There is no account.

If you are signed in to iCloud, the journal is also kept in your own private iCloud database, run by Apple, so your devices stay up to date and a new iPhone gets your journal back. We cannot read that copy. Without iCloud, the journal is only on your iPhone: if you delete the app, you delete the journal, unless you exported it first.

Export, in Settings, makes a readable PDF and an archive of your journal and recordings that you keep wherever you choose. Import brings an archive back.

What the app sends, and why

• Each entry you finish: its recording, or the text you wrote, with the question you answered and the emotions you chose to follow.
• While you record or write, what you have said or written so far, so the path on screen can follow you.
• To write the title and the reflection of an entry: its transcript and its scores, with short notes on your earlier entries of the same day.
• To suggest one idea for tomorrow: today's entries, your current intention, and a short history of past ideas and whether they helped.

Leeway asks for your permission before it sends anything, the first time you open it. Without it, the app cannot read your entries and cannot be used. With it, the app sends:

Who reads it

• The Leeway server, hosted by Vercel, Inc. in the United States. It passes your entry to Gemini and returns the result. It stores none of it and logs no content: each request leaves one technical line (request number, address called, status, duration, amount of text processed), and Vercel records technical data such as IP addresses, both kept for a short time to run and protect the service.
• Google's Gemini API, paid service, under Google's Gemini API terms and data processing terms. Google does not use your entries to train its models. It logs requests for a limited period, only to detect and prevent abuse of its service.
• Apple, if you test the app on TestFlight: the crash reports and feedback you choose to send go through Apple, under Apple's privacy policy.
• Apple, if iCloud is on: your journal syncs to your own private iCloud database under Apple's iCloud terms. Apple runs it for you; we have no access to it.

No one else. Everything travels encrypted (HTTPS). We never sell your data, share it for advertising or use it to profile you.

What the app does not do

• No tracking across apps or websites, no advertising, no analytics tools, no third-party code that collects data.
• No contacts, location, photos or health records. The microphone is used only while you record an entry.

Your permission, and how to withdraw it

You give your permission when you first open the app, before anything is sent. You can withdraw it at any time in Settings, Privacy: from then on, nothing more is sent, and the app asks again before it can be used. Your journal stays where it is. If what the app sends changes, it asks for your permission again before sending anything.

How long anything is kept

• On your iPhone and in your iCloud: until you delete it. A deleted entry stays 30 days in Recently deleted, then is erased with its recording. Delete all data in Settings erases everything at once, the copy in your iCloud included.
• On the Leeway server: nothing of your entries is kept.
• At Google: a limited period for abuse monitoring, as set by Google's terms.

Your rights

Since your journal is only on your devices and in your own iCloud, you can see it, export it and delete it from the app at any time. For any question, or to exercise a right, write to privacy@joinleeway.app. We answer within one month.

In the United States: what you record may be consumer health data under laws such as Washington's My Health My Data Act. We collect it only to provide the reading you ask for, with your consent, share it only with the processors named above, and never sell it.

In the European Union and the United Kingdom, you also have the rights given by the GDPR, and you can complain to the CNIL or to your local data protection authority.

Age

Leeway is for people 18 and older.

What Leeway is not

Leeway is a wellness journal, not a medical device and not a treatment. Its scores are estimates of what you said, never a diagnosis. If you are going through a hard time, please reach out to someone who can help: in the US, call or text 988.

Changes

If this policy changes, we will update this page and its date. If a change affects what the app sends, the app will ask for your permission again.