Privacy Policy

Effective July 13, 2026 · Version 1.1 · privacy@leafcigars.fyi

1 Who we are

LEAF ("LEAF," "we," "us") is a single-player cigar journal for iPhone. The data controller responsible for your information is LEAF, reachable at privacy@leafcigars.fyi.

2 The three kinds of data — and what we collect

Your information falls into three kinds, each handled differently:

1 · Your private journal

The cigars you log and everything you add to them — ratings, written reviews, tasting-note tags, an optional photo, the places you type, and price. This is yours, shown only to you.

2 · Facts you add to the shared catalog

If you add a cigar the catalog is missing, its objective facts (brand, line, wrapper, origin, size) become part of LEAF's shared catalog. Your opinions never do.

3 · Aggregate insights (only if you opt in)

De-identified, aggregate statistics drawn from ratings and logged cigars — see §6. Off by default.

Your account. When you sign in with Apple, we receive your name and an email address — which may be an Apple private relay address that hides your real one. To confirm you're old enough (see §4), we collect your date of birth once; it's stored to enforce the age gate and never shown to anyone.

Usage & device. With your consent (see §5), pseudonymous product-analytics events describing which features you use — never your journal content — plus basic app/device info and a coarse country derived from your IP address. These are tied to an app-generated identifier, not to your name or the content of your journal.

3 How we use it

Run your account and store your journal.
Maintain the shared cigar catalog (facts only).
Confirm you meet the 21+ eligibility requirement.
With your consent, understand which features are used so we can improve LEAF.
With your consent, build the aggregate "Cigar Insights" described in §6.
Keep the service secure and comply with the law.

4 Age (21+) and your date of birth

LEAF is for adults 21 and older — a condition of using the service, not a tobacco sale. We collect your date of birth once, solely to confirm eligibility; it is enforced on our server and never displayed. LEAF does not sell tobacco or verify age on behalf of any retailer, and is not directed to anyone under 21.

5 Analytics and your consent

We use PostHog (a US-based analytics provider) to understand product usage. It is content-free by design: it records actions and counts, never your written reviews, your rating values, your photos, or precise locations. The identifier used is pseudonymous — an app/account identifier, not truly anonymous — but it is never linked to the content of your journal.

Analytics is on by default, and you can turn it off anytime in Settings → Privacy → "Share usage data."

6 Aggregate "Cigar Insights"

If you turn on "Share cigar insights" (off by default), we create de-identified, aggregate statistics from ratings and the cigars people log — for example, a cigar's average rating, or how often a line is logged in a given city. This is aggregated to city level at most and does not identify you individually. We may share or sell it to partners in the cigar industry for their own market research.

We never share your written reviews, your photos, your individual logs, or your precise location. Because it is de-identified and aggregated, this information is not your personal information. Before releasing any statistic we remove direct identifiers, exclude reviews and photos, limit geographic precision to city, and suppress results drawn from a small number of users, so that individuals cannot reasonably be singled out. You can turn this on or off anytime in Settings, and it is separate from the analytics choice in §5.

7 Who we share with

Service providers who process data on our behalf: Supabase (database, authentication, and private photo storage; US), PostHog (analytics; US), and Apple (Sign in with Apple).
Cigar-industry partners, only the de-identified aggregate insights of §6, and only with your opt-in.
Legal & safety: when required by law, or to protect rights and safety.
A future owner, if LEAF is involved in a merger or acquisition.

We do not sell your personal, identifiable information. The only information we sell is the de-identified, aggregate data described in §6 — which is not personal information — and we still offer the "Share cigar insights" toggle as a way to opt out of it. Because we sell only aggregate, de-identified information about our own users (never individual records), we do not act as a "data broker" under state data-broker registration laws; if that ever changed, we would register as required.

8 Your rights & choices

Access / export your data — Settings → Account → "Export my data."
Correct your account information, or delete your account and everything in it — Settings → Account. Deletion is permanent.
Analytics & insights — the two toggles in Settings → Privacy, reversible anytime.

US state privacy rights. If you live in a US state with a comprehensive consumer-privacy law — including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, and others as they take effect — you have the right to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the "sale" or "sharing" of your personal information and of targeted advertising and certain profiling. We do not discriminate against you for exercising these rights.

Opt out of sale/sharing: use the "Share cigar insights" toggle in Settings, or email privacy@leafcigars.fyi. We also honor recognized browser/device universal opt-out preference signals, such as Global Privacy Control (GPC), as a request to opt out of sale/sharing where the law requires.

To exercise any right, email privacy@leafcigars.fyi; we may need to verify your identity.

9 Security & retention

Data is encrypted in transit. Every record is protected by row-level security that scopes it to your account, and your photos live in private, per-user storage that no other user can read. No system is perfectly secure, but we work to protect your information.

We keep your data while your account is active. When you delete your account, we delete your active account records and journal content; copies may remain briefly in encrypted backups until they expire on our ordinary cycle, and we may keep limited security, fraud-prevention, or legal records where reasonably necessary. De-identified aggregate statistics, which do not identify you, may persist after deletion.

10 Children, changes & contact

LEAF is not intended for anyone under 21. LEAF is operated from the United States and your information is processed there. We may update this policy and will post the new effective date; material changes will be surfaced in the app. Questions or requests: privacy@leafcigars.fyi.