Privacy Policy

Effective July 26, 2026 · Version 1.6 · privacy@leafcigars.fyi

1 Who we are

LEAF ("LEAF," "we," "us") is a single-player cigar journal for iPhone. This policy covers the LEAF app and this website, leafcigars.fyi. LEAF is offered in the United States. The company responsible for your information is LEAF, reachable at privacy@leafcigars.fyi.

2 Data we collect

Your information falls into two kinds, each handled differently:

1 · Your private journal

The cigars you log and everything you add to them: your rating, your written review, tasting-note tags, your own read of how strong and how full the cigar felt, an optional photo, the vitola, the places you type, and price. This is shown only to you.

2 · Cigars you add

A cigar you add is saved privately to your own journal first, visible only to you. Its objective facts (such as brand, line, wrapper, origin, and size) may later be reviewed by LEAF and added to the shared catalog. Your opinions and personal content never are.

In short: the product analytics we use to improve LEAF (see §5) are pseudonymous rather than anonymous: tied to a random identifier, never to your name, email, or Apple ID.

Your account. Sign in with Apple is the only way to sign in to LEAF. Apple gives us an account identifier and, on your first sign-in, may give us your name and an email address, which may be an Apple private relay address that hides your real one. We do not send your name or email address to our analytics provider. To confirm you meet the age requirement (see §4), we collect your date of birth once. It is stored to enforce the age gate and is not shown to anyone.

Usage & device. Unless you turn analytics off (see §5), we collect pseudonymous product-analytics events describing which features you use, plus basic app and device info and an approximate location (such as country) derived from your IP address. These are tied to an app-generated identifier or your account identifier, never to your name or email. The events describe actions rather than journal content, with one narrow exception: when you save a log, the tasting-note terms you selected from LEAF's fixed list may be included. Notes you type yourself are filtered out and never sent.

3 How we use it

Run your account and store your journal.
Maintain the shared cigar catalog (facts only).
Show catalog information and similar cigars from the catalog.
Confirm you meet the 21+ eligibility requirement.
Unless you opt out, understand which features are used, and diagnose errors, so we can improve LEAF.
Handle your requests, including data export, account deletion, and support.
Keep the service secure and comply with the law.

4 Age (21+) and your date of birth

LEAF is for adults 21 and older. This is a condition of using the service, not a tobacco sale. We collect your date of birth once, solely to confirm eligibility; it is enforced on our server and never displayed. We do not verify your identity, and LEAF does not sell tobacco or verify age on behalf of any retailer. LEAF is not directed to anyone under 21.

5 Analytics

We use PostHog (a US-based analytics provider) to understand product usage and to record app errors. It records actions, counts, and coarse error categories. It does not record your written review, notes you type yourself, the places you enter, price, your photos, your rating values (only whether you rated), your search text (only its length), your date of birth, your name or email address, or precise location. The identifier used is pseudonymous (an app or account identifier, not truly anonymous).

Analytics is on by default, and you can turn it off at any time in Settings → Privacy → "Share Usage Data." Your choice is remembered across launches, devices, and reinstalls.

6 Who we share with

Service providers who process data on our behalf, currently Supabase (database, authentication, and private photo storage; US), PostHog (analytics and error reporting; US), and Apple (Sign in with Apple). We may add or replace providers and will keep this policy current.
Legal & safety: when required by law, or to protect rights and safety.
A future owner, if LEAF is involved in a merger or acquisition.

We do not sell your personal information, and we do not use it for targeted advertising.

7 Your rights & choices

Access / export your data: Settings → Account → "Export my data" produces a copy of your profile and every log you have made.
Correct your account information, or delete your account and everything in it: Settings → Account → "Delete account." This permanently erases your account, every log, rating, tasting note, and photo. Deletion runs as a server-side job so it finishes even if you close the app; it cannot be undone.
Analytics: the toggle in Settings → Privacy, reversible anytime.

Depending on where you live, you may have additional rights under applicable privacy law — such as to access, correct, delete, or obtain a portable copy of your personal information. We do not discriminate against you for exercising them. To make a request, email privacy@leafcigars.fyi; we may need to verify your identity.

8 Security & retention

We use reasonable safeguards to protect your information, including encryption in transit. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

We keep your data while your account is active. When you delete your account, we delete your active account records, your journal content, and your stored photos; copies may remain briefly in encrypted backups until they expire on our ordinary cycle, and we may keep limited security, fraud-prevention, or legal records where reasonably necessary. A cigar you added that has not yet been reviewed into the shared catalog is deleted along with your account; only objective facts that were already added to the shared catalog remain there, and those do not identify you.

9 This website

leafcigars.fyi uses PostHog to count page views and basic interactions so we can see which pages are useful. It does not build a profile for anonymous visitors, we do not use it for advertising, and the site does not host accounts or journal data.

10 Children, changes & contact

LEAF is not intended for anyone under 21. LEAF is operated from the United States and your information is processed there. We may update this policy and will post the new effective date; material changes will be surfaced in the app. Questions or requests: privacy@leafcigars.fyi.