Privacy Policy
Unleaf is made by BILASSO LLC ("we", "us"). This policy explains what we collect, why, and what we never do. We've written it to be read, not skimmed — it's short on purpose.
What we collect
Account
Email address and a password (stored hashed by our authentication provider, Supabase). We use these to sign you in and to let you recover your account.
What you tell the app
Your onboarding answers (what you used, how much, how long, your quit date, your reasons), daily check-ins (mood, difficulty, cravings, sleep, symptoms, optional notes), pledges and plans, supplement check-offs, craving-mode outcomes, community posts, and messages you send to the Companion. This is the data the app is made of; it's stored in our database so it syncs to your account and survives a new phone.
What stays on your phone only
Your toolkit usage — which exercises you open, whether you said they helped, when cravings hit, and the patterns computed from them — is stored only on your device and never uploaded. The "Analyze" feature sends aggregate numbers only (counts, averages, short labels) to generate your written insight; it never sends journal text or raw logs.
Automatically
Standard server logs (IP address, device type, timestamps) for security and debugging, retained for 30 days.
Analytics and attribution
To understand how people find Unleaf and where the app can improve, we may use analytics and advertising-attribution partners (for example Meta, Google, or an attribution provider such as AppsFlyer or Adjust). These partners receive device-level identifiers and app events like "installed" or "subscribed." They never receive your check-ins, symptoms, journal, messages, pledges, community posts, or anything else about your recovery. Where the law requires, you can opt out of this tracking in your device's privacy settings (on iOS, "Ask App Not to Track").
How we use it
- To run the app: your timeline, streaks, check-ins, patterns, and companion.
- To generate Companion replies and Analyze insights. These are produced by Anthropic's Claude models. Your messages and aggregate stats are sent to Anthropic to generate a reply; Anthropic does not use API data to train its models.
- To send notifications you've enabled (reminders, PAWS warnings, milestones). You can turn these off any time.
- To email you. Account and safety emails (receipts, password resets, security notices) go to everyone. Recovery and marketing emails — check-in nudges, milestone notes, new features, offers — you can unsubscribe from in one click at the bottom of any email or in Settings. When you delete your account we keep only a one-way hash of your address, used solely to make sure we never email you again.
- To keep the community safe: posts reported by three people are hidden pending review.
What we don't do
- Sell your personal data.
- Give your recovery data — check-ins, symptoms, journal, messages, pledges, posts, craving logs — to advertisers, ad networks, or data brokers. It is used only to run Unleaf for you and to improve the app.
- Show your journal, symptoms, or messages to an accountability buddy — they see only the day count, pledges, and (if you choose full access) check-in counts.
- Store the content of messages flagged by our crisis-safety layer. We record that a flag occurred, not what was said.
Who we share with
Services needed to run Unleaf, each bound by its own privacy terms: Supabase (database & authentication), Railway (hosting), Anthropic (AI companion and insights), RevenueCat and Apple / Google (subscriptions — we never see your card number), Expo (push notification delivery), and the analytics/attribution partners described above. We may also share when required by law, to protect users' safety, or to enforce our terms.
Business transfers
If BILASSO LLC is involved in a merger, acquisition, financing, reorganization, or sale of some or all of its assets — or in negotiations for one — your information may be reviewed and transferred as part of that transaction. Whoever receives it must honor this policy (or one at least as protective), and we'll notify you in the app or by email before your data becomes subject to a different policy.
Your rights
- Export: email privacy@unleaf.app and we'll send your data within 30 days.
- Delete: Me → ⚙ → Delete account, or see how to delete your account. See "Retention" below for exactly what happens.
- Correct: most data can be edited in the app; anything else, email us.
If you're in the EU/UK, our legal basis is contract (running the app you signed up for) and consent (notifications, optional features). You can withdraw consent at any time. If you're in California, you have the rights above under the CCPA. We do not sell personal information. Device-level advertising attribution may count as "sharing" under the CCPA; you can opt out via your device's tracking settings or by emailing us.
Retention and deletion
While your account is open, we keep your data so the app works. When you delete your account, we de-identify it:
- Removed immediately: everything that identifies you — your name, email, username, login, push tokens, accountability-buddy contacts, and all free text (journal notes, companion messages, community posts, your written reasons and plans). Your exact quit date is reduced to the month. Your login is deleted and cannot be recovered.
- Kept, de-identified: the structured records of your recovery — check-in scores, pledge dates, craving waves and outcomes, exercise feedback, supplement check-offs, milestones — re-keyed to a random ID that no longer connects to any person. We use this data to understand what helps people quit and to improve Unleaf. It cannot be used to identify or contact you.
- Kept for safety: a one-way hash of your email (not the email itself) so we can recognize a previously deleted address for abuse prevention, plus community-moderation records and the fact that a crisis flag occurred — never the content.
- Kept by law: billing and subscription records, held mainly by Apple, Google, and RevenueCat for tax purposes, typically up to 7 years.
Copies in encrypted database backups expire within 30 days. Server logs are kept 30 days. Data stored only on your phone is removed when you uninstall the app.
Children
Unleaf is for adults. We don't knowingly collect data from anyone under 18. If you believe a minor has an account, email us and we'll delete it.
Security
Data is encrypted in transit (TLS) and at rest. Access to production data is limited to the people who need it to run the service. No system is perfect; if we ever have a breach affecting you, we'll tell you promptly.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top always reflects the current version.
Contact
BILASSO LLC · privacy@unleaf.app