Leaf privacy policy
Your reading stays yours.
Leaf is a reading planner for iPhone and Apple Watch, made by Norvo Designs. It has no accounts, no analytics, no ads, and no servers of its own.
Last updated October 25, 2026
- No accounts
- No analytics
- No ads
- No servers of our own
What Leaf stores
Your library (the books you add, your current page, ratings), your reading sessions, your reading speed, and your settings. They are kept on your iPhone, in the app’s own storage, and, while iCloud is on for Leaf, in your own private iCloud database under your Apple Account, so your other devices stay in step. Leaf has no access to that database; only your devices do.
A summary of today’s plan syncs directly to your paired Apple Watch over Apple’s WatchConnectivity framework. Nothing is uploaded anywhere else.
Book search
When you search for a book that isn’t in Leaf’s built-in catalog, the search text is sent to Open Library, a free, non-profit book catalog run by the Internet Archive, and cover images are loaded from it. The request contains only the search text, not your identity or your library. See Open Library’s own privacy policy for how they handle requests.
Scanning a book
When you add a book by its barcode, the ISBN is looked up in Leaf’s built-in catalog and, if it isn’t there, sent to Open Library in the same way.
Camera and photos
Leaf uses the camera only while you are looking at it: to scan a book’s barcode in Search, and to read a quote from the page you’re holding in a session note. The picture is read on your iPhone and never saved or sent.
Leaf asks to add to your photo library only when you save a quote card, and it cannot see the photos already there.
Apple Intelligence greetings
On an iPhone with Apple Intelligence, Leaf asks Apple’s on-device model to write the short greeting on Today (you can turn this off in Settings). This runs entirely on your iPhone. Nothing is sent to Leaf or anyone else.
Reading circles
Circles live in your library. If you choose to share a circle, Leaf uses iCloud sharing: only the people invited to it can see that circle. Whoever starts a circle, and anyone they make an admin, can invite people, take people out or delete the circle for everyone, and everyone else can leave it at any time.
The people in a circle see the name you give yourself there, your page in that circle’s book, and when your page moved over the last few weeks (for the standings). Nothing else from your library is shared.
Notifications
Daily reminders are scheduled locally on your device. They are not push notifications from a server.
Deleting your data
Settings › Erase all data removes everything from that device and its iCloud copy. Your other signed-in devices keep their own copy and may sync it back, so erase each one to remove your library everywhere.
Deleting the app removes the data from that device only; the iCloud copy stays and is restored if you install Leaf again. You can also remove it in iOS Settings › your name › iCloud › Manage Account Storage.
Children
Leaf collects no personal information from anyone, including children.
Contact
Questions about this policy: norvodesigns@gmail.com. Leaf is made by Norvo Designs.