Privacy Policy
Leafday — the diary app and monthly printed kit. Last updated 2 November 2026.
Leafday is a private diary. Most of what you put in it is the most personal thing you own, and this policy is written to be read rather than to cover us. If anything here is unclear, ask: support@leafday.ca.
Who we are
Leafday is operated by Taeyeon Kim, a sole proprietor in Ontario, Canada. Contact: support@leafday.ca.
What we collect, and why
| What | Why |
|---|---|
| Your email address, and your name if your sign-in provider supplies it (with Sign in with Apple this can be a private relay address that Apple makes for you) | To create and sign you into your account |
| Your diary entries — text, photos and videos you capture | They are the product. They are stored so you can read them back and so your pages can be printed |
| Albums you make (Leafday) | A title you type and the list of days you chose, kept in your account (Firestore, Montreal). Only you can see them; friends never can. They are deleted with your account and are in your data export (albums.json) |
| Your shipping address, for the kit | Only if you subscribe to the bundle. To post your binder and pages |
| Your subscription status | To know what to send you and what the app should unlock |
| Whether you asked to be told when the printed kit opens | Only if you tap the button in Settings → Subscription. We keep that request with your account, and use your account email once, to tell you. It is erased with the rest when you delete the account, and you can take yourself off the list in the same place |
| App preferences (theme, font) | So the app looks the same on your next device |
| A nickname, if you use Friends | So your friends know who a story is from. You choose it, it is never your account name or your email address, and your friends can see it |
| A profile photo, if you choose one (Friends) | A small 160x160 picture cut from a photo you pick from your library, so friends recognise you. It is stored in your friends profile (Firestore, Montreal) beside your nickname. Only you and your friends can see it. Removing a friend or blocking someone stops them seeing it. You can change or remove it in Settings. It is deleted with your account. It is not in your data export |
| Your friends, your besties and the people you have blocked, if you use Friends | So a story reaches only the people you chose, and never someone you blocked. Friends are added with a code you send them yourself; there is no search, and Leafday does not ask to see your contacts. See Friends and stories below |
| Stories you post, if you post any | A story is one picture of a day's photograph side, shown to the people you chose for 3 days and then deleted. We also keep who it was shown to. See Friends and stories below |
| Who you tag in a story, if you tag anyone | So the friends you tag can post that page to their own story, and so each of you gets a copy in your Friends book. Which friend you tagged on which day is kept after the story is gone, and only you can see it |
| Your Friends book, if a story you posted or were tagged in has put pages in it | Copies of pages, kept as pictures in your account until you remove them. See The Friends book below |
| A report, if you report a story | So we can look into it. It holds the reason you chose, which story and which accounts it is about, the date, and a copy of that one picture, so that we can see it after the story has gone. See Reports, blocking and what we do and How long we keep it below |
| Crash reports | To find and fix bugs. Release builds only; these are diagnostics, never your diary content |
| Technical logs | Our servers, which run on Google Cloud, log the requests the app makes to our functions: the time, which function, whether it worked, any error, and the network address it came from. They hold no photographs and no diary text. Google keeps them for 30 days unless we change that |
We do not sell your data, we do not share it with advertisers, and there is no advertising or tracking SDK in the app.
We count totals - how many accounts exist, and how many were active in the last day, week and month - once a day on our server, from the sign-in times Firebase already keeps for each account. The totals contain no names, ids or content, and nothing about any person is kept from the count. The app itself sends us no usage events, and it has no analytics or tracking SDK.
Where it is stored
Your entries, photos and videos are held in Google Firebase (Firestore and Cloud Storage) in the northamerica-northeast1 region — Montreal, Canada. Both the written and the photographic halves of your diary are in the same country; nothing is split across borders. Friends, stories and the Friends book are kept in the same place, and the servers that handle them are in Montreal too.
That is about where your diary and your Friends data are stored. The services named under Who else sees anything below (sign-in, crash reports, payments and shipping) run under their own terms and are not limited to Montreal. Our older server functions, for the kit and its payments, are not in Montreal.
Speech-to-text
No recording is ever kept. When you dictate on the written side of a page, your phone's own speech recogniser turns speech into text. Depending on your device, that recogniser may send audio to Apple or Google to be transcribed — that is your operating system's behaviour, not ours. We receive only the finished text, and it becomes ordinary text in your entry. No audio file is saved, uploaded, or referenced anywhere by Leafday.
Camera and photos
In the app you take a photo with Leafday's own camera, or choose one from your photo library; either goes into that day's entry. To fill in a day that has passed, Leafday lists the photos in your library that were taken on that day. That listing happens on your phone only, and nothing from your library leaves it except the photos you place in the diary.
Friends and stories
Friends is optional. It is the one place where something from your diary can reach another person who uses Leafday, so it is spelled out here. Nothing is posted until you choose to post it. There is no public feed, no search, no list of members and no advertising.
- How friends are added. With an 8-character code that you send in a message yourself. A code works once and stops working after 24 hours. Nobody can find you, or send you a request you did not ask for.
- What a friend can see. Your nickname, and each story you post to them. A story is one picture of a day's photograph side as it looks on the page: the photographs, with anything written or drawn on them (captions, times, marks), and the week's calendar with the day marked. You can post any day, including an old one.
- What a friend cannot see. Your email address, your account name, your address, the written side of any page, or any day you did not post. Friends cannot comment on a story. They can react with one of five small icons, and only the person who posted the story can see who reacted. Leafday does not tell you who looked at it.
- Who sees a story. When you post, you choose: all of your friends, your besties only, or only the friends you tag. A story for all of your friends is also shown to a friend you add while it is still up, and a story for your besties to a friend you make a bestie while it is still up; a story for only the friends you tag is never shown to anybody else. A friend you remove or block is taken off your stories that are still up.
- Besties. Your besties are a list you keep of the friends you want to show some stories to and not others. It is one-way: you choose who is on it, and a friend does not have to put you on theirs.
- For how long. A story is shown for 3 days (72 hours) from the moment you post it, then deleted. The app stops showing it at once, and the picture and its record are deleted from our servers within about 15 minutes after that. You can take a story down at any time, and posting a day again replaces the earlier picture. Changing a day after you posted it does not change a story that is already up. The exceptions are a copy kept in a Friends book (see The Friends book) and a story that was reported (see How long we keep it).
- Tagging. When you post a story you can tag up to 10 of your friends; the app tells you first that tagged friends can post the page to their own story. Each tagged friend also gets a copy of the page in their Friends book. When you tag a friend in a story, we keep a record of the day and the friend's account id in your own account, so that you can later find those days in an album. Only you can see this record, and it is deleted with your account.
- Re-sharing. If a story was posted to all of your friends, a tagged friend can post the page to their own story, once. The page then appears in their story and is seen by their friends, including people who are not your friends. They see your nickname, copied at that moment, and nothing else about you. It is shown for no longer than your story has left, and never beyond 72 hours from when you posted. Anyone you have blocked, or who has blocked you, is left out when it is re-shared. A tagged friend can also decline the tag, which takes down their re-share of it. A tagged friend finds out through a notification, if they have those turned on (see Notifications below), or by opening the app. A story posted to besties only, or only to the friends you tag, cannot be re-shared.
- When your story goes, its re-shares go. If your story is taken down, replaced by posting the day again, expires, is removed after a report, or you delete your account, every re-share of it goes too. Taking down a re-share never deletes your story. (A copy in a Friends book is different: see below.)
- Notifications. Leafday can send a notification when a friend tags you in a story, reacts to your story, or joins through your invite code, and, if you turn it on, when a friend posts a story. A notification holds the friend's nickname and one short sentence; it never holds a photograph, diary text or a date. Each kind has its own switch in Settings, and we ask before turning any of them on. To send them we keep a token for your device; it is deleted when you sign out or delete your account. The reminders to write (morning and evening, and "a page from a past year") are made on your phone and are not sent from our servers.
- Screenshots. Leafday cannot stop anyone who can see a story from taking a screenshot of it, or photographing their screen. Add and tag only people you would show the page to.
The Friends book
When you post a story and tag friends, you and each friend you tag are given a copy of that page. A copy is kept in the Friends book on your shelf, as two pictures of the same page: one the shape of a story, one the shape of a print. It is the page only, never the written side.
- A copy belongs to the account that holds it. It stays in that person's Friends book until they remove it or delete their account. It is not a link: it does not depend on the story it came from.
- If you tag someone. Taking your story down, deleting the day, or deleting your account does not remove the copy in their Friends book. Tag only people you are happy to give the page to.
- If you are tagged. You see the copy as from the poster's nickname, as it was when they posted, or as from "a friend who left" if their account has been deleted. You can remove it from your Friends book at any time; that removes only your copy.
- Your account. Deleting your account deletes your whole Friends book, including the copies of other people's pages in it.
- When we may remove a copy. If a copy breaks the rules in our terms, we may remove it from the book that holds it. If a copy of one of your pages in someone else's Friends book harms you, write to us and we will look at it as we would a report.
Reports, blocking and what we do
- To report a story. Open it, tap the three dots at the top right, tap Report, and choose a reason: Inappropriate, Harassment, Spam or Something else.
- To block someone. In the same menu choose Block, or on the Friends page tap the three dots beside a friend and choose Block. Blocking ends the friendship, and the two of you cannot add each other again unless you unblock them from the list of blocked people on the Friends page. Nothing tells the person they were blocked.
- What we do with a report. When a story is reported, we keep a copy of its picture so that we can look at it after the story has gone. We read every report ourselves and look at that picture, whoever the story was shown to, including a besties-only or tagged-only story. Leafday is run by one person, who has technical access to everything it stores; apart from a report, we look at a page of your diary only when you ask us to, or when it is printed for you.
- How quickly. We aim to look at every report within 72 hours.
- What can follow. If a story breaks the rules in our terms, we take it down (and with it any re-share), and we may warn the person, remove a copy from a Friends book, or close the account.
- Who is told. We do not tell the person you reported that it was you. The screen we use to review reports shows the reason, the date of the page and the picture, not who reported it; the report itself holds the account IDs of the person who reported and the person reported.
- Anything else. If something worries you and the buttons do not cover it, write to support@leafday.ca.
Who else sees anything
- Your friends — only if you use Friends, and only your nickname and the pages you choose to show them (see Friends and stories and The Friends book). If you tag a friend, that friend's friends can see the page too once the friend posts it on, and the friend keeps a copy.
- Google Firebase — hosts the database, files and sign-in. Google processes this on our behalf.
- Google / Apple sign-in — if you use them to sign in, they confirm your identity to us. They do not receive your diary.
- A payment processor — for subscriptions. They handle your card; we never see or store card numbers.
- A shipping carrier — receives your name and address to deliver the parcel, and nothing else.
- Tally — the waitlist form on leafday.ca. If you leave an email address there before the app opens, Tally holds it until we write to you. Nothing from inside the app goes to them.
Your diary content is never sent to any of them beyond what is listed here, and the printed pages are produced by us, not by a third-party printer.
How long we keep it
Your entries stay until you delete them or delete your account. Deleted media sits in a short grace window before it is purged, so that one accidental tap does not destroy real footage.
A story is deleted 3 days after you post it, or when you take it down. Your nickname, friends, besties and blocks are kept until you change them or delete your account, and deleting your account deletes them, and any story you have up, with the rest.
The daily totals (a handful of numbers a day, with no information about anyone) are kept for as long as we run Leafday. Deleting your account does not change totals already counted.
A re-share of your story is deleted when your story is, and in any case no later than 72 hours after you posted. The record of which friends you tagged on which day is kept after the story is gone. Only you can see it. It is deleted when you delete your account, and a friend who declines a tag is taken out of it.
A Friends book copy is kept until the person whose book holds it removes it or deletes their account. That does not depend on the person who posted the page: if they take the story down, delete the day or delete their account, the copy stays. We may remove a copy that breaks our rules (see The Friends book).
When a friend reports a story, we keep a copy of that picture so that we can look at it after the story has gone. We keep the copy while the report is open, and delete it 90 days after we close the report, which we do by taking the story down or by deciding that it is fine. The record of the report stays after that, with no end date: the reason, the dates, and the IDs of the story and of the accounts involved, but no picture. It is a record of a complaint made to us, not part of your diary, and we keep it so that we can recognise a person who is reported again and again. Deleting your account does not delete a report, or the copy kept for it.
After you delete your account, records of payments and shipments are kept for as long as Canadian tax and business law requires (currently six years). Those are billing records — an order date, an amount, an address on a past shipment. They never include the contents of your diary, your photos or your videos.
Your choices
- Take it with you. Settings → Legal, your data & account → Export my data saves every entry and photo as a zip file. (Earlier versions of the app: Settings → Export my data.) The zip is your diary; it does not include your friends, besties or Friends book. For those, write to us.
- Delete everything. Settings → Legal, your data & account → Delete account (earlier versions: Settings → Delete account) erases it permanently and immediately. There is no grace period and nothing can be restored afterwards, so export first if you want a copy. If you signed in with Apple, deleting the account in the app also ends Leafday's access to your Apple sign-in. Full detail, including how to ask if you cannot open the app: leafday.ca/delete-account.
- Take back a single thing. You can take a story down, remove a friend or a besty, unblock someone, or remove a copy from your Friends book, without deleting anything else.
You may also ask us what we hold about you, or ask us to correct it, by writing to support@leafday.ca.
Children
Leafday is for people aged 13 or over. If you are under 18, please use it only with the permission of a parent or guardian. It is not directed at children under 13 and we do not knowingly collect their information. If you believe a child under 13 has created an account, write to us and we will delete it.
Changes
If this policy changes in a way that affects what we do with your information, we will say so in the app before the change takes effect. The date at the top always shows the current version.
The rules for using Leafday and Friends, what you pay, when your card is charged and which month your first kit is: terms.