Leaflet stores your plants, care schedules, care history, growth measurements, notes, and photos locally on your device. We do not collect, transmit, or store any of that on our servers. There is no account, login, or cloud sync; the only copy that leaves your device is the backup in your own iCloud Drive or Google Drive, described under Backups.
Your plants, care schedules, care history, growth measurements, and notes are stored in a local SQLite database on your device. This data never leaves your phone except in a backup: one you export yourself, or the automatic backup to your own iCloud Drive or Google Drive.
If you add a photo to a plant or a journal entry, the app accesses your camera or photo library only at the moment you choose an image. Photos you select are copied into the app's local storage on your device. They are never uploaded to us; they travel only inside your backups, described below.
Care reminders are scheduled locally on your device. No notification data is sent to any server, and you can decline or revoke the notification permission at any time in your system settings.
When you save a backup file, it is handed to the app or destination you choose through your device's share sheet. Where that file goes, and who can read it, is entirely under your control. Leaflet also backs up your journal automatically to your own cloud storage, so a new or reset device can bring it back. On iPhone and iPad the backup goes to the app's own folder in your iCloud Drive; it is not shown in the Files app. On Android it goes to a hidden app folder in your Google Drive, after you choose to back up and allow it on Google's own screen; the app asks only for access to that hidden folder, which it alone can read, and never to your other files or to your Google account details. Each backup is a single file holding your whole journal — your plants, care schedules, care history, growth measurements and notes — with its photos. Each backup also carries a small summary — the date, the app version, your device's name, a random code that tells your devices apart, and how many plants, journal entries and photos it holds — so the app can list your backups and show what is in them. The app keeps the three newest backups from each device and removes older ones. The backup travels from your device straight to Apple or Google; we never receive a copy, and it is stored under their privacy policies like your other files there. Restoring a backup replaces the journal on that device with the one in the backup. You can turn automatic backup off in Settings, which stops new backups. To delete the backups themselves, use iOS Settings → your name → iCloud → Manage Storage → Leaflet, or Google Drive → Settings → Manage apps → Leaflet → Delete hidden app data. Deleting the app does not delete these backups.
The pet safety notes on plant pages come from the ASPCA's lists of plants that are toxic and non-toxic to cats and dogs. The list is bundled inside the app, so looking a plant up sends nothing anywhere.
Leaflet uses Firebase Crashlytics to collect anonymous crash diagnostics (device model, OS version, and the technical state of the app at the moment of a crash). No personal information, plant data, notes, or photos are ever transmitted. Crash reports exist solely so we can fix defects.
Leaflet uses Google Analytics for Firebase to understand which features are used, so we can improve the app. It records anonymous, pseudonymous signals only — which screens you open, how often core features are used, the app version, your device model, and your coarse region (country level). It never records anything you type or photograph: not a plant, a care note, or a photo. In regions where consent is required (EEA, UK, Switzerland), your analytics consent is handled through the same consent form shown for advertising, which you can change at any time from Settings → Privacy options. Crash reporting, above, is separate and covered under our legitimate interest in keeping the app working.
From version 1.1.54, the free version shows a single banner advertisement. It appears on the plant list, the Tend list and a plant's page, and never as a full-screen ad. Versions 1.1.21 to 1.1.53 show no advertisements and contain no advertising software. Versions 1.0.20 and earlier showed a banner served by Google AdMob, which may collect device identifiers to serve ads, after asking for consent where the law requires it. Ads are served through Appodeal, an advertising mediation platform, and the ad networks it works with (including AppLovin, BidMachine, Digital Turbine, InMobi, ironSource, Liftoff, Mintegral, myTarget and Unity Ads). To choose, show and measure ads, they may collect your device's advertising identifier, your coarse location (derived from your IP address), your device type and operating system, and which ads you see and tap. None of your plants, care notes or photos is ever shared with them. Before any ad is requested, you are asked for your consent choices where the law requires it (for example in the EEA, the UK and Switzerland). On iPhone and iPad, Apple's tracking prompt then asks whether ads may use your activity across other companies' apps and websites. If you decline either, ads are still shown, but they are not personalised. You can change your consent choices at any time from Settings → Privacy options, and your tracking choice in your device's Settings. Appodeal's own policy is at https://appodeal.com/privacy-policy. Premium — the one-time unlock or the monthly subscription — removes advertising entirely: the ad software is not started at all.
The one-time Premium purchase is processed through Google Play (Android) or the Apple App Store (iOS). We do not handle or store any payment data directly.
All your data is yours. You can export it anytime from within the app, and deleting the app removes your plants, journal and photos from your device; backups in your own iCloud Drive or Google Drive stay until you delete them there. We have no central record of your data.
For questions or concerns, contact: admin@eritech.studio