Leafward privacy policy

The short version

Leafward has no account, no advertising and no analytics. Your library stays on your device. We — the developer — do not receive your books, reading history, annotations or notes, and we do not operate a server that stores them.

Your library

Your imported books, covers, collections, reading positions, annotations, bookmarks, notes, reading statistics and preferences are stored on your device. Leafward uses them only to provide its reading and library features.

Optional iCloud features

If you unlock Pro and turn on iCloud Sync, Leafward uses Apple’s CloudKit to sync library records through the private database of your own iCloud account. Sync is off by default, and syncing book files is a separate setting that is also off by default. A container-specific account identifier and a random installation identifier keep sync records with the right account and device; they are not used for advertising or tracking.

Automatic backups can be saved to your iCloud Drive, to your device, or to a folder you choose. If iCloud Drive is unavailable, backups are kept on this device and the app shows where. Backups contain your library data and books. When you export or share a backup, you choose where it goes.

Apple provides iCloud under its own privacy policy. We never receive your iCloud password. Turning off sync stops future syncing; it does not delete your local library or records already stored in iCloud.

Servers and links you choose

When you connect to an OPDS catalogue or a Calibre server, Leafward requests catalogues and books directly from the server you selected. That server receives the requests, including your IP address and any sign-in details you provide. Web links and search services open the service you chose. These services have their own privacy policies. None of these requests pass through a server run by us.

Permissions

Leafward asks for local-network access when you connect to a book server on your network. Location is used only if you turn on automatic geotagging or add a location to an annotation or journal entry yourself; it is saved as part of that record, can be included in backups or enabled iCloud sync, and is never tracked in the background.

If you turn on the startup lock, Face ID or another system method is handled by Apple; Leafward never receives biometric data. Files, folders and fonts are accessed only through permissions you grant in the system file picker.

Purchases

Apple processes Leafward Pro purchases and payments. Leafward verifies the StoreKit transaction and stores the verified entitlement on your device so Pro works offline. We never receive your payment details. Family Sharing shares the purchase, not your library.

Your choices

You can read offline, leave sync off, pick where backups go, remove a saved location, export your data, or delete books and records. Recently deleted books can be recovered until you delete them permanently. Copies you exported to Files, another device or another service are managed separately. Deleting the app removes its local storage; backups you saved elsewhere may remain.

Children

Leafward is a general-audience app and does not knowingly collect any personal information from anyone, including children.

Contact and changes

Leafward is made by Quietworks, an independent developer. Questions about this policy: support@quietworks.app. If a future version uses data in a new way, we will update this policy before that version is released and note the change here.