Calmleaf Privacy Policy
[Operator] ("we") runs Calmleaf (the "Service"). We never ask for your name or phone number and process only what the Service needs.
1. What we process
| Category | Data | When |
|---|---|---|
| Anonymous account | A random user ID, a system-generated placeholder email (not yours), sign-in token and expiry, browser or device info (User-Agent) | Created automatically on first use |
| AI Daily Reset input | Today's mood score, the tags you picked, your optional one-line note, mood scores of the last 7 days, number of habits completed | When you ask for an AI reset |
| Usage records | Time, count and cost of AI/upload use; app events (opens, screens, feature use, paywall views, errors); app version, platform, random install and session IDs | While you use the service |
| Abuse prevention | A daily value that represents your network (a keyed one-way transform of the IP, never the IP) and that day's counts of new accounts, free uses, reports and sign-in links | On sign-up, free use, reports and sign-in links |
| Purchases | Product ID, subscription status (trial, active, expired…), trial and expiry dates, store transaction ID. Purchase notices we cannot match to an account are kept as received for up to 90 days. Apple and Google handle your card; we never receive it. | From the payment provider when you buy, renew, cancel or get a refund |
2. Why
- To create and keep your anonymous account and restore purchases
- To provide breathing exercises, guided sessions, mood check-ins, habit tracking and the AI Daily Reset (a breathing pattern and a small action for today)
- To enforce free, trial and paid limits and prevent abuse
- To improve the Service and fix errors (statistics)
3. Data that stays on your device
Mood logs, notes, habits, session history and reminder settings stay on the device. It is not sent to our server and is removed when you clear the app's or browser's data.
4. AI features
- Reset inputs can relate to your wellbeing, so they are used only to produce the reset, processed in server memory, never stored and never put in event or error logs. If the note shows signs of crisis, the server does not call the AI and shows hotline information first (we record only, and anonymously, that the guidance was shown, never the note). Before your first AI reset the app shows what is sent and where, and asks for your consent. If you decline, Calmleaf makes a simpler reset on your device and your mood and note don't leave it; you can change this anytime in Settings → "Make resets with AI". If you report an AI reset, only the reason you pick is sent, never your note or the reset itself.
- AI inputs are sent to our processors (OpenRouter and model providers) with zero-retention and no-training settings.
- AI inputs are never put in event or error logs.
5. Retention
- Account, purchase status, usage records and this Service's server data: deleted immediately when you use "Delete my data". Sign-in sessions expire after one year without use.
- Abuse-prevention values: deleted automatically after at most 2 days.
- Usage events: kept up to 1 year.
- Transaction records the law requires us to keep are kept for the legal period.
- How data is destroyed: when the retention period ends or you ask for deletion, we delete it without delay from our database and file storage so it cannot be restored. We keep no paper records.
6. Processors and international transfers
We use the processors below. Their servers are outside Korea, so data is transferred abroad over encrypted connections (HTTPS) when you use the Service.
| Recipient (contact) | Country | Data | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. (contact: dpo@cloudflare.com) | USA and data centers worldwide | Account, purchase/subscription state, usage records, this app's server-side data, requests in transit | Servers, database, file storage | Until account deletion or end of contract |
| OpenRouter, Inc. and the AI model providers it routes to (e.g. DeepSeek model hosts) (contact: privacy@openrouter.ai) | USA and others | AI feature input | Generating AI results | Deleted after processing (zero-retention setting) |
| Nest 22, Inc. (Superwall) (contact: compliance@superwall.com) | USA | User ID, purchased products and status, paywall views, device/app info | Paywalls and purchase status | Until end of contract |
| Apple Inc. (for the Korean App Store, Apple Services Pte. Ltd.) / Google LLC (contact: Apple privacyoffice_korea@apple.com · Google googlekrsupport@google.com) | USA, Singapore | Payment information | In-app purchases | Per each company's policy |
| Tinybird, Inc. (contact: legal@tinybird.co) | USA (data stored in the operator account's region: USA or EU) | Usage events | Usage statistics and error analysis | Up to 1 year from collection |
Legal basis: Article 28-8(1)(iii) of Korea's Personal Information Protection Act (outsourcing and storage needed to perform our contract with you, disclosed in this policy). When and how: each time you use the Service, over encrypted connections (HTTPS).
7. Your rights
- You can ask to access, correct, delete or stop the processing of your data at any time.
- "Delete all my data" in Settings deletes your account and server data immediately. Store subscriptions are not cancelled automatically: cancel them in your Apple or Google subscription settings.
- To ask for deletion without the app, email support@yhisoft.com with the "Support code" shown in Settings. We delete the account within 7 days of receiving your email (account and data deletion).
- For anything else, contact [Contact].
8. Children
The Service is not directed at children under 14 (under 13 in the US). They may use it only with a parent's consent.
9. Security
- HTTPS everywhere
- Sign-in tokens are kept in the iOS Keychain / Android Keystore
- Least-privilege server access and separately stored secrets
- Daily limits and rate limits per feature
10. Cookies and tracking
The app does not collect advertising identifiers (IDFA/GAID) and does not track you for ads.
11. Contact
Privacy contact: [Operator] · [Contact]
12. Changes
We announce changes in the Service or on this page at least 7 days before they apply (30 days for important changes).