Privacy
Last updated September 14, 2026. LeafKit is made by IQ Innovation. Questions: hello@leafkithq.com.
The short version
The tools work without an account and keep your work in your browser. If you sign in, your documents sync to your account encrypted on your device with a recovery key that only you hold, so we cannot read them. We keep your email, your plan, and what Stripe tells us about your payments. We do not sell data and we do not run advertising trackers on our pages.
What we collect
Without an account: nothing personal. Your documents stay in this browser. We use Vercel Web Analytics, which counts page views without cookies or personal identifiers. We also record usage events, for example that a document was printed, with a random id your browser keeps (no cookie) so we can tell a returning visitor from a new one, the page you came from, your IP address and the coarse location it maps to (city and country), and your device type, kept for up to three years. Never any document content. If you are signed in on a free account, these events are linked to your account so we can support you. Signed-in accounts choose this under Manage Account ("Usage details"): on by default for free accounts, off by default for Pro and Plus, and you can flip it either way. When it is off we keep only the anonymous daily totals, no visitor record, IP, location or print summary. Separately, on the free plan a copy of each document you print is sent to us as an example of how the tools are used ("Share my documents as examples"). It is stored encrypted, opened only by the LeafKit team, and deleted after 90 days. Sign in and switch it off under Manage Account if you would rather not; Pro and Plus never send copies unless you turn it on.
With an account: your email address (used to sign you in with a link and to send the emails described below), the time you last signed in, the devices you sign in from (a name like "Chrome on Windows" and a device cookie, so you can remove one from your account page), your plan, and your synced documents. Synced documents are encrypted on your device before they leave it. We store the ciphertext and cannot read it.
If you pay: Stripe handles the card. We store what Stripe gives us: the card brand and last four digits, the billing name and address, invoices and receipts, and the subscription status. We never see or store the full card number.
If you buy a printable kit: the email you gave at checkout, the order, and the download link we sent.
Emails
Sign-in links, receipts, and billing notices are sent because you asked for them or because your account needs them. Occasional tips and offers are sent to account holders and carry an unsubscribe link in every message; we track clicks on those to see which are useful. We send email through Resend.
Cookies
A session cookie keeps you signed in, a device cookie identifies this device in your device list, and a theme cookie remembers light or dark mode across our sites. That is all. No advertising or cross-site tracking cookies.
How long we keep it
A free account and its synced documents are deleted after 30 days without a sign-in; we send a reminder after a week of quiet and again three days before. Paid accounts are kept while the subscription is active and follow the same rule after it ends. You can delete your account and everything in it at any time from the account page. Payment records are kept as long as tax law requires.
Who else sees data
Only the services that run LeafKit: Vercel (hosting and analytics), Upstash (the database, encrypted at rest), Stripe (payments), and Resend (email). Each processes data on our behalf under its own terms. We share nothing with advertisers or data brokers. We disclose data only if the law requires it.
Your rights
You can export your data and delete your account from the account page. For anything else, including access or correction requests under GDPR, UK GDPR, or CCPA, email hello@leafkithq.com and we will answer within 30 days. LeafKit is not directed at children under 13 and we do not knowingly collect their data.