Privacy Policy
Last updated 13 August 2026
This policy explains what Leora does with your information. It is written to be read, not to be survived.
Your private content stays on your device
Everything personal you put into Leora is stored only on your phone:
- What you write – your affirmations, notes, intentions, and the goal you are calling in
- What you draw – every drawing you make, on every day
- Your photos – anything you add to a moodboard, whether chosen from your library or taken with the camera
- Your voice – the recordings you leave for your future self, and the messages you seal until a date you choose
- Your subliminals – which ones you have, the words in them, and any you have made your own
- How you listen – favourites, listening history, chosen focus areas, and the background sounds you prefer
There is no Leora account and no server of ours, and none of it is synced anywhere – so there is nowhere for any of this to be sent, and no way for us to read it. It is protected by iOS along with the rest of your phone, and deleting the app deletes all of it.
One small technical exception, which is not your content: the random ID described below is kept in your device's keychain so that it survives reinstalling the app, and iOS carries it to your other devices through iCloud Keychain. That is what lets a subscription you have paid for follow you to your iPad without an account. It is an opaque string, it is stored end-to-end encrypted by Apple, and it tells us nothing about you.
What is shared, and with whom
Running a paid app means a few things have to leave the device. Each is listed here.
| Who | What | Why |
|---|---|---|
| RevenueCat | A random anonymous ID, your purchase receipt, subscription status, and basic device information (model, OS version, country) | To check with Apple that your subscription is valid and keep it active across your devices |
| Superwall | A random anonymous ID, basic device information and language, and which paywall you were shown | To display the subscription screen and measure which version works better |
| PostHog | Anonymous usage events – which screens you reached, which features you used, and how long a step took. Never anything you wrote | To see where the app confuses people, so it can be fixed |
| Apple | Your purchase, and – only if you have opted in under iOS privacy settings – aggregated crash and performance data | To take payment and to help us fix crashes |
The IDs used by RevenueCat and Superwall are random and generated on your device. They are not your name, your email or Apple's advertising identifier, and they are not linked to your identity.
How the app is used
Leora counts a small number of anonymous events – that a screen was reached, that a subliminal was played, that a drawing was saved, and how many seconds a setup question took to answer. These go to PostHog, on their European servers.
This exists to answer one question: where the setup questions lose people. If a question takes everyone a long time, it is badly worded, and we would otherwise have no way of knowing.
What is recorded is the name of the thing that happened and nothing else. Not a word you wrote, not your name, not your goal, not a note, not a drawing, not a photo, not a recording. When you change a setting we record that the setting changed – never what you changed it to. Your screen is never recorded and your taps are not captured automatically; we only count the events listed here, deliberately and by name.
There is no profile built about you. The events are not attached to a person, so there is no history of your use to look up – only totals across everyone.
Card details never reach us. Apple handles payment and does not share them.
Links you paste
If you paste a link onto a moodboard, Leora fetches the page's title and thumbnail so the card has something to show. That request goes to the site the link points at – and for TikTok and Pinterest links, to their preview services. Nothing about you is sent with it beyond the request itself. This only happens when you paste a link.
Personalised audio
Most subliminals are recorded in advance and play from your phone, needing no network at all.
Some can be spoken with your name or your goal woven into them. To do that, the words to be spoken – which may include the name and goal you entered – are sent to our text-to-speech provider, ElevenLabs, who turn them into audio and return it. The result is then cached on your device so it need only be generated once.
What is sent is the text of that subliminal and nothing else: not your drawings, not your photos, not your recordings, not your notes, and nothing identifying you beyond the name you chose to put in it. If you would rather nothing at all left your phone, use the pre-made subliminals and leave your name and goal blank in Settings.
What we do not do
- We do not require your name, address or phone number. If you tell Leora your name, it stays on your device.
- We do not use Apple's advertising identifier and we show no ads.
- We do not track you across other apps or websites.
- We do not sell or rent your information to anyone.
- We do not use your content to train anything or to advertise to you.
Children
Leora is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has provided information, contact us and we will remove it.
Your rights
Because your content is stored on your device, you control it directly: deleting the app removes it. For the anonymous records held by the services above, you have the right to access, correct, export and delete them, and to object to processing – under the UK GDPR, the EU GDPR and the CCPA as applicable. Email us and we will action it. We rely on legitimate interests for operating the app and performing our contract with you for the subscription itself.
Where data is processed
RevenueCat and Superwall are based in the United States, so the anonymous information above is processed there under the safeguards their own agreements provide. PostHog is used on its European servers, so usage events stay in the EU. Everything else stays on your device in your own country.
Retention
On-device content is kept until you delete it or remove the app. Subscription records are kept by RevenueCat and Apple for as long as needed to service the subscription and to meet tax and accounting obligations.
Security
Data held on your device is protected by iOS. No system is perfect and we cannot guarantee absolute security – but we hold no central store of personal data that could be breached, because there isn't one.
Changes
If this policy changes materially we will update the date above and, where the change is significant, tell you in the app.
Contact
atkdeveloped@gmail.com – Alex Kent, trading as Leora