- capyvibe, who makes Leaflet, does not collect your pages, recordings, keys or any personal information, and runs no server that stores them.
- Leaflet has no analytics, no ads, no tracking and no telemetry, and sells nothing about you.
- Your data leaves your device only for services you choose: iCloud Drive, a Supabase project of your own, and the AI and speech-to-text providers you set up.
Who we are
Leaflet is made by capyvibe (“we”, “us”). Leaflet is open source under the MIT License, so anyone can check what this policy says against the code. To reach us about privacy, use GitHub Issues.
What stays on your device
Everything you make in Leaflet is saved first in a database on your device: pages, folders, tags, to-dos, comments, page history, pictures and files, recordings and their transcripts, and your settings.
The keys and sign-ins you give Leaflet, such as an AI provider’s API key or your ChatGPT sign-in, are kept in your device’s keychain. On iPhone and iPad they are kept on that device only, and are not synced through iCloud Keychain.
We have no access to any of it.
What we collect
Nothing. You don’t need an account with us to use Leaflet, and the apps contain no analytics, crash reporting, advertising or tracking code. The iPhone and iPad app declares no tracking in its privacy manifest, and does not use your device’s advertising identifier.
Leaflet writes its diagnostic messages only to your device’s own system log.
Services you choose
Leaflet sends data off your device only to do something you asked for, and only to the service you chose for it. Each of these services handles your data under its own terms and privacy policy.
iCloud Drive
If you turn on iCloud sync, Leaflet keeps your pages, files and recordings in a Leaflet folder in your iCloud Drive, with a small record of each of your devices: its model, its system (such as iOS) and when it was last active. Apple stores it as part of your iCloud account.
Your own Leaflet server, through Supabase
If you choose Continue with Supabase, Leaflet signs in to your own Supabase account and syncs through a project in it, which Leaflet sets up for you. That project holds your pages, comments, page history, files, recordings and transcripts, the name shown on your edits, a list of your signed-in devices (model, system and when each was last active), and, if you add them there, your AI and speech-to-text keys, which are kept in the project’s Vault. The project belongs to you and is run by Supabase for you; we have no access to it.
To sign in with Supabase, the apps use a small sign-in service we run on Cloudflare at leaflet-auth.capyvibe.app. It trades the one-time code from your sign-in for your Supabase tokens and hands them straight back to the app. It stores nothing. Cloudflare keeps standard request logs, such as IP addresses, for a short time, which we use only to keep the service working and to limit abuse.
AI providers
When you ask an agent, Leaflet sends your request to the provider you set up for that agent, with what it needs to answer: the page you asked about, the text you chose or the comment thread, and, when “Let agents read your other pages” is on, the other pages it reads. Providers you can set up include OpenAI (and ChatGPT, when you sign in with your plan), Anthropic, xAI, OpenRouter, DeepSeek, Zhipu (GLM) and any endpoint you add. Requests go from your device to the provider, or, for cloud providers you add while signed in to your Leaflet server, through your own Supabase project. A model server on your own network keeps all of it on your network.
Where you allow it (“Let agents use the web”), agents can read web pages and search the web through their provider. They can also read the captions of a YouTube or Vimeo video in your page.
Speech to text
Transcription on the device uses Apple’s own speech recognition, and the audio stays on your device; iOS may download a language model for it. If you choose Soniox, your audio is streamed to Soniox while you record, or sent once it’s saved. If you choose MOSS, saved audio is sent to MOSI. If you add an endpoint of your own, audio goes to that endpoint.
Things your pages show from the web
Link cards, pictures, videos and their titles and thumbnails are loaded from the sites they come from (YouTube videos through youtube-nocookie.com). Those sites see your device’s IP address, as they would in a browser.
Permissions on iPhone and iPad
| Permission | What Leaflet uses it for |
|---|---|
| Microphone | Recording audio into a recording block, only when you press Record or start a voice note. |
| Local network | Reaching AI models and speech-to-text servers you set up on your own network. |
| Notifications | Reminding you of to-dos with a due date. |
A recording’s Live Activity is drawn on your device; Leaflet asks for no push notifications from a server.
Your choices and your data
- Export. Settings › Account › Export all pages saves every page as Markdown in a zip. A single page exports as Markdown or PDF from its menu.
- Delete. A page you delete is deleted on your other devices as they sync. Deleting the app deletes everything it kept on that device.
- Delete your account. Signed in to your Leaflet server, Settings › Account › Delete account deletes your space, pages, files, recordings, keys and devices from your Supabase project, and clears Leaflet’s data and keys from the device. Your Supabase account and project, and the Leaflet folder in your iCloud Drive, are yours to keep or delete.
- Turn things off. You can turn off iCloud sync, sign out, remove an AI provider or key, or turn off “Let agents read your other pages” and “Let agents use the web”, at any time in Settings.
Because we hold no personal data about you, there is nothing for us to access, correct or delete on your behalf. For data held by a service you chose, use that service’s own tools or ask it directly.
Children
Leaflet is not directed at children under 13, and we collect no personal information from anyone, children included.
This website
leaflet.capyvibe.app is a set of static pages served by Cloudflare. It sets no cookies, runs no analytics and loads nothing from other sites; its fonts and pictures are served from the site itself. Cloudflare processes each request, including your IP address, to deliver and protect the site. The site links to GitHub and the App Store, which have their own privacy policies.
Changes to this policy
If Leaflet starts handling your data differently, we will update this page and the date at the top before the change reaches you.
Contact
Questions about privacy go to GitHub Issues. For help with the app, see Support.