Your privacy matters.

This policy describes the NewLeaves website and app operated by Spring Digital Commerce LLC (Wilmington, Delaware, United States). For privacy questions and requests, contact bas@springdigitalcommerce.com. The app is in development; we will update this policy if its data practices change before release.

Information on your device

The app stores your profile and journey choices, check-ins, daily progress, journal, letters, plans, Circle contacts, and chat history locally on your device. Local storage does not mean that every interaction stays on the device: optional AI chat and app analytics involve the separate data flows below. Device backups may also be governed by your operating system and backup settings.

App accounts

The app creates an anonymous Supabase account to provide online services. You may optionally link it with Sign in with Apple. Apple supplies an account identifier and, when authorised, your email or private relay address. Signing in does not currently back up or synchronise your journal, chats, or progress across devices.

Optional AI chat

Rowan is an AI companion, not a person, clinician, or emergency service. When you consent to use it, your messages and recent conversation context are sent to our backend and through OpenRouter to the configured AI providers to generate a response. The current development setup uses Google Gemini models, with Anthropic models as a fallback. We will update this policy and the in-app notice before launch if those providers change.

With plan memory enabled, context can include your first name, journey, goal, reasons, triggers, if-then plans, mood, progress, drinking or gambling patterns, recent practice reflections, and first names of people in your Circle. With memory off, the current app still sends your journey, goal, chat topic, and approximate region. Separate journal entries, unsent letters, and Circle phone numbers are not automatically attached. Anything you type into chat is part of your message.

You can turn off plan memory and delete local chat history in Settings. Provider-side processing and retention follow the applicable provider terms and policies: OpenRouter, Google, and Anthropic. Deleting local history does not itself delete provider-side records. Our backend tracks daily message and token counts and automated safety flags against your Supabase account identifier; the chat handler does not intentionally store message text in its database. Providers and hosting services process requests under their own applicable terms. We do not claim that this means zero retention by every service.

App analytics and notifications

When our analytics service is enabled, the app sends a pseudonymous account identifier, app version, platform, timestamps, activity events, and associated properties to our backend. These can include onboarding answers, chosen journey, triggers, spending estimates, and campaign attribution. This information can be sensitive. It is used to understand onboarding and app use, support the service, and improve the product. Our backend uses Supabase, with the database hosted in Ireland. App analytics are off by default and can be enabled or disabled in Settings.

If you allow notifications, the app can schedule local reminders. Remote notification functionality uses a device push token associated with the account identifier and notification delivery providers, including Expo and the platform’s push services. You can turn notifications off in the app or your device settings.

Subscriptions

When purchases are enabled, Apple processes payments and RevenueCat validates purchase history and subscription access. RevenueCat receives an app user identifier linked to your Supabase account and transaction, product, renewal, and entitlement information. Our backend stores subscription status to provide paid features. We do not receive your full payment-card details. See RevenueCat’s privacy policy. Deleting your account does not cancel an Apple subscription or erase records Apple must retain. Contact support about provider-held purchase records.

Advertising measurement in the app

Advertising measurement is disabled in the current release configuration. NewLeaves does not initialise Meta’s advertising SDK or request tracking permission in that configuration. If advertising measurement is enabled in a later release, we will update this notice and request the applicable permission before tracking. Sensitive plan details and chat messages are not sent to advertisers.

Website enquiries and email

This website does not use advertising pixels, marketing cookies, or a newsletter database. Our hosting provider processes ordinary request information, including IP addresses and browser information, to deliver and secure the site. Clicking an email link opens your email application; information you send is processed to handle your request. Links to external services are governed by their own policies.

When you submit the contact form, we store your email address, optional name, selected topic, message, submission time, and enquiry status in Supabase to handle and respond to your request. We also record the privacy notice version shown with the form and a random request identifier to prevent duplicate submissions. The database is hosted in Supabase’s EU West region (Ireland). Enquiries are not publicly readable and are not used to sign you up for marketing.

We retain enquiries while handling the request and as needed for follow-up, security, and legal obligations. You can request access, correction, or deletion by contacting us. Please avoid including unnecessary sensitive information. See Supabase’s privacy policy and our deletion guidance.

Why information is processed

We process information to provide requested app features, answer support requests, maintain security, and understand how the service is used. Optional AI chat asks for your permission before sending messages. App analytics are optional and off by default; see your available controls. Depending on your location and the processing involved, applicable grounds may include your consent, performing the requested service, legal obligations, or legitimate interests. Sensitive-data and tracking consent must meet the rules applicable to your jurisdiction.

Sharing and international processing

Service providers receive information needed for hosting, analytics storage, AI responses, support, and notification delivery. Data may be processed outside your country, including in the United States. We may also disclose information where legally required or necessary to protect people and the service. App-store transactions, if introduced, are handled by the relevant store under its own terms.

Retention and deletion

Local app records generally remain until you delete them or reset the app. Settings → Delete account removes local records after server deletion succeeds, including installation timing and campaign attribution metadata. Server records and support correspondence are retained as needed to provide the service, investigate problems, and meet legal obligations. The current development backend does not implement an automatic fixed retention period. In-app account deletion removes the account and its linked analytics, push tokens, and AI usage records from our active database. It does not automatically delete separate website enquiries, email correspondence, or records held by independent AI providers. Service backups may retain deleted records according to the hosting provider’s backup lifecycle.

See how to delete your data and manage privacy choices. Contact us to request access, correction, erasure, restriction, portability, or to object to processing where those rights apply. We may need proportionate information to verify and locate your records. You can withdraw consent for optional features by discontinuing them or changing the relevant setting; this does not undo previous lawful processing. You may also contact your local data protection authority.

Security and age

NewLeaves is intended for adults aged 18 and over. We do not knowingly offer the app to children. No storage or transmission method is perfectly secure; avoid putting passwords or unnecessary sensitive details into support messages or AI chat.

Changes and contact

The date above identifies this version. Material changes will be reflected here and, where appropriate, in the app. Contact bas@springdigitalcommerce.com with questions about this policy or your data.