Privacy Policy for Leave a Note

Last updated: October 24, 2026

Leave a Note ("the app," "we," "us") is a private, two-person app for sending a photo and caption to one connected person. This policy explains what information the app collects, how it's used, and who can see it.

Information We Collect

Account information. When you sign up, we collect the email address and password you provide. Your password is handled by Firebase Authentication and is never stored or visible to us in plain text.

Profile information. Your display name, an optional profile photo, and how you've described your connected person (e.g. spouse, partner, friend, parent, child).

Notes you send. Each note you compose — the photo and caption, combined into a single image — along with the time it was sent and which two accounts it was sent between.

Pairing information. A temporary 6-digit code used to connect two accounts. Codes expire after use and aren't retained once a connection is made.

Device and notification information. If you enable notifications, we store a device token used solely to deliver "you got a note" alerts through Apple Push Notification service. If you add the home screen widget, a separate access token is stored so the widget can retrieve your latest note without keeping you signed in on that surface.

We do not use analytics, advertising, or tracking SDKs of any kind. We don't collect location data, contacts, browsing activity, or any information beyond what's listed above.

How We Use Information

We use this information only to operate the app: creating your account, connecting you with the one person you pair with, delivering notes between the two of you, keeping your home screen widget current, and sending note-received notifications if enabled.

We do not sell your information, use it for advertising, or share it with third parties for marketing purposes.

Who Can See Your Notes

Only you and the one person you're connected with can see the notes sent between you. There are no public profiles, follower lists, or discovery features. A connection is one-to-one — pairing with a new person requires disconnecting from the current one.

Reports and Blocking

If you report a note, we save a copy of that note (its image and caption), the reason you chose, any details you add, and which two accounts it was sent between, so we can review it. Report copies are visible only to us, are kept as long as needed to review the report and enforce our Terms of Use, and may outlast the original note or either account. If you block someone, we record that block so the two accounts can't connect again.

Photo Links

Note photos are stored at a unique, hard-to-guess web address so your paired device and home screen widget can load them without you needing to sign in every time. Anyone who obtained that exact address could view the photo it points to, the same as with a private link to a photo shared through any other service — we recommend treating note content as you would any other private photo you wouldn't want forwarded.

Where Information Is Stored

Your data is stored using Firebase and Google Cloud services (Authentication, Firestore, Cloud Storage, Cloud Functions, and Cloud Messaging), currently hosted in the United States. Firebase's own privacy and security practices are described at firebase.google.com/support/privacy.

Data Retention and Deletion

Notes and account information are retained until you delete your account. You can permanently delete your account at any time fromProfile → Delete Account inside the app — this immediately removes your profile, your connection to the other person, and every note you've sent or received, on both phones (except copies kept with a report, described above). You can also request deletion by emailing us at the address below.

Children's Privacy

Leave a Note is not directed at children under 13, and we do not knowingly collect information from children under 13. The "parent" and "child" relationship labels describe the relationship between two adult-operated accounts and do not mean the app is intended for use by minors.

Changes to This Policy

We may update this policy as the app changes. We'll update the date above when we do, and continued use of the app after a change means you accept the updated policy.

Contact Us

Questions about this policy or your data? Email alex@alexdykstra.com.