Legal

The short version

• We collect what Leechline needs to work: your account, your profile answers, your tasks and schedule, the results of proof checks, your learning progress, and what you post in the Colosseum.
• Proof photos and screenshots are sent to our AI provider to be checked, then thrown away. We keep the result, not the photo.
• Messages and photos you send in the Colosseum are checked against our community rules, then kept so the people in the chat can see them, until you delete them, the chat is deleted, or you delete your account.
• The apps you block stay on your device. The website list you give the browser extension is saved to your account so your browsers match. We never see your screen, your browsing history, or what you do in other apps.
• Apple, Google or Stripe handles payment. We never see your card.
• Leaderboards are optional. If you join one, other Leechline users see your display name, your city and province or state, your unleeched hours and your ring (a badge for your total proven hours). Location is optional too, and we keep only the city and province, never GPS coordinates.
• In the Colosseum, friends and the people in your communities see your name, your username, your learning progress and your hours. You can turn off being found by your username.
• We don't sell your data, show ads, or track you across other apps and websites.
• You can delete your account and your data at any time in Settings.

What we collect

• Account: your email address and password. Our sign-in provider stores the password in a scrambled (hashed) form, so we can't read it.
• Profile: the answers you give during setup and in Settings, such as your first name, what you're working on, your goals, your pace and focus length, your day hours and which assistant you picked.
• Tasks and schedule: the tasks you add, how you described them, their due dates, the time blocks you pick, and whether each block was proven, skipped or unlocked.
• Proof check results: for each photo or screenshot you submit, the verdict, a short description of what the photo showed, the reasons, when the photo was taken and received, and the challenge code if one was used.
• Conversations with the assistant: what you type or say to Rowel or Lindo. Your recent conversation is kept on your phone, not on our servers.
• Subscription status: whether you're in a free trial or subscribed, which plan, renewal dates and your store country. This comes from Apple or Google through RevenueCat, or from Stripe for web purchases (Stripe also gives us your billing country and the last four digits of your card).
• Time settings: your time zone and whether you use a 12- or 24-hour clock, so the assistant and your schedule use your local time.
• Sleep-lock (if you turn it on): your bedtime and wake time, so your apps and sites lock overnight on every device you use.
• Progress: your unleeched hours, streaks and best totals, emergency unlocks used, and how many loopholes you've avoided.
• Help Mode notes: when you ask for help during a block, short notes about what you were stuck on (up to 20), so later help fits you better.
• Leaderboards (if you set them up): your display name, country, province or state and city, whether you show on public boards, and your hours, rings and ranks.
• Learning (the Colosseum): the subjects you join and leave, and your level, skill rating, XP and steps passed in each. For every quiz and Trial: the questions you got, your answers (or that you missed one), whether they were right and how long each took. This is how Leechline judges what you're ready for. We also keep the subjects you add.
• Username and friends (if you pick a username): your @username, when you last changed it, whether people can find you by it, your friend requests and friends, and the people you block.
• Communities and chats: the communities you create or join (with their names, descriptions and invite codes) and your role in them, the rooms you open, the rooms, group chats and direct messages you're in, what you've read, which chats you've muted, and the messages, GIFs, stickers and photos you send. Before a photo is stored, we remove the details your camera adds to the file, such as where it was taken.
• Message alerts (in the app, if you allow notifications): your phone's push token (an address from Expo for sending that phone an alert), whether it's an iPhone or an Android phone, when the app last handed it in, and Expo's receipt for a recent alert, which tells us if the app has been deleted.
• Reports: the reports you make about a message, person, community, room or lesson, each with a copy of what you reported (for a message, the six messages before it too), so it can be looked at even if it's deleted. If someone reports something you posted, their report holds a copy of it.
• Moderation records: what our checks stopped when you tried to post it, why, and any warning it earned. If we close an account, we keep its email address so the ban holds.
• Location (only if you tap Use my location): in the app, your phone gives one approximate reading, which is turned into a city, province or state and country on your phone. On leechline.ca the same button uses an approximate place based on your internet connection (IP address). We keep only the place you save, never coordinates, and we never track your location in the background.
• Feedback and support: what you send us through a feedback form in the app, website or extension, or by email, with your account email and app or browser version so we can reply and fix things.
• Usage data: which features and screens you use, when you sign in and come back, your app or browser version, and your approximate country and region based on your IP address. We look at it mostly in totals, to see how Leechline is used and to improve it. We never use it for ads.
• Technical data: your IP address, device type and app version when the app talks to our server, and error logs. We use these to run, secure and fix Leechline.

What stays on your device

• App blocking on iPhone: Apple's Screen Time handles the apps you choose, and during a quiz or Trial it locks the other apps and websites. Apple gives Leechline private tokens instead of app names, and they never leave your phone.
• App blocking on Android: Leechline's accessibility service checks only the name of the app that opens, on your phone, during a block you scheduled or a quiz you're taking. It doesn't read what's on your screen, what you type or your passwords, and nothing it sees is sent to us.
• Reminders, your weekly recap and leaderboard alerts are scheduled on your phone. Only message alerts are sent from our server, through Expo. On leechline.ca, your browser shows message alerts itself while Leechline is open in a tab, so no push token is made there.
• Voice: when you talk to the assistant, your phone's speech recognition from Apple or Google turns your voice into text. We receive only the text. Apple or Google may process the audio under their own privacy policies.
• Assistant voice: when Rowel or Lindo speaks, the text of the reply is sent to ElevenLabs to turn it into audio. Your own voice isn't sent.
• Voice on leechline.ca: voice input uses your browser's own speech recognition, which may send the audio to your browser's maker (for example Google in Chrome or Apple in Safari).
• Location: when you tap Use my location in the app, your phone's location service (Apple on iPhone, Google on Android) turns the reading into a place name. The coordinates aren't sent to us or kept.
• GIFs and stickers: when you search for one, your device asks Klipy, our GIF and sticker provider, directly. Klipy receives your search words, your IP address and a random ID made for that device or browser, which isn't linked to your account, and it's told which GIF you send. We receive only the GIF or sticker you pick. Klipy's own privacy policy covers what it receives.
• Prices: the app uses your device region or store country to show CAD or USD. On leechline.ca, our host reads the country of your internet connection (IP address) for the same purpose, and we remember only that country in a cookie.
• Browser extension: the list of sites you block and the check that a site is on it happen inside your browser. We don't receive your browsing history. The extension sends us only your sign-in, your tasks and blocks (to keep them in sync with the app) and proof photos for checking.

How we use it

• To run Leechline: plan your tasks, schedule blocks, block and unblock apps, and check proof.
• To keep your data in sync across your devices.
• To run leaderboards and communities, and to alert you when your rank changes.
• To run the Colosseum: pick lessons and questions that fit your level, keep your progress, and run boards, communities and chats.
• To keep the Colosseum safe: check names, messages and photos against our community rules, look into reports, and stop closed accounts from coming back.
• To check your subscription before AI features run.
• To keep Leechline safe, for example by limiting requests and stopping fake proof.
• To understand how Leechline is used, find problems and decide what to improve, using usage data and your feedback.
• To answer you when you contact us.

We don't use your data for advertising, and we don't sell or rent it.

AI processing

When you ask the assistant to plan a task, ask for help during a block (Help Mode), or submit a proof photo or screenshot, the text or image and the task details go from our server to Anthropic, which provides the Claude AI models. Anthropic processes them to send the answer back to us. Under its commercial terms, Anthropic doesn't train its models on this data, and it may keep it for a limited time for safety and abuse monitoring.

Before anything you write or send in the Colosseum is shared (a username, a name or description, a message or a photo), it goes to Anthropic to be checked against our community rules, with the few messages before it for context. A warning or a closed account comes only after a second, larger model agrees. When you add a subject, its title goes to Anthropic to check it and plan its lessons. Lessons and questions are written by AI from the subject, not from your data.

Proof checks are automated. If you think a check got it wrong, retake the photo, use an emergency unlock, or contact us. If you think a community check got it wrong, email support@leechline.ca and a person will look at it.

What other people see

Leaderboards are off until you set them up, and the Colosseum's people features need a username. Here's who sees what:

• Public boards (city, province or state, and global): if Show me is on, any signed-in Leechline user can see your display name, city, province or state (and country outside Canada and the US), your unleeched hours and your rank, and on the Colosseum's everyone board, your XP and best subject.
• Communities: members see your name and username, your level and XP in the community's subject, your best subject, and your hours and rank on the community's board, even when Show me is off. Anyone with an invite code can join a community, and anyone signed in can find and join a public one.
• Friends: people you accept as friends see your name and username, your hours, rings, XP and best subject, and can message you and add you to group chats.
• Your username: anyone signed in can find you by it and ask to be friends, unless you turn off Let people find me.
• Messages: everyone in a chat sees what's sent in it. A room in a community is open to all of its members. Someone added to a group chat later sees only what's said after they join.
• Blocking someone hides the two of you from each other's boards, lists, searches and chats.
• Nobody else on Leechline sees your email, tasks, proof photos, proof results or exact location.
• Pick a username and display name you're happy for others to see. You can change your display name, your area and Show me, or leave a community, at any time, and change your username once every 30 days.

Who helps us run Leechline

We share data only with service providers that run parts of Leechline for us. They may use it only to provide their service to us.

• Supabase: sign-in, our database and file storage (account, profile, tasks, blocks, proof results, leaderboards, learning progress, communities, messages, chat photos, reports, feedback and usage data).
• Vercel: hosts leechline.ca and our server, and gives us the approximate country and region of a visitor's internet connection.
• Expo: builds and delivers the app, and passes message alerts on to Apple or Google: your phone's push token, who wrote, the chat's name and the start of the message.
• Anthropic: AI planning, Help Mode, proof checks, community checks and lessons.
• ElevenLabs: the assistants' voices.
• Klipy: GIF and sticker search, straight from your device.
• RevenueCat: subscription status.
• Stripe: payments on leechline.ca.
• Resend: sends account, billing and moderation emails, and sends reports to our support inbox.
• Cloudflare: our domain's DNS, and forwarding email sent to @leechline.ca addresses to our inbox.
• Google: our support inbox (Gmail), where your emails and reports arrive.
• Apple and Google: app distribution, payments, speech recognition, location lookups and notifications.

We may also disclose data when the law requires it, to protect someone's safety or our rights, or to a buyer if Leechline is sold, who must then follow this policy.

Where your data is stored

Our providers may store and process data in Canada, the United States and other countries. Data stored outside Canada is subject to the laws of those places, and authorities there may be able to access it.

How long we keep it

We keep your data while your account exists. When you delete your account, we delete your account, profile, tasks, blocks, proof results, leaderboard profile, ranks, learning progress, username, friends and blocks, the messages and photos you sent, your direct message chats, your community memberships and your phones' push tokens from our database right away, and your subscription record at RevenueCat. A community or group chat you run passes to another member, and is deleted if nobody else is in it.

A few things are kept after that, without your account:

• a report you made, or one about you, with its copy of what was reported (and a reported photo, until we've looked at it), until we've dealt with it and then for up to a year;
• records of things our checks stopped for 30 days, and of warnings for a year;
• for an account we closed, its email address and the record of why, for as long as the ban lasts. If a ban is lifted, the email address is deleted within a year. For the most serious cases, such as anything sexual involving someone under 18, we keep the record even after a ban is lifted, and the photo that caused it for up to 90 days, so it can be reported to the authorities;
• subjects you added, without your name.

In the Colosseum, a message you delete is erased at once. One removed by a moderator or by us is hidden and kept as a record until its chat or its sender's account is deleted. Photos are deleted with their message. A breakout room closes after 30 days without a message, and is deleted with its messages 30 days later. Quizzes you drop are deleted after 30 days, and weekly XP totals after a year.

A phone's push token is deleted when you sign out on that phone, turn off message alerts, or turn off Leechline's notifications in the phone's settings (the next time you open the app); when Apple or Google tells us the app is gone from it; and after 180 days unused.

Usage data is kept for up to 12 months, then deleted or kept only as totals that don't identify you. Feedback and support emails are kept as long as we need them to help you and improve Leechline, up to 2 years. Copies in backups are erased within 30 days. Apple and Google keep their own purchase records under their policies.

Your choices and rights

• See or correct your data: most of it is in the app. For a copy of everything, email us.
• Delete your account: in the app under Settings, Account, Delete account, on our account deletion web page, or by emailing us.
• Leaderboards: turn off Show me, change your name or area, or leave a community in the Leaderboard tab.
• The Colosseum: turn off Let people find me, unfriend or block people, leave communities and chats, and delete your own messages at any time.
• Message alerts: turn them off in Settings in the app (or on leechline.ca, for that browser), mute a chat to quiet just that one, or turn off Leechline's notifications in your phone's or browser's settings.
• Turn things off: you can turn off app blocking, notifications, location, camera and microphone access in your phone's settings at any time. Some features won't work without them.
• Withdraw consent: under Canada's privacy law (PIPEDA) you can withdraw consent to optional uses, such as leaderboards, location or the Colosseum's people features, at any time, and ask to see or correct the personal information we hold about you.
• Complaints: in Canada you can contact the Office of the Privacy Commissioner of Canada, or a provincial regulator such as the Commission d'accès à l'information du Québec.

We answer requests within 30 days.

Children

Leechline isn't meant for children under 13, and we don't knowingly collect their data. If you're under the age of majority where you live, use Leechline with a parent's or guardian's permission. If you think a child under 13 has an account, contact us and we'll delete it.

Because members can be as young as 13, our community checks are strict, and anything sexual involving someone under 18 closes the account at once.

Security

Data travels encrypted over HTTPS, and each account can reach only its own records in our database. Chat photos are stored privately and open only through short-lived links for the people in the chat. Messages aren't end-to-end encrypted. People at Leechline look at a message only when it has been reported or stopped by our checks, or when the law requires it.

Only a small number of people at Leechline can open account data, in an admin dashboard, and only to give support, keep Leechline safe and understand how it's used. No system is perfectly secure, so use a strong password that you don't use anywhere else.

Changes to this policy

If we change this policy in a meaningful way, we'll tell you in the app before the change takes effect. The date at the top shows the latest version.

Contact

Questions, requests or complaints go to our privacy officer at support@leechline.ca.

By mail: Privacy Officer, Leechline, 2161 Tokala Trail, London, Ontario N6G 0Z7, Canada.