Privacy Policy

This Privacy Policy explains how Leaflet ("we," "us") collects, uses, discloses, retains, and protects personal information when you visit Leaflet, create an account, use courses, practices, interactive components, Pro access, email verification, Google sign-in, and payment-related features.

This Policy does not apply to third-party websites, sign-in services, payment pages, or external links. Third-party services process your information under their own policies.

Leaflet currently does not store a complete page-by-page reading trail, every practice attempt, detailed interactive-component operation history, or a long-term learning profile by default. If we later add learning progress, AI grading, personalization, or similar features, the product will explain the data use and access rules before collection.

Leaflet does not sell personal information or share it for cross-context behavioral advertising. If our business model changes in the future, we will update notices at the point of collection and in this Policy and provide applicable choices.

Where applicable law requires us to identify legal bases, we generally process personal information to perform our service contract with you, based on your consent for sign-in, registration, cookies, or specific features, for legitimate interests in service security and product improvement, and to comply with legal, tax, accounting, consumer-protection, and dispute-resolution obligations.

Leaflet uses necessary cookies, tokens, or local storage to keep you signed in, protect sessions, save language preferences, and complete security checks. The current product does not rely on third-party advertising cookies.

You can delete or block cookies through your browser settings, but some sign-in, account, and Pro access features may not work correctly.

We disclose personal information only as needed: to service providers processing data for us; to complete payment, sign-in, email delivery, and security functions; to comply with law, court orders, regulatory requirements, or law-enforcement requests; to investigate abuse, fraud, or security incidents; and in connection with mergers, financing, acquisitions, asset transfers, or similar transactions subject to confidentiality and applicable law.

We retain personal information for as long as needed for the purposes described in this Policy. Account information is generally retained until account deletion or deactivation; order, membership, payment, audit, and security records may be retained as required for legal, accounting, tax, dispute-resolution, and security needs; temporary data such as verification codes has a short validity period.

We use reasonable technical and organizational measures to protect personal information, including password hashing, access controls, session protection, environment-variable management, parameterized database queries, admin access limits, and audit records. No internet service can guarantee absolute security, so you should also protect your password, device, and email account.

Leaflet may process information through servers, service providers, and team members in different countries or regions. Where required by applicable law, we use reasonable transfer safeguards such as contracts, access controls, and service-provider review.

We may update this Policy as the product, law, payment systems, sign-in methods, or security requirements change. Material changes may be notified through page updates, account notices, or other reasonable methods. Continued use of Leaflet means you understand that the updated Policy applies to later use.

For privacy, account, or data requests, contact: [email protected]. Before public launch, the operating entity address, data-protection contact, and region-specific request channels should be completed on this page.