Privacy Policy
Last updated 21 September 2026
Leafy VPN is operated by Abrasifs Hi-Tech Inc, 295 Montée de Liesse, Saint-Laurent, Québec H4T 1P5, Canada. This policy explains what we collect, what we deliberately do not collect, and who else is involved when you use the app.
The short version. We do not record which VPN server you connect to, when you connect, how long you stay connected, or anything you do while connected. We cannot produce those records for anyone, because we never create them.
1. What we do not collect
These are not anonymised, aggregated or retained briefly. They are never written down:
- Connection logs — which server you chose, and at what time
- Session records — when a connection started or ended, or how long it lasted
- Traffic content — the pages you visit, what you send or receive
- DNS queries — the domains your device looks up
- Bandwidth per user — how much data you moved
- Your original IP address, stored against your account
The VPN tunnel is established by iOS itself using the IKEv2 protocol. Your traffic passes through a server and out to the internet. We operate no system that inspects, records or retains it.
2. What we do collect
| Data | Why | When |
|---|---|---|
| Email address | To create your account, sign you in and reset your password | Only if you create an account. You can use Leafy as a guest without one. |
| Account identifier | A random ID that links your subscription, devices and support messages | Always, including guests |
| Device name and registration date | To enforce your plan's device limit and let you remove a device you no longer use | When you register a device |
| Subscription status | To know whether your plan is active, which plan it is, and when it renews | If you subscribe |
| Support messages | To answer you | Only if you write to us |
| Crash reports | To find and fix crashes | If the app crashes |
About the device registration date
We record when a device was registered to your account. This is not a connection log: it does not change when you connect or disconnect, and it says nothing about which server you used or when you used it. It exists so you can recognise your own devices in the app.
Analytics
The app includes Google's Firebase Analytics library, which collects basic technical information such as app launches, device model, operating system version and approximate region. We do not send custom events, we do not build advertising profiles, and we do not sell or share this data. It is never combined with VPN activity, because no VPN activity is recorded.
3. Companies we work with
| Company | What they handle |
|---|---|
| Apple | Payments and subscriptions. We never see your card details. Apple tells us only whether a subscription is active. |
| Google (Firebase) | Sign-in, our database, crash reporting and our servers. Your account record and support messages are stored here. |
| RevenueCat | Keeps track of subscription state across Apple's systems and ours. Receives your account identifier and subscription status. |
| Our VPN network provider | Operates the servers that carry your traffic. |
Your email is never given to our VPN network provider. Each account needs an address, so we generate a meaningless one from your account identifier — for example a1b2c3@users.leafyvpn.app. Mail sent there goes nowhere. The provider cannot contact you, and cannot connect the account to a real person.
4. How long we keep things
- Account record — until you delete your account
- Device registrations — until you remove the device, or your subscription lapses
- Support conversations — up to 24 months, so we have context if you write again
- Crash reports — up to 90 days
When a subscription lapses, the VPN account behind it is deleted from our network provider along with the credentials stored on your device.
5. Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you
- Correct anything wrong
- Delete your account and the data attached to it
- Send you a copy of your data
Write to privacy@leafyvpn.com and we will respond within 30 days. If you are in the EU or UK, you also have the right to complain to your data protection authority. If you are in Québec, you may contact the Commission d'accès à l'information.
Deleting your account
In the app: Settings → Account → Delete account. You can also ask us directly — see Delete your account.
6. Children
Leafy VPN is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
7. Where data is held
Our account database and support messages are stored on Google Cloud servers in the United States. VPN servers are located in the country you choose when you connect. By using Leafy VPN you agree to your account data being processed in those locations.
8. Legal requests
If we receive a valid legal order, we will provide what we hold — which for VPN activity is nothing, because we do not record it. What we could provide is limited to your account record: your email if you gave us one, your subscription status, and your registered devices.
9. Changes
If we change this policy we will update the date at the top and, for anything significant, tell you in the app before it takes effect.
10. Contact
Abrasifs Hi-Tech Inc
295 Montée de Liesse
Saint-Laurent, Québec H4T 1P5
Canada
privacy@leafyvpn.com