Effective date: May 1, 2026 Last updated: May 1, 2026
LeafWord is built for families. We designed it so your child’s information never leaves their device. We do not run servers, we do not collect analytics, we do not show ads, and we do not share anything with third parties — except for two optional premium voice features, configured by the parent, described in detail below.
LeafWord is developed by Mohan. Contact: mrrmfamily2022@gmail.com
Stored locally on the device only:
Never transmitted off the device by LeafWord:
Words are not generated by AI. LeafWord ships with a hand-curated dictionary of age-appropriate words; the app picks one each day from that dictionary based on the child’s age band and the words they have recently seen. No prompts, requests, or generated content are sent to any AI service. The selection happens entirely on the device.
Payments are handled by Apple through the App Store. Apple tells the app whether a subscription is active, but does not share personal purchase details with us. We do not see or store payment information, your Apple ID, or your billing address.
Daily-word reminder notifications are scheduled and delivered locally on the device. There is no remote push server.
By default, the “speak” buttons in LeafWord use Apple’s built-in on-device speech synthesizer. No audio data is transmitted off the device when the default voice is in use.
LeafWord offers two optional premium voice services, available only to Family Plus subscribers and only after a parent has explicitly configured them. These features are off by default. Setting them up requires passing a math-problem parental gate, so a child cannot enable them.
Supported services:
To use a premium voice, the parent must:
When a premium voice is active, LeafWord sends only the dictionary word or example sentence to be pronounced (for example, the word “curious” or the sentence “The curious fox sniffed every corner of the garden”). The third-party service synthesizes the audio and returns it; LeafWord plays the audio once and does not store it.
We do not send your child’s name, age, profile data, device identifier, location, or learning history to either service.
The parent-supplied API key is stored in the iOS Keychain on the
device (kSecAttrAccessibleWhenUnlockedThisDeviceOnly) and is never
transmitted to LeafWord. A parent may delete the saved key at any time
from Settings; deleting the key disables the third-party request path.
LeafWord requests camera access only to support an optional
“Scan API key” feature inside the parental-gate-protected premium
voices settings. When the scanner is open, the camera feed is
processed locally on the device using Apple’s Vision framework
(VNRecognizeTextRequest) to read text from the parent’s printed or
on-screen API key. No images or video frames are saved, transmitted,
or shared. A parent who prefers to type the key manually does not
need to grant camera access at all.
LeafWord does not request access to your microphone, photo library, contacts, calendar, reminders, location, motion, HealthKit, or Bluetooth.
LeafWord contains zero third-party analytics, advertising, crash-reporting, or user-tracking SDKs. We do not use Firebase Analytics, Google Analytics, Mixpanel, Amplitude, Segment, AppsFlyer, Adjust, Branch, Sentry, Crashlytics, Bugsnag, or any equivalent. We do not access the IDFA, do not present an App Tracking Transparency prompt, and do not link any data across apps or websites.
The app makes no third-party network requests by default. The only exception is parent-configured premium voice synthesis, described above.
LeafWord is designed for children ages 4–12 under parental supervision and complies with the Children’s Online Privacy Protection Act. Settings, subscriptions, and the API-key entry sheet are gated behind a math-problem parental gate so children cannot modify them.
We do not knowingly collect personal information from children, and LeafWord does not transmit any child profile data to us or to any third party. Parents can review and delete child profiles directly on the device.
Because LeafWord stores everything locally and does not transmit profile data, there is no remote data processing for EU users. If you opt into a parent-configured premium voice service, the third-party provider (ElevenLabs or Google Cloud) acts as an independent data controller for that service under its own privacy policy. Your GDPR rights — access, rectification, erasure, restriction, portability, objection — are exercisable directly on the device through Settings: Export Data and Delete Profile.
LeafWord does not sell or share personal information for cross-context behavioral advertising. California residents have the right to know, delete, correct, and opt out; these rights are exercisable directly through on-device controls (Settings → Export Data, Delete Profile).
All on-device data is protected by the standard iOS application
sandbox and file-protection mechanisms
(NSFileProtectionCompleteUntilFirstUserAuthentication). API keys
are stored in the iOS Keychain. We do not maintain a server, so there
is no remote attack surface.
A parent can export a JSON copy of all on-device data from Settings → Export Data, or delete a child profile from Settings → Profiles. Uninstalling LeafWord removes everything.
If we ever change LeafWord to transmit additional data, we will update this policy with a new “Last updated” date and require an explicit in-app consent before any new data leaves the device.
Questions, concerns, or feedback about this policy?
Email: mrrmfamily2022@gmail.com