Privacy Policy
Last updated: 2026-11-06
Klarleaf is built and operated by Alessandro Nicoli (the "Operator", "we"). This policy explains what data we collect, why, and your rights under GDPR (EU) and the Swiss FADP.
1. Summary
- Your scans stay on your device. There is no Klarleaf account and no Klarleaf server holding them.
- Text recognition runs on the device. Pages are not uploaded to be read.
- A scan leaves your iPhone only when you share it, or when you turn on automatic sending to a destination you choose.
- We collect no analytics and no crash reports from inside the app.
- Purchases are handled by RevenueCat, which receives an anonymous installation id.
- This website counts page views with Umami, which sets no cookies.
- We do not sell data, run ad trackers, or send your data to brokers.
2. Data Controller
Alessandro Nicoli
Zürcherstrasse 53b
8104 Weiningen, Switzerland
Email: info@klarleaf.com
3. What we collect & why
Your documents
Everything a scan produces — the page images, the recognised text, the name, folder, tags and history you give a document — is stored in the app's own database on your device, together with your settings. We receive no copy. Lawful basis: Contract (GDPR Art. 6(1)(b)).
Camera and text recognition
Scanning uses the camera to photograph a page. Edge detection, straightening and text recognition all run on your iPhone. Pages are not uploaded to be read. Lawful basis: Contract.
Spotlight
So you can find a document from the Home Screen, the app hands iOS an index of your document names and text. That index is held by iOS on your device and is not sent to us. Lawful basis: Contract.
Sharing and automatic sending (Pro)
When you share a document, it goes where you send it. With Pro you can turn on automatic sending, and every new scan is then copied to the destination you configured — your own NAS over SMB or WebDAV, a folder in the Files app, or the Uploads folder. Those destinations are yours, not ours; we never receive the document and cannot read it. Lawful basis: Contract.
Purchases
Klarleaf Pro is sold through the App Store. We use RevenueCat to manage purchases and unlock your Pro entitlement across devices. The app sends RevenueCat an anonymous installation identifier (not your email or name) together with the store's purchase and entitlement status. We never send your payment details — your card is handled by Apple, and neither RevenueCat nor we ever see it. RevenueCat is based in the United States; transfers rely on the Standard Contractual Clauses in our data processing agreement with them. RevenueCat receives nothing about your documents. Lawful basis: Contract (GDPR Art. 6(1)(b)).
Website analytics
This marketing website (klarleaf.com) uses Umami, a privacy-focused, cookieless analytics tool that we host ourselves, to count page views and referrers in aggregate. Umami sets no cookies, does not collect data that identifies you personally, and does not track you across other websites. The Klarleaf app itself contains no Umami and no analytics of any kind. Lawful basis: Legitimate interest in understanding site traffic (GDPR Art. 6(1)(f)).
What we don't collect
- No advertising identifiers (IDFA / GAID).
- No analytics or crash-reporting SDKs in the app.
- No precise location.
- No address book / contacts.
- No microphone access.
- No account: we never ask for your email or a password.
4. Where the data is stored
Your documents live on your iPhone, plus wherever you choose to share or automatically send them. We operate no database of documents. This website and the Umami instance that counts its page views run on a VPS in Germany.
5. Sub-processors
| Provider | Purpose | Region |
|---|---|---|
| Apple Inc. | App Store purchases | Apple's applicable region (see Apple privacy policy) |
| RevenueCat, Inc. | Purchase & entitlement management | USA (Standard Contractual Clauses) |
| Hetzner Online GmbH | Server hosting (website, analytics) | EU (Germany) |
| Umami (self-hosted) | Cookieless website analytics (klarleaf.com) | EU (Germany) |
6. How long we keep your data
Your documents are kept until you delete them or delete the app — we hold no copy to keep. Website analytics are kept in aggregate only.
7. Your rights (GDPR / FADP)
- Access: request a copy of all data we hold about you. For most people the honest answer is an anonymous purchase record at RevenueCat and aggregate page counts that cannot be tied back to you.
- Rectification: correct anything inaccurate.
- Erasure: delete a document in the app and it is gone from the device. Delete the app and everything local goes with it. Copies you shared or sent to your own NAS or Files folder are yours to delete there.
- Portability: your documents are already on your device as searchable PDFs, and are included in an encrypted device backup.
- Objection: the website analytics respect your browser's Do Not Track signal, and the app sends nothing to object to.
- Complaint: lodge a complaint with the Swiss FDPIC (Switzerland) or your national EU data protection authority.
To exercise any of these: info@klarleaf.com.
8. Children
Klarleaf is not directed at children under 13 and we do not knowingly collect their data.
9. Changes
We'll post material changes on this page and, where required, notify you in-app. Continued use after a change means you accept the updated policy.
10. Contact
Questions? info@klarleaf.com
← Klarleaf