Leevo Privacy Policy

This Privacy Policy explains how personal data is handled when you use the Leevo macOS app, visit the Leevo website, download Leevo, contact Leevo support, use referrals, or purchase and activate Leevo Pro.

1. Data Controller

Leevo is currently operated by an individual developer acting as a natural person, not by a registered company. For personal data processed to operate and support Leevo, the controller is:

• Legal name: Ninoska Cairos
• Email: nino.zip94@gmail.com

The controller's legally required identification and postal-contact details are provided in the Leevo Legal Notice. They are not repeated throughout every legal document to reduce unnecessary exposure of the individual developer's personal information.

Paddle is an independent controller and the merchant of record/authorised reseller for purchases completed through Paddle Checkout. Paddle's own privacy notice applies to its payment, tax, fraud-prevention, invoicing, and buyer-support activities.

2. Local-First App

Leevo is designed as a local-first desktop app. Leevo does not require a Leevo account and does not upload your recordings, project files, timeline metadata, exports, or custom watermark images to Leevo servers. Leevo does not sell personal data, use third-party advertising SDKs, or track you across unrelated apps or websites.

Leevo uses limited first-party product analytics to count downloads, count real app installations, operate referrals, prevent obvious abuse, and understand aggregate conversion from download to install. This does not include analytics about your recordings, editing activity, project content, exports, or custom watermark images.

Leevo also uses RevenueCat to validate and analyse purchase and entitlement events. This is purchase analytics and app functionality data, not analytics about your recordings or editing activity.

3. Data Processed

Data stored locally on your Mac

When you use the relevant features, Leevo may access or store:

• Project names, project files, raw recordings, autosaves, exports, and generated media.
• Timeline metadata, layout actions, source settings, export settings, and watermark settings.
• Custom watermark images you import.
• Local free export-credit state.
• A RevenueCat-generated anonymous App User ID stored in Keychain and purchase status cached by the RevenueCat SDK.
• A Leevo-generated anonymous installation token stored in Keychain for installation counting, referrals, and referral-credit sync.
• A Keychain-backed Leevo Pro entitlement cache, including activation and last-validation dates.
• macOS permission status for Screen Recording, Accessibility, Camera, and Microphone.

Website download and install analytics

When you download Leevo from the website or open the app after installation, Leevo may process:

• A download event containing timestamp, app version, download path, optional referral code, and optional source or campaign parameters.
• An anonymous installation record based on a locally generated random installation token. The raw token is generated and stored on your Mac; the backend stores a hash of the token.
• App version, first-seen and last-seen timestamps, and an optional RevenueCat anonymous App User ID if already available for purchase-entitlement logic.

Leevo does not use email, name, Apple ID, hardware serial number, machine name, MAC address, device fingerprint, raw IP address, recordings, editing metadata, project content, exports, or custom watermark images for download or installation analytics.

Referral data

If you use referral features, Leevo may process:

• Referral codes created for an anonymous installation.
• Referral-code redemptions, including the referring and invited anonymous installations.
• Referral credit grants, remaining referral-credit balance, lifetime referral credits earned, monthly referral reward limits, and timestamps.
• App version and optional RevenueCat anonymous App User ID where useful for support, entitlement reconciliation, or abuse prevention.

Referral data is used to operate the promotional referral program, grant and consume promotional credits, prevent self-referrals and repeated redemption, enforce caps, and troubleshoot support issues.

Purchase and entitlement data

When you open checkout, buy Leevo Pro, activate it, or restore access, RevenueCat and Paddle may process:

• A random RevenueCat anonymous App User ID associated with the Leevo installation.
• Product, transaction, entitlement, activation, refund, dispute, and purchase-status information.
• Purchase email, billing details, payment method information, tax information, IP address, and fraud-prevention data processed by Paddle. Leevo does not receive or store full payment-card details.
• Technical information required to operate checkout and entitlement validation, such as app, device, operating-system, locale, and network information.

The developer may access limited purchase, entitlement, and buyer-support information in RevenueCat or Paddle dashboards when needed to provide support, investigate fraud, or resolve a purchase issue.

Support communications

If you contact support, Leevo processes the contact details, message content, attachments, and technical information you choose to provide. Do not send full payment-card numbers, passwords, or unnecessary sensitive information.

4. Permissions and Recording Data

Screen Recording permission is required to preview and record selected displays, apps, or windows. Accessibility permission is required for real auto-resize and Window Stage control of external windows. Camera permission is required only when you select a camera source. Microphone permission is required only when you select an audio input.

These permissions allow Leevo to process the selected content locally on your Mac. Granting a macOS permission does not cause recordings or captured content to be uploaded to Leevo, RevenueCat, or Paddle. You can grant, deny, or revoke permissions in macOS System Settings.

5. Purposes and Legal Bases

Where the GDPR or similar law applies, Leevo relies on the following legal bases:

• Performance of a contract: to provide app functionality, operate requested referral features, activate and restore Leevo Pro, validate entitlements, and provide requested support.
• Legitimate interests: to secure Leevo, prevent fraud and licence or referral abuse, diagnose purchase problems, maintain limited first-party product analytics and purchase analytics, measure aggregate download-to-install conversion, and establish or defend legal claims, provided those interests are not overridden by your rights.
• Legal obligations: to comply with applicable tax, accounting, consumer-protection, law-enforcement, and regulatory requirements.
• Consent: where consent is specifically requested and legally required. You may withdraw consent at any time without affecting earlier lawful processing.

6. Service Providers and Recipients

• RevenueCat, Inc. processes end-user purchase and entitlement information on Leevo's behalf to validate purchases, maintain entitlement status, support restoration, prevent fraud, and provide purchase analytics. RevenueCat acts as a processor for this end-user information. See RevenueCat Privacy Policy and RevenueCat GDPR information.
• Paddle provides checkout as merchant of record/authorised reseller and independently processes buyer, payment, tax, fraud-prevention, invoicing, refund, and support information. See Paddle Privacy Notice.
• Supabase hosts Leevo's referral, anonymous installation, promotional credit, and download analytics records on Leevo's behalf.
• Vercel hosts the Leevo website and server routes used for downloads, referrals, and installation registration.
• Personal data may also be disclosed to professional advisers, courts, regulators, or authorities where reasonably necessary and legally permitted.

Leevo does not share your recordings, raw media, project files, timeline metadata, exports, or custom watermark images with RevenueCat, Paddle, Supabase, or Vercel.

7. International Transfers

RevenueCat, Paddle, Supabase, and Vercel may process personal data outside your country, including in the United States. Where required, transfers are protected using recognised safeguards such as adequacy decisions or approved standard contractual clauses. See each provider's privacy notice for details.

8. Retention and Deletion

• Local projects, recordings, autosaves, exports, imported images, and settings remain on your Mac until you delete them, delete the relevant project, or remove the app and its local data.
• The Leevo Pro offline entitlement cache is stored in Keychain and is valid for a limited validation window. It may be deleted after a refund, dispute, invalid purchase, failed validation, or loss of entitlement.
• The RevenueCat anonymous App User ID, Leevo anonymous installation token, and offline Pro cache are stored in Keychain and may remain after uninstall unless removed from Keychain or app data. Backend installation, referral, promotional credit, and download analytics records are retained only as long as reasonably needed to operate Leevo, measure aggregate conversion, prevent abuse, resolve disputes, and comply with legal obligations.
• Support communications and limited purchase-support records are retained only as long as reasonably necessary to answer the request, comply with legal obligations, resolve disputes, and prevent abuse.
• RevenueCat, Paddle, Supabase, and Vercel retain data according to their own agreements, privacy notices, and legal obligations.

Uninstalling Leevo may not automatically remove Keychain data or records held by Leevo, RevenueCat, Paddle, Supabase, or Vercel. Contact Leevo for help with Leevo-controlled or RevenueCat-related deletion requests and contact Paddle directly for data Paddle controls.

9. Your Rights

Depending on your location, you may have rights to access, correct, erase, restrict, object to processing, or receive a portable copy of your personal data, and to withdraw consent where processing is based on consent.

To exercise rights relating to Leevo-controlled data or RevenueCat end-user data, contact nino.zip94@gmail.com. Leevo may need to verify your request and may ask for your RevenueCat App User ID, purchase details, referral code, or other information reasonably needed to locate the relevant records. To exercise rights relating to Paddle-controlled data, use Paddle Privacy Preferences or contact Paddle as described in its privacy notice.

You may also lodge a complaint with your local data-protection authority. In Spain, this is the Agencia Española de Protección de Datos.

10. Security

Leevo uses reasonable technical and organisational measures appropriate to the nature of the data, including local macOS protections, Keychain storage for the offline entitlement cache and anonymous installation token, HTTPS connections, hashed installation tokens in the backend, row-level security and server-side access controls for Supabase records, and access controls used by RevenueCat, Paddle, Supabase, and Vercel. No method of storage or transmission is completely secure.

11. Automated Decisions

Leevo does not make decisions producing legal or similarly significant effects based solely on automated processing. Automated entitlement checks may enable or disable Pro features based on purchase status.

12. Children

Leevo is not directed to children and is not intended to be purchased or used by anyone who cannot legally agree to these terms without a parent or guardian. Leevo does not knowingly collect personal data from children.

13. Changes

This policy may be updated when Leevo's features, data handling, purchases, or service providers change. Material changes will be communicated where required by law. The date at the top identifies the current version.

14. Contact

For privacy requests, permission questions, or deletion help, contact nino.zip94@gmail.com.