Privacy, clearly explained

The provider named in the provider details is the contact for this website and Leon support. Use that address or email for privacy questions. There is no Leon server account holding a copy of your family’s app data.

Leon saves profile names or nicknames and avatars, program drafts, the last valid program, mission progress, projects, and records of completed work and help used, including dates. Language preferences are also stored. These records let you return to your work and keep up to six profiles separate.

The app keeps a previous valid family save for recovery. It does not automatically send these records to the provider. There is no analytics or advertising SDK, public chat, or child registration. The family album’s labels describe activity; they are not a validated assessment.

Adults can rename or remove profiles in the family area and remove projects in the workshop. At least one profile must remain. The previous-save recovery copy can still contain earlier data until replaced by a later valid save. Legacy migration data may also remain on the device.

A family export includes names, progress, programs, and projects. You choose its destination and recipients through system file controls. Copies in email, cloud folders, device backups, or on another device are separate from the app and are not removed by deleting a profile. The provider cannot remotely inspect or delete purely local work.

Leon uses Apple’s StoreKit services to load product information and check verified purchase status. Production purchases are not available yet. Apple will process any future purchase under Apple’s terms and privacy information. The app reads product identifiers and expiry or revocation information to decide access; it does not receive payment-card details or send transaction records to a Leon backend.

Optional reading aloud uses Apple’s system speech. The app makes no microphone recordings. System backups may include app data depending on your device settings, even though Leon has no automatic cloud-sync feature.

Cloudflare, Inc., USA, delivers and protects this static website. Website requests involve technical data such as IP address, requested URL, request time, browser information, and routing or security information. This processing allows pages to load and helps detect faults or abusive traffic.

The website code has no analytics service, advertising, signup, contact form, cookies, or browser storage. Cloudflare’s network processing is separate from that statement; it does not mean that an internet request is anonymous.

Cloudflare uses a global network and may process technical request data outside your country, including in the United States. Its published data-processing terms describe processor obligations, subprocessors, and international-transfer safeguards, including applicable standard contractual clauses. These hosting arrangements do not upload local Leon profiles or projects.

Sending an email is your choice. The provider and email-delivery services process your address, message, and any information you include to answer the request. Please use made-up examples and omit children’s names and files. Support is addressed to adults; there is no automatic diagnostic upload.

Support correspondence is kept only as needed to handle the request, related follow-up or disputes, and applicable legal duties. The retention of technical hosting data depends on delivery, fault diagnosis, security, and the service provider’s applicable retention arrangements.

Where the GDPR applies, website delivery and security rely on legitimate interests in a functioning, secure service (Article 6(1)(f)); support needed for a contract or requested pre-contract steps relies on Article 6(1)(b), and other support on Article 6(1)(f). Required legal records rely on Article 6(1)(c).

You may request access, correction or deletion of personal data held by the provider. Depending on applicable law and circumstances, restriction, portability and objection rights also apply; you may complain to the competent supervisory authority. Consent, if separately requested for a future purpose, can be withdrawn for that purpose.

Explain your request using the contact in the provider details. Do not send a child’s backup or identity document with an initial request. We may need proportionate information to identify the records involved.