One policy for Android and iOS. Features and permissions vary by platform and app version. Language and currency selection, app open ads and ad privacy settings apply only to versions that support them.
Revised policy effective: 2026-10-30
1. The app and its basic approach
LEEBI is a personal record app for calendars, notes and journals, finances, goals and contacts on Android phones, iPhone and iPad. No account registration is required. This policy applies to both platforms, with differences identified below.
Records you create are stored on your device by default. The operator does not run an internet server to store those records. User-initiated backups, PC connections and feedback, and information handled by advertising and payment services, are described separately below.
2. Information processed on your device
The app processes event titles, times and notes; note and journal text and attached photos; locations you add; and photo metadata such as capture date, device model and location.
It stores income, expenses and transfers, amounts, categories and memos, accounts and cards and their balances, budgets and recurring rules, separate currency books, and language and currency settings.
It stores Mandalart goals and action plans and contact information: names, phone numbers, organizations, memos, business-card photos and contact history. The app lock PIN is stored as a hash, not as plain text.
3. Processing and secure storage
Records come from your entries, selected photos or payment messages you paste. Business-card OCR and payment-message analysis run on the device; the photos and message contents are not sent to an external server for that analysis. You can review and correct suggested results before saving.
Displaying an address for a location may use location and geocoding services supplied by the operating system provider, such as Android. That provider handles the information under its policies; the app operator does not receive or retain your location.
The PIN hash is kept separately from ordinary records in Keystore-backed secure storage on Android and Keychain on iOS. The operating system performs biometric authentication; the app does not receive raw fingerprint or face data. The operator does not sell records or send their contents to advertising or payment services. Exports and connections you choose are described below.
4. Advertising and consent (Google AdMob)
Free users may see banner ads. Supported versions may show app open ads on a loading screen at launch or when returning. The Android multilingual development version skips the initial launch and checks consent, subscription, lock status and frequency limits on return. Timing on iOS depends on that version’s implementation. The last display time may be saved on the device for frequency control.
The AdMob SDK may collect and transmit Android advertising ID and app set ID, iOS advertising ID (IDFA) where permitted, device details such as model, operating system and language, IP address and approximate location derived from it, interactions such as ad views and clicks, and crash and performance diagnostics. These are used for ad delivery, permitted personalization, measurement, diagnostics and fraud prevention.
Google and advertising partners handle this information, potentially on servers abroad. See Google’s policies and the relevant consent screen for partners and retention and deletion practices. The operator cannot directly delete all information held by Google.
Where required, including the EEA, UK and Switzerland, Google’s consent tools provide information and choices. Advertising starts only after ad request eligibility is confirmed and does not start if that check fails. Completing a consent response does not mean consenting to all personalized advertising.
Where supported by the region and version, use Ad privacy settings in More to review, change or withdraw your choices. Android’s device Google/ad settings provide advertising ID controls; on iOS, manage tracking permission in Settings → Privacy & Security → Tracking. Apple’s authorization process is followed where tracking permission is required. Ads are not shown to users confirmed as Premium or Pro, and the ad-serving SDK is not newly initialized for them.
5. Subscriptions (Google Play and Apple App Store)
Google Play handles Android subscription payments, renewals, cancellations and refunds; Apple App Store handles them for iPhone and iPad. The app does not receive or store payment method details such as card numbers.
To determine tier and benefits, Android uses purchase and subscription information from Google Play, while iOS uses StoreKit information such as product and transaction identifiers, active status and expiry dates. Status may be cached on the device. Store billing currency is separate from your selected ledger currency.
Payment information is handled under the relevant store’s terms and Google’s or Apple’s Privacy Policy. Manage or cancel subscriptions in the subscription settings of the applicable Google Account or Apple Account.
6. Optional permissions
Camera: taking photos for notes, journals and business cards. Photos/media: selecting and attaching photos. Notifications: event and note reminders.
Location: attaching your location when you choose to add it. Biometrics: unlocking through supported Android authentication or Face ID/Touch ID on iOS. The iOS Local Network permission is used for PC connections in supported versions. The operating system performs biometric authentication; the app does not receive raw biometric data.
Denying a permission limits only the features that need it. Other features remain available. You can manage permissions in device settings.
7. Backups and exports
When you request it, records are exported to a backup file, including currency books. Attached photo files themselves and the PIN are not included in the JSON backup. Please keep photos separately.
Files are saved on the device or to a destination you choose, not automatically sent to the operator. Cloud, email or sharing services and recipients you choose may process the files under their policies and your settings. Exported files, including Markdown (.md), contain selected records, so manage where they are stored and with whom they are shared.
8. PC connection (Pro)
In supported versions, starting a PC connection opens a service on your phone for a PC browser on the same Wi-Fi network. Enter the six-digit code shown on the phone to view and edit records.
Records and photos travel directly between your device and PC, not through the operator’s internet server. The source records remain on the device. Connection tokens are used in connection-server memory and the paired PC browser and are invalidated when the connection ends.
This local connection is not encrypted with HTTPS. Use only a trusted private network and stop the PC connection when finished. On Android, the server stops when you stop the connection or terminate the app. Supported iOS versions stop the server when you leave the connection screen or background the app; keep that screen open.
9. Retention, deletion and requests
You can edit or delete records in the app or clear app data on the device. Uninstalling removes ordinary local app storage, but iOS Keychain lock settings may remain after reinstallation. Deleted records cannot be recovered without a separate backup.
Exported files, shared copies, device or cloud service backups and information handled by Google or other external services must be managed separately. Check those services’ deletion and recovery policies. Contact the address below for privacy requests, including access, correction or deletion inquiries.
10. Intended age group
The app is intended for adults aged 18 and over, not for people under 18. It does not separately collect dates of birth or identity documents to verify age.
11. Feedback
Choosing Send feedback opens a draft in your email app. It may include app version, device details and subscription tier. You can review and edit it before sending it yourself.
The operator and your selected email service handle the sender address, message and attachments to respond to your inquiry. Remove sensitive records before sending. Requests to delete inquiry information can also be sent to the email below.
12. Changes and contact
The policy may be revised for changes to laws, policies or the service, with notice on this page. All three languages describe the same practices. Please report any differences using the contact below.
Operator: HY3D Co., Ltd. (㈜하이쓰리디). Production brand: LEEFORM STUDIO. Email: seenell25@gmail.com