Privacy Policy: Leeward

Last updated: 3 September 2026

Leeward is built to respect your privacy. This policy explains what the app does and does not do with your information. Plain language, no lawyer-speak.

The short version

Your tracking data never leaves your device. Leeward has no account, no login, and no server of ours. Everything you create (your counters, days, notes, reflections, and history) is stored only on your phone.

What we store, and where

• On your device only: all your counters and their data (titles, dates, notes, your “letter to your future self,” slip history, settings). We cannot see any of it. It is never uploaded to us.
• Backups: if you use Export, a backup file is created and handed to your device’s share sheet (or saved to a folder you pick) so you can keep it wherever you choose, such as your own Google Drive or Files. You may optionally protect it with a password. We never receive or store that file.

What we do NOT collect

• No accounts, names, emails, or phone numbers.
• No analytics, tracking, advertising IDs, or behavioural profiling.
• No ads, and no selling or sharing of data, because we have none to sell.

App lock

If you set an app PIN or enable fingerprint/face unlock, this is handled entirely on your device. Your PIN is never stored in readable form and never sent anywhere; biometric matching is performed by your device’s operating system, which never shares your biometric data with the app.

Purchases (Leeward Plus)

If you buy Leeward Plus, the purchase is processed by Google Play Billing and managed via RevenueCat, our subscription infrastructure provider. To validate your purchase and restore it across your devices, these services process a purchase token and an anonymous app-generated user identifier. They do not receive your counters or any of your tracking data. Their handling of payment data is governed by their own privacy policies:

• Google Play: policy.play.google.com
• RevenueCat: revenuecat.com/privacy

Notifications

If you enable reminders, they are scheduled locally on your device. No reminder content is sent to any server.

Children

Leeward is not directed at children under 13 and collects no personal information from anyone.

Changes

If this policy changes, we’ll update this page and the “last updated” date.

Contact

Questions? Email us at hello@sandio.app.