Last updated: May 2026
At Leaftin, your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data. We keep this simple and honest.
| Data | Why we collect it |
|---|---|
| Email address | To create your account, send receipts, and important notifications |
| Full name | To personalise your experience and display on your profile |
| Purchase history | To give you access to books you've bought and maintain your library |
| Bank account details (sellers only) | To process withdrawal payments to your bank |
| Book upload data (sellers only) | To list and sell your books on the platform |
| Device & usage data | To improve app performance and fix bugs |
We do not collect your card number, CVV, or banking credentials. All payment processing is handled securely by Flutterwave.
We do not use your data for advertising. We do not sell your data to any third party.
Your data is stored securely on Supabase, a cloud database provider with enterprise-grade security. All data is encrypted in transit using HTTPS/TLS. Sensitive fields (such as withdrawal PINs) are stored as hashes — meaning even we cannot read them.
Our servers are located in the United States (Supabase). By using Leaftin, you consent to your data being processed there.
We share the minimum necessary data with these trusted third-party providers:
| Provider | Purpose | Data shared |
|---|---|---|
| Flutterwave | Payment processing | Email, name, transaction amount |
| Supabase | Database & authentication | All account and transaction data |
We do not share your data with advertisers, data brokers, or any other third party beyond what is listed above.
Leaftin uses minimal cookies required for authentication — specifically to keep you logged in between sessions. We do not use tracking cookies, advertising cookies, or analytics cookies from third parties.
You have the right to:
To exercise any of these rights, email us at support@leaftin.com. We will respond within 14 business days.
We retain your data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required by law to retain certain records (such as financial transaction records, which we keep for 7 years per Nigerian financial regulations).
Leaftin is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
We take reasonable technical and organisational measures to protect your data, including:
No system is 100% secure. If you discover a security vulnerability, please report it to security@leaftin.com and we will address it immediately.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of Leaftin after changes means you accept the updated policy.
For any privacy-related questions or requests: