Privacy Policy

Last updated: September 18, 2026

Your privacy is important to us. It is Leero's policy to respect your privacy regarding any information we may collect from you across our apps, website https://leero.app, and other sites we own and operate.

Definitions

For the purposes of this Privacy Policy:

  • We, Our or Us means VLADIMIR SEVASTIANOV PR NOVI SAD, Gajeva 3A, Novi Sad, Serbia, the operator and data controller for Leero's processing described here. Contact: [email protected].

  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

  • Account means a unique account created for You to access our Service or parts of our Service.

  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

  • Personal Data is any information that relates to an identified or identifiable individual.

  • Service refers to Leero's apps and website.

  • Server means the computing infrastructure used to operate the Service, including cloud systems managed by Us, that store, process, and transmit data necessary to provide features such as authentication, synchronization, backups, and error reporting.

  • Crash Data refers to information related to the occurrence, analysis, and resolution of software or system crashes, errors, or malfunctions.

  • Sync Data means content that You create in the Service which is stored on Our servers in order to provide cross device synchronization. Sync Data may include book names, schedules, completion status, notes, due dates, collections, custom cover images, and related timestamps and identifiers.

  • Premium means a paid tier of the Service that enables additional features such as data sync.

  • Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • First name and last name
  • Email address
  • User ID
  • Crash Data

Sync Data

If You use Premium, We store Sync Data on Our servers to provide the sync feature and related functionality. Sync Data is generated by Your use of the Service and may include:

  • Books and sessions metadata such as titles, schedules, statuses, collections, moods, tags, notes and custom cover images.
  • State and history such as completions, progress and timestamps.
  • Technical identifiers needed to deliver sync such as a user or device identifier.

Camera and Photos

If You choose to use camera-based features in the app, Leero may request access to Your device camera.

Camera access is used only when You choose to:

  • Scan a book barcode or ISBN.
  • Take a photo to use as a custom book cover.

Barcode scanning uses the live camera preview to detect the barcode value needed for the feature. Leero does not use the camera in the background.

If You take a custom book cover photo, that image may be stored locally in the app and, if You use sync or backup-related features, may also be included in Your stored or synchronized book data.

Information from Third-Party Social Media Services

Leero allows You to create an account and log in to use the Service through the following Third-party Social Media Services:

  • Google
  • Apple

If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name and Your email address.

You may also have the option of sharing additional information with Leero through Your Third-Party Social Media Service's account. If You choose to provide such information and Personal Data, during registration or otherwise, You are giving Leero permission to use, share, and store it in a manner consistent with this Privacy Policy.

What we do with data

We collect the personal information You give Us such as Your name and email address and any information that You provide by filling in forms on Leero's apps, such as when You contact Us via email.

If You use Premium, We process and store Your Sync Data so that Your content remains consistent across Your devices, and so that We can provide features that depend on historical state such as streaks, statistics and backups.

If You use barcode scanning or custom cover photo features, We process camera-derived data only to provide those features and not for advertising purposes.

Use of Your Personal Data

Leero may use Personal Data for the following purposes:

  • To provide and maintain Our Service, including to monitor the usage of Our Service.
  • To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
  • For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
  • To contact You: To contact You by email or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
  • To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
  • To manage Your requests: To attend and manage Your requests to Us.
  • For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

Sync Data for Premium Users

Leero provides cross device sync for Premium users. To deliver this feature, Leero stores Sync Data on its servers. We do not sell Sync Data. We do not share Sync Data with third parties for their own marketing purposes.

Legal basis. Where applicable, We process Sync Data as necessary to perform the contract with You to provide the Service that You requested, including Premium sync features. We may also process Sync Data to pursue legitimate interests such as securing the Service and improving reliability, only where those interests do not override Your rights and interests.

Your choices. You can use local reading features without cloud sync. Contact [email protected] for help stopping cloud processing or deleting previously stored data. Cancelling a recurring subscription does not immediately stop processing while paid access remains active and does not delete existing cloud data. A web lifetime purchase has no recurring subscription to cancel. See Account deletion and retention below.

Disclosure of Your Personal Data

Law enforcement

Under certain circumstances, Leero may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

Leero may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation.
  • Protect and defend the rights or property of Leero.
  • Prevent or investigate possible wrongdoing in connection with the Service.
  • Protect the personal safety of Users of the Service or the public.
  • Protect against legal liability.

Google Analytics

Our public marketing website, https://leero.app, loads Google Analytics only after You accept optional analytics. You can reject it or withdraw consent using Cookie preferences. Essential storage remains available when You reject analytics. Older acknowledgements of our cookie banner do not count as this opt-in.

Analytics may process browser/device information, online identifiers, network information, and interactions on eligible public pages. Such information can be personal data; we do not describe it as fully anonymous. Our integration excludes account, authentication, contact, and payment routes and URLs containing query parameters or fragments. It omits referrer values and disables Google signals and advertising personalization. It does not access Your reading library. The web app at https://web.leero.app does not use marketing analytics. See our Cookies Policy and Google's privacy policy.

Web app storage and diagnostics

The web app stores reading data, preferences, and authentication tokens in Your browser, including a local SQL database persisted through IndexedDB. This supports local use and session continuity. Where supported, database snapshots are encrypted using WebCrypto AES-GCM and a non-extractable key stored in the same browser. If encryption or key storage is unavailable or fails, persistence may fall back to plaintext. This is not end-to-end encryption and does not protect against scripts running in the app origin, malicious extensions, or a compromised device.

Clearing site data, private browsing, browser eviction, or losing the encryption key can remove local data or make it unreadable. Cloud account deletion does not remotely erase every browser installation or exported file. Keep a portable export of important local-only content.

We use Sentry to diagnose crashes and errors. Reports may contain app version, environment, browser/platform details, stack traces, and diagnostic context about failed operations. Our reporting is designed to exclude passwords, authentication tokens, email addresses, reading content, and checkout URLs; it is not a tool for collecting Your library. Sentry and network providers may also process technical network information when receiving requests. See Sentry's privacy policy. Error reporting is distinct from optional marketing analytics.

Payments and support

LemonSqueezy acts as merchant of record for web purchases and processes checkout, billing, and refund information under its privacy policy. We use purchase identifiers and status information to link premium to Your Leero account and handle billing requests. Apple and Google process purchases made through their stores. Do not send full card details to Leero support.

When You contact us, we process Your contact information, message, and information You choose to provide to respond. In-app feedback may associate a feedback reference with Your account and device identifier to help us investigate. Share diagnostic files only after checking their contents; do not include passwords or private library content unnecessarily.

Access, export, and other rights

Settings includes a portable reading export in ZIP and CSV formats. ZIP includes more detailed reading records; CSV is a reduced spreadsheet representation. These exports cover supported live reading data and available local covers, not account/profile records, payment records, authentication tokens, diagnostics, or deleted content. They are not a complete response to every personal-data access request.

Email [email protected] to request access to other personal data or exercise applicable rights to correction, deletion, restriction, objection, or portability. We may need proportionate identity verification. Where processing relies on consent, You can withdraw it without affecting the lawfulness of earlier processing. You may complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection or another competent supervisory authority where applicable.

Processing purposes, providers, and retention

Where applicable, account, sync, backup, entitlement, and support processing is necessary to provide the service or respond to Your request; optional analytics relies on consent. Security and error diagnostics serve our legitimate interests in operating a reliable service, subject to Your rights. We retain records required to comply with legal obligations, including applicable accounting requirements.

Hosting, network delivery, authentication, email, diagnostic, and payment providers process data needed for their services. Providers may process data outside Serbia or Your country. Where required, international transfers must use an applicable adequacy decision or appropriate contractual safeguards; contact us for information about safeguards relevant to Your data. We do not sell Your reading data.

We retain active account and cloud content to provide the requested service until deletion, subject to required legal exceptions. Support, diagnostic, security, and billing records are retained according to their purpose and applicable legal requirements rather than indefinitely for unrelated use. Infrastructure recovery copies may persist until their retention cycle expires; deletion of active data is not a promise of immediate erasure from every recovery copy. Contact us for details of the retention applicable to a particular record.

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While Leero strive to use commercially acceptable means to protect Your Personal Data, Leero cannot guarantee its absolute security.

Account deletion and retention

You can delete Your Leero account in the App or at https://leero.app/account. Deletion removes Your Leero cloud data and server backups. If You initiate deletion in the App, that initiating installation may let You choose whether to keep or erase its own local data. Deletion from the website is cloud-only and never erases data stored by any App installation. Other installations keep their data and become local-only only after recognizing a generation-specific 410 response for this deletion. Generic expired or unknown credentials may only sign an installation out and do not establish that deletion occurred. We cannot delete exported backups or other files outside Our control.

Leero and Hizo products may share a login identity. Deleting Leero does not delete an active account for another product. The final shared login identity is removed only when no other product account remains.

Deleting an account does not cancel mobile subscriptions or request a refund. Web lifetime purchases have no recurring billing. Request any web refund separately under our Terms of Service. Payment, store and audit records may be retained or detached from Your account where legally required, including for tax, accounting, fraud prevention, dispute resolution or enforcement purposes.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Leero. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us by email [email protected].