LeafLog

Privacy Policy

Last updated: September 29, 2026

1. Controller

Lukas Kuhlen
Burgfeld 6
41748 Viersen
Germany
Email: leaflog@kuhlen-digital.de

2. What this is about

LeafLog is an app for adult cigar enthusiasts. Among other things, it enables you to manage a collection and humidors, document tastings, research the cigar catalogue, and use an optional AI-powered cigar scan.

3. Data we process and why

3.1 Account and sign-in

When you create or use a LeafLog account, we process, in particular, your email address, a technical user identifier, sign-in status, and information that you voluntarily add to your profile, such as a display name and profile picture. This processing is used to provide your account, enable sign-in, and protect against misuse.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to use LeafLog, and Article 6(1)(f) GDPR for security and misuse prevention.

3.2 Collection, humidors, and tastings

We store the content you create in LeafLog: for example, cigars in your collection, inventory and purchase information, humidor names, readings, wish lists, favourites, tasting notes, ratings, flavour entries, and photos. This data is used solely for the app features you choose to use.

Tastings and profile content are private by default. If you explicitly make a tasting or profile information public, it may be visible to other LeafLog users. You can change this setting again in the app.

The legal basis is Article 6(1)(b) GDPR; where you actively choose to publish content, Article 6(1)(a) GDPR additionally applies.

3.3 Camera, photo library, and AI scan

Use of the camera and photo library is optional. When you start a cigar scan, you take a photo of the cigar band and, optionally, a second photo of the cigar format. The selected images are processed for identification only when you explicitly request it. Scan photos are not permanently stored as user or catalogue photos.

For AI analysis, we send the scan image to OpenAI through our server function. The image and information derived from it for identification are processed, such as readable text on the cigar band, a possible brand or series, and shape characteristics. Processing is performed to provide the scan function you selected on the basis of Article 6(1)(b) GDPR. Camera permission is granted through your device permissions.

3.4 Bluetooth sensors

You may voluntarily connect compatible Bluetooth sensors to a humidor. LeafLog then processes readings such as temperature and humidity, the sensor assignment you choose, and associated timestamps. LeafLog does not determine your location in this process. Processing is carried out to use this optional feature under Article 6(1)(b) GDPR.

3.5 Purchases and subscriptions

When you subscribe or purchase scan credits, payments are handled exclusively by Apple. We do not receive payment or credit card information. To assign your entitlement, we process only the purchase and transaction information provided by Apple, such as product identifier, purchase status, and expiry date. The legal basis is Article 6(1)(b) GDPR.

3.6 iCloud Drive backup

If you use LeafLog Aficionado and iCloud Drive is available on your iPhone, LeafLog can create a backup in your personal iCloud Drive storage automatically and when you explicitly request one. The backup contains your profile nickname, humidor and inventory data, and tasting data such as ratings, notes, flavours, occasion, pairing, and duration. Profile pictures and tasting photos are not part of this backup.

LeafLog creates a backup file named LeafLog-Backup.json; a newer backup replaces the previous one. Processing takes place to provide the backup feature you use under Article 6(1)(b) GDPR. iCloud Drive is provided by Apple under your Apple ID.

4. Recipients and service providers

We use carefully selected service providers that process personal data only on our instructions and to the extent required:

Where data is processed outside the European Economic Area, this takes place only under the conditions of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards such as standard contractual clauses.

5. Retention period

We store account data and your private content for as long as your account exists and the data is required to provide LeafLog. Public content remains visible until you delete it or withdraw its publication. iCloud Drive backups remain in your iCloud Drive until they are replaced by a newer backup or deleted by you in iCloud Drive. After a valid deletion request, we generally delete your account and associated personal data within 30 days, unless statutory retention obligations or legitimate reasons require longer storage.

6. Delete your account

You can delete your LeafLog account and the associated personal data directly in the app under Profile. Alternatively, you can request deletion by email at leaflog@kuhlen-digital.de. Please send the request from the email address associated with your LeafLog account.

7. Your rights

Subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may withdraw consent you have given at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

8. Changes to this policy

We will update this Privacy Policy if LeafLog features or legal requirements change materially. The current version is always available on this page.