Last updated: 25 August 2026
Safeleaf is published by n12n. Contact: n12n.can@proton.me
Safeleaf collects nothing, and there is nothing about you we are able to read.
There is no Safeleaf account. We do not receive your data, your child's data, or any record that you use the app at all.
Everything the app knows lives on the two phones it is installed on, and moves between them directly. As of the date above, Safeleaf operates no server of any kind.
One honest exception, and it is about this website rather than the app: if you type your email address into the waitlist form, we have your email address. It is the only personal information Safeleaf ever holds about anyone, and The website below says exactly what happens to it.
Two commitments hold regardless of what we build later, and we would rather be held to these than to a claim about our servers:
On the child's phone, Safeleaf keeps:
On the parent's phone, Safeleaf keeps:
None of this is transmitted to us. It moves between the parent and child phones directly over your own local network, or by the parent showing a QR code that the child's phone photographs, or by the parent reading a numeric code aloud. As of the date above there is no Safeleaf service for it to reach even if it tried.
This section describes the app. The website is a separate thing and is covered under The website below — it is the one place we can hold anything about you at all.
| Permission | Why |
|---|---|
| VPN service | The mechanism that blocks apps from the network. The tunnel terminates nowhere — packets entering it are discarded, never forwarded, inspected, or sent to any host. |
| Query all packages | The policy is written in terms of apps, so the app must be able to list which apps exist in order to offer them to you. |
| Usage access | Per-app screen time and data figures shown on the parent's dashboard. Granted by hand, once, and revocable in Android settings. |
| Camera | Photographing a QR code to receive an unlock or complete pairing. No image is stored or transmitted; frames are examined for a QR code and discarded. |
| Notifications | Showing that enforcement is running, and telling a parent when their child asks for access. |
| Network state, internet | Detecting whether the phone is on wifi or cellular, so per-transport rules can be applied; and reaching the other phone on your local network. |
Safeleaf is used by a parent to manage a child's device, so it plainly concerns children. It collects no data from anyone, including children — so there is nothing for us to disclose, sell, share, retain, or delete, and no consent for us to gather.
Android tells the child that the device is managed. Safeleaf does not attempt to hide itself, and cannot be made to: the "managed by your organisation" notice remains visible in Settings. This is not a covert monitoring tool.
If you buy the paid unlock, the purchase is handled entirely by Google Play Billing. Google processes the payment and tells the app whether a purchase exists. We never see your name, card, address, or email. Google's handling of that transaction is covered by Google's own privacy policy.
A parent may point Safeleaf at a URL to update the child's app. That connection goes to the host the parent chose and to nowhere else. We do not operate it and receive no record of it.
mysafeleaf.ca is where this policy and our public pages live. It is ordinary web hosting, and it is deliberately not held to the same claims as the app — the app runs on your family's phones, the website runs on ours.
If you enter your email address to join the waitlist, we have your email address. That is the only personal information about anyone that Safeleaf ever holds. We use it to tell you when Safeleaf is available and nothing else. We do not sell it, share it, or hand it to an advertiser, and every message we send has a one-click unsubscribe.
Joining the waitlist is entirely optional and is not required to read anything here. The pages themselves carry no analytics, no advertising and no tracking scripts, and they do not load anything from a third party.
Our web host and, if we use one, our mailing provider necessarily see the address in the course of storing and sending — that is what hosting and email are. We will not add anything to this site that watches you.
None of this touches the app. The app has no account, sends us nothing, and does not know or care whether you ever visited this website.
Uninstalling the parent app removes everything it holds. Removing Safeleaf from the child's device requires a factory reset, which erases the device entirely. Since we hold no data about you, there is nothing to request deletion of from us — but if you would like written confirmation of that, write to the address above and you will get it.
If you joined the waitlist, the unsubscribe link in any message removes your address. You can also write to the address above and ask us to delete it, and we will.
If Safeleaf ever gains a feature that transmits anything anywhere, this policy will say so plainly and in advance, and the Google Play Data Safety listing will change to match. We will not quietly add a server.
n12n.can@proton.me