Privacy Policy - Leia

Last Updated: February 9, 2026 Effective Date: February 9, 2026

Introduction

Leia is a mobile application developed and operated by Leia Labs (“we,” “us,” or “our”). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, store, and protect your information when you use the Leia mobile application (the “App”). By using Leia, you agree to the collection and use of information in accordance with this policy.

Contact Information:

Email: contact@leialabs.io
Support: support@leialabs.io

1. Information We Collect

1.1 Information You Provide

When you use Leia, we collect information that you voluntarily provide, including:

Account Information:

Email address (used for authentication and account recovery)
Display name (optional, set by you)
User ID (automatically generated for your account)

Pet Information:

Pet name, species, breed, sex, and birthdate
Pet photos (stored securely and only visible to you)
Physical characteristics (color, size, weight history)

Health & Medical Records:

Vaccination records (vaccine name, date, veterinarian, notes)
Deworming records (product name, date, dosage, notes)
Weight measurements and history
Medical events (consultations, surgeries, treatments)
Allergy information
Veterinary clinic information (name, contact)

User Preferences:

Notification settings
App theme preferences
Onboarding completion status

1.2 Information Collected Automatically

We automatically collect certain information when you use the App:

Usage Data:

Features used and frequency of use
App screens visited
Actions performed (pet created, vaccine added, etc.)
Session duration and frequency
Device information (model, operating system version)
App version and build number

Analytics Data: We use Firebase Analytics to understand how users interact with the App. This includes:

User engagement metrics
Feature adoption rates
User retention statistics
Crash and error reports

Device & Technical Data:

Device type and model
Operating system and version
App version
Device language and region settings
Push notification tokens (for reminder functionality)
IP address (anonymized)

1.3 Information We Do NOT Collect

We do not collect:

Precise geolocation data
Contact lists or phone numbers
Financial information or payment details
Microphone or camera access (except when you choose to take photos)
Social media credentials or friend lists
Biometric data

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Primary Service Functions

Account Management: Create, maintain, and secure your account
Data Synchronization: Sync your pet data across your devices
Cloud Storage: Securely store your pet information in the cloud
Notifications: Send reminders for upcoming vaccinations and deworming
Data Migration: Automatically migrate local data to cloud when you sign in

2.2 App Improvement

Analytics: Understand how users interact with features
Performance Monitoring: Identify and fix bugs and crashes
Feature Development: Prioritize new features based on usage patterns
User Experience: Improve app design and usability

2.3 Communication

Service Updates: Notify you of important changes or updates
Support: Respond to your questions and support requests
Account Security: Alert you to security-related issues

2.4 Legal Compliance

Comply with applicable laws and regulations
Respond to legal requests and prevent fraud
Enforce our Terms of Service

3.1 We Do NOT Sell Your Data

Leia Labs does not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Service Providers

We share information with trusted third-party service providers who help us operate the App:

Firebase (Google LLC):

Purpose: Backend infrastructure, authentication, database, storage, analytics, and crash reporting
Data Shared: All data mentioned in Section 1
Location: Data is stored on Google Cloud Platform servers (see Firebase Privacy Policy)
Privacy Policy: https://firebase.google.com/support/privacy

Data Processing Agreement: Firebase acts as a data processor on our behalf and is bound by data processing agreements that comply with GDPR and other privacy regulations.

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

Legal processes (subpoenas, court orders)
Requests from government or regulatory authorities
Protection of our rights, property, or safety
Emergency situations involving danger to persons

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice in the App before your information is transferred.

4. Data Storage and Security

4.1 Where We Store Data

Your data is stored using Firebase services, which are hosted on Google Cloud Platform infrastructure. Data may be processed and stored in:

United States
European Union
Other regions where Google operates data centers

Firebase complies with major international data protection standards including GDPR, CCPA, and SOC 2.

4.2 Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL
Encryption at Rest: Data stored in Firebase is encrypted at rest
Firestore Security Rules: Access controls ensure users can only access their own data
Authentication: Firebase Authentication with secure session management
Access Controls: Limited employee access to production data

Operational Safeguards:

Regular security audits and updates
Monitoring for suspicious activities
Incident response procedures
Data backup and recovery systems

User Controls:

Password protection for accounts
Email verification
Account deletion capabilities

4.3 Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specific retention periods:

Active Accounts: Data retained indefinitely while account is active
Deleted Accounts: Data permanently deleted within 30 days of account deletion request
Analytics Data: Aggregated, anonymized analytics retained for up to 24 months
Crash Logs: Retained for 90 days for debugging purposes

You can request deletion of your account and data at any time through the App settings or by contacting support@leialabs.io.

5. Your Privacy Rights

Depending on your location, you may have the following rights:

5.1 Access and Portability

Access: View all your data within the App
Export: Request a copy of your data in a portable format (JSON/PDF)
Download: Export your pet health records as PDF

5.2 Correction and Update

Edit your account information in App settings
Update pet information at any time
Correct inaccurate health records

5.3 Deletion

In-App: Delete your account from Settings > Account > Delete Account
Email Request: Contact support@leialabs.io to request account deletion
Timeline: Complete deletion within 30 days

5.4 Opt-Out Rights

Notifications: Disable notifications in App settings or device settings
Analytics: While you cannot disable analytics entirely, we only collect aggregated, non-identifying usage data

5.5 Data Restriction

Request restriction of data processing (GDPR)
Object to processing for certain purposes

5.6 Complaint Rights

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your privacy rights.

For EU residents: Contact your local Data Protection Authority

For California residents: California Attorney General’s Office https://oag.ca.gov/contact/consumer-complaint-against-business-or-company

6. Children’s Privacy

Leia is intended for general audiences and is suitable for all ages. We do not knowingly collect personal information from children under 13 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@leialabs.io, and we will delete such information.

7. International Data Transfers

If you are located outside the United States, please note that your information will be transferred to and processed in the United States and other countries where our service providers operate.

By using Leia, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

For EU/EEA users, we rely on:

Standard Contractual Clauses approved by the European Commission
Firebase’s compliance with GDPR requirements
Google Cloud Platform’s data protection certifications

8. Third-Party Links

The App may contain links to third-party websites or services (e.g., veterinary clinic websites). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

9. Cookies and Tracking Technologies

Leia does not use cookies in the traditional web sense. However, we do use:

Firebase Analytics SDK: Collects app usage data
Firebase Crashlytics SDK: Reports crashes and errors
Local Storage: Stores app preferences and temporary cache on your device

You can disable analytics tracking by contacting us, though this may affect our ability to improve the App.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

Categories of personal information collected
Purposes for collection
Third parties with whom we share information

10.2 Right to Delete

Request deletion of your personal information
Subject to certain exceptions

10.3 Right to Opt-Out

We do not sell personal information, so no opt-out is necessary

10.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights

To exercise these rights: Email support@leialabs.io with subject “CCPA Request”

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

11.1 Legal Basis for Processing

We process your data based on:

Consent: You provide consent when creating an account
Contract: Processing necessary to provide the service
Legitimate Interests: Improving the App and preventing fraud

11.2 Data Controller

Leia Labs is the data controller for your personal information.

11.3 Data Protection Officer

For GDPR-related inquiries: Email: contact@leialabs.io Subject: “GDPR / Data Protection”

Right to access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object
Rights related to automated decision-making

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes in our practices
Legal or regulatory requirements
New features or services

How we notify you:

Material Changes: Email notification to registered users + in-app notice
Minor Changes: Updated date at the top of this policy
Review: We encourage you to review this policy periodically

Effective Date: Changes become effective when posted unless otherwise stated.

Archive: Previous versions available upon request at contact@leialabs.io

13. Data Breach Notification

In the unlikely event of a data breach that affects your personal information:

We will notify affected users within 72 hours of discovery
Notification will include nature of the breach and steps taken
We will report to relevant authorities as required by law

By using Leia, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described.

You may withdraw consent at any time by:

Deleting your account
Uninstalling the App
Contacting us at support@leialabs.io

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

Email:

General inquiries: contact@leialabs.io
Support & account deletion: support@leialabs.io

Response Time: We aim to respond to all inquiries within 5 business days.

Mailing Address: Leia Labs Santiago, Chile

16. Summary

We collect: Account info, pet data, health records, usage analytics We use it for: Providing the service, syncing data, sending reminders, improving the app We share with: Firebase/Google (service provider) only - we do NOT sell data Your rights: Access, update, delete, export your data anytime Security: Industry-standard encryption and access controls Contact: support@leialabs.io for questions or data deletion

End of Privacy Policy