Effective date: September 21, 2026
ListLeaf is operated by WorkBook Works. This policy explains how information is handled when you use the ListLeaf website or app.
When you use an online meal or recipe feature, the request you type is sent through our Netlify-hosted service and may be processed by Anthropic to generate a response. Do not include sensitive personal information in a meal request.
When you choose Scan printed recipe, Scan a web address, or Scan My Pantry, the selected image is resized and sent through Netlify to Anthropic for on-demand analysis. Pantry Scan is limited to identifying visible grocery items and is not intended to make unrelated inferences about your home. ListLeaf does not intentionally retain Pantry Scan images after the request is processed. Proposed pantry items are shown for your review and are not saved to your pantry until you confirm them. Your account identifier and request counts are used to enforce AI allowances and prevent abuse. Generated dish images in the built-in recipe catalog are serving illustrations.
Saved recipes and their photos, pantry items, meal plans, cooking progress, and coupons are kept in an account-specific area on this device. They are not automatically synchronized to another phone. Export backup creates a file containing this information. The file goes only to the destination you choose through your device; anyone with the file can read it. Restoring it replaces the included local kitchen data after confirmation.
If you photograph a coupon or pantry shelf, ListLeaf uses your camera or photo picker only for that action. Coupon images are stored locally. Pantry Scan photos are sent for on-demand AI analysis only after you choose Analyze Photos and confirm the disclosure.
ListLeaf uses service providers including Netlify for hosting and server-side image preparation, Supabase for accounts and cloud data, Stripe for website payments, Apple for App Store billing, RevenueCat for mobile purchase verification, and Anthropic for optional AI meal and image-analysis features. These providers process information under their own terms and privacy practices.
When you choose to share, text, or copy a list, ListLeaf sends the list to the sharing method you select. If you choose an available third-party shopping provider, ListLeaf may record that you opened the shopping option, selected a provider, or continued to that provider, together with your account identifier, household identifier, item count, estimated total, session identifier, platform, and time. These shopping events help measure whether the connection is useful; they do not contain payment details or a record of your completed retailer purchase. The provider processes checkout under its own privacy policy. Featured-brand placements are labeled Sponsored. When these placements are displayed or used, ListLeaf records impressions, brand clicks, recipe views and add-to-list events, with campaign identifiers, a session identifier and browser/device user-agent information, to measure those placements. ListLeaf does not include an advertising-network SDK in this build.
You can delete local items in the app. Uninstalling the app generally removes locally stored app data according to your device settings. Signed-in users can permanently delete their ListLeaf account and synced cloud data from More → Account & sync → Delete account. You may also request help by emailing listleaf24@gmail.com from the address associated with the account.
We use reasonable safeguards, but no online service can guarantee absolute security. Keep your password private and contact us if you believe your account has been compromised.
ListLeaf is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
We may update this policy as ListLeaf changes. The effective date above identifies the latest version.
For privacy or support questions, contact listleaf24@gmail.com.