Privacy policy

Who we are

Leora is a voice-driven bookkeeping application for small businesses and self-employed people. In data-protection terms we are the controller of the information described below. You can reach us at [email protected].

What we collect

Only what the product needs to work. Specifically:

• Your account. Email address, and optionally a first name, last name, or username if you provide one. If you sign in with Google, we receive your email address and name from Google — never your Google password.
• Voice recordings. Audio you record in the app, kept only until it has been transcribed. See retention below.
• Transcripts and transactions. The text of what you said, and the structured record produced from it — amount, type, category, item, counterparty, note, date.
• Your businesses. The names, types and currencies of the books you keep.
• Corrections. When you change something Leora got wrong, we record that it was changed. This is the single most useful signal we have for improving accuracy.

We do not collect contacts, location, photos, advertising identifiers, or anything from other applications on your device.

Who processes it

We use a small number of specialist providers. Each receives only what it needs for its job, and none of them receives your name, your email address, or your account identity alongside your audio.

• Clerk — accounts and sign-in.
• Supabase — the database holding your businesses, transactions and transcripts.
• Cloudflare — hosting for our API and this website.
• Groq, and OpenAI as a fallback — speech-to-text transcription.
• Anthropic — turning a transcribed sentence into a structured transaction.
• PostHog — product analytics, recording that events happened rather than what they contained.

We do not sell your data. We do not share it with advertisers. We do not use your financial records to train anyone's models.

How long we keep it

• Audio: transiently. A recording is written to your phone before anything is sent anywhere, which is what lets you record with no signal. It stays on your device until it has been transcribed — however long that takes — and is deleted from the device within a few days after that. We keep no copy of your audio on our servers. Once it has been transcribed, the recording itself is gone.
• Transcripts and transactions: until you delete them. These are your records; they persist so you can trace any figure back to the sentence that produced it.
• Your account: until you delete it. Deleting removes everything, permanently. See below.

Where it is stored

Your records are held in our Supabase project and our API runs on Cloudflare's network. Transcription and structuring providers process your audio and text in their own infrastructure, which may be outside your country. If that matters to you, please ask before signing up.

How it is protected

Access to your records is enforced in the database itself, not merely in the app. Every row is bound to your account by a policy that Postgres applies to every query, so another Leora user cannot read your data even if they request it directly rather than through the app. All traffic is encrypted in transit.

Your rights

You can exercise the two that matter most without asking us, from inside the app:

• Take it with you. Account → Export your data produces a CSV of everything.
• Remove it. Account → Delete account removes every business, transaction and transcript we hold, along with your sign-in. It is immediate and permanent, and we cannot restore it afterwards.

Depending on where you live you may also have rights to correction, restriction, or objection. Write to [email protected] and we will answer.

Children

Leora is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children.

Changes

If this policy changes materially we will say so in the app before the change takes effect, rather than quietly updating this page. The date at the top is always the date of the version you are reading.

---

A plain-language walkthrough of the same ground, with less formality, is at how your data is handled.