Privacy Policy

The short version: Leni collects only what it needs to work. We do not sell your data. We do not share it with advertisers. Your faith life is yours.

This privacy notice for Wildbox LLC (doing business as Leni) describes how and why we collect, store, use, and share your information when you use our mobile application Leni or visit lenilabs.com. We collect personal information you voluntarily provide when you register or contact us. We do not process sensitive personal information such as racial or ethnic origin, sexual orientation, or religious beliefs for targeting or profiling purposes. We do not receive any information from third parties. We do not sell your personal information to third parties, and we keep your information only as long as necessary for the purposes described in this notice. Questions or concerns can be sent to wildboxapps@gmail.com.

We collect personal information you voluntarily provide when you register, express interest in our services, or contact us. This may include your name, email address, password (stored in hashed form, we never see your plain-text password), a profile photo if you upload one, and payment details processed by Apple and RevenueCat (we never store full card numbers).

Sensitive information: with your consent, we process your faith background, spiritual goals, and topics of interest that you share during onboarding, used solely to personalize your experience and never shared with advertisers or data brokers.

Application data: with permission, we may access your microphone for the Capture feature and your photo library solely to select a profile photo. We also automatically collect device information, mobile device ID, model, and operating system, and may send push notifications you can opt out of. We do not collect precise location data, and we do not read your contacts or camera except when you actively use the Capture feature.

Information automatically collected includes log and usage data, device data such as IP address and browser type, and app performance data such as crash reports, none of which directly identifies you.

We process your personal information to facilitate account creation and authentication, to deliver Bible reading, daily plans, Guide AI responses, and prayer journaling, to respond to inquiries and offer support, to send administrative information, to evaluate and improve our services, and to comply with legal obligations. We do not use your journal entries, prayers, notes, or Guide AI conversations to train AI models.

We may share information with specific third-party vendors who help us run the app. OpenAI and Anthropic (Claude Sonnet) provide AI infrastructure that powers the Guide AI and transcription features; when you send a message or recording, the text content is sent to their APIs to generate a response. RevenueCat manages subscriptions and receives your user ID and purchase receipts, never your faith content or journal entries. Apple App Store processes payments for iOS subscriptions. Neon hosts our encrypted database, and Uploadcare handles profile photo uploads.

Before any message or recording text is sent to OpenAI or Anthropic for the first time, Leni shows an in-app consent prompt explaining what is sent and to whom. You must explicitly agree before any data is transmitted, and you can withdraw this consent anytime in Profile, Settings, Data Controls. Your name, email, faith profile, payment information, and device identifiers are never sent to these AI providers. We do not use advertising networks, share data with data brokers, or sell your personal information to anyone, ever.

We may use cookies and similar tracking technologies on our website at lenilabs.com to keep you signed in, remember your preferences, and understand how pages are used. The mobile app does not use browser cookies; it uses secure local storage on your device for session and preference data. You can set your browser to refuse cookies, though some parts of the website may not function properly, and we do not currently respond to browser do-not-track signals.

Our services offer the ability to register and log in using a third-party account such as Google. Where you choose to do this, we receive basic profile information such as your name, email address, and profile picture, used only for the purposes described in this notice. We do not control other uses of your information by your social media provider and recommend reviewing their privacy policy.

If you are in the EU, UK, or Canada, we rely on your consent, the performance of a contract, our legitimate interests, legal obligations, or the protection of vital interests as the legal bases for processing your personal information, and you can withdraw consent at any time by contacting us.

We keep personal information only as long as necessary for the purposes described in this notice. Account and profile data is retained while your account is active and deleted within 30 days of account deletion. Notes, prayers, reflections, and saved verses are retained while your account is active and deleted with your account. Audio recordings submitted via Capture are deleted immediately after transcription completes. Transcripts and Guide Brief content are retained until you delete them or your account. Usage and analytics data may be retained in anonymized form for up to 2 years, and backup copies may persist for up to 90 days before being fully purged.

We use administrative, technical, and physical security measures to protect your information, including encryption of data in transit using TLS/HTTPS and at rest in our database, passwords stored using strong hashing (argon2) so we never see your plain-text password, secure token-based authentication with short-lived sessions, and access controls limiting which team members can reach your data. No method of transmission or storage is ever 100% secure, and if you believe your account has been compromised, please contact us immediately at wildboxapps@gmail.com.

We do not knowingly solicit data from or market to children under the age of 13. By using the Services, you represent that you are at least 13, or that you are the parent or guardian of a minor and consent to that minor's use of the Services. If we learn that personal information from a user under 13 has been collected without verifiable parental consent, we will deactivate the account and delete that data from our records as quickly as reasonably practical. If you become aware of any data we may have collected from children under 13, please contact us at wildboxapps@gmail.com.

You can access, export, or delete your data at any time from the app's settings, or by emailing us. All users have the right to access a copy of the personal information we hold, request correction of inaccurate information, request deletion of your account and data, export your journal entries, prayers, and saved verses, withdraw consent, and object to how we use your data by emailing us; we respond within 30 days.

If you are located in the EU, UK, or EEA, you additionally have the right to access, rectify, and erase your personal data, restrict or object to its processing, request data portability, not be subject to automated decision-making, and lodge a complaint with your local data protection authority.

To review or change your account information, log into your account settings, or go to Profile, Settings, Data Controls, Delete Account to permanently delete your account and data, or contact us at wildboxapps@gmail.com. You can unsubscribe from marketing communications at any time using the link in any email or by replying STOP to text messages, though we may still send service-related communications necessary for your account. We do not currently respond to browser do-not-track signals, as no uniform technology standard for these signals has been finalized.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have specific rights regarding your personal information, including the right to know whether we are processing your data, the right to access it, the right to correct inaccuracies, the right to request deletion, the right to obtain a copy of the data you have shared with us, the right to non-discrimination for exercising your rights, and the right to opt out of targeted advertising, the sale of personal data, or profiling. We do not sell personal data or use it for targeted advertising or profiling.

In the past twelve months we have collected identifiers such as your name and email, commercial information such as purchase history, internet activity such as app usage data, audio recordings submitted via the Capture feature (deleted after transcription), personalization inferences, and sensitive personal information limited to the faith background and spiritual goals you choose to share. We do not collect protected classification characteristics, biometric information, precise geolocation, or professional or employment information.

California residents may request information under the Shine the Light law about disclosures to third parties for direct marketing, and users under 18 residing in California may request removal of content they have publicly posted. To exercise any of these rights, contact us at wildboxapps@gmail.com; authorized agents may need to provide proof of authorization.

We will update this notice as necessary to stay compliant with relevant laws and to reflect changes to our services, indicated by an updated Last Updated date at the top of this notice. If we make material changes, we may notify you by prominently posting a notice or by sending you a direct notification, and we encourage you to review this notice periodically.

If you have questions or comments about this notice, you may contact our team by email at wildboxapps@gmail.com, by phone at (+1) 678-353-7577, or by post at Wildbox LLC, 1065 SW 8th St, Suite 319, Miami, FL 33130, United States.

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, learn how it has been processed, correct inaccuracies, or delete it. You have a few options: in the app, go to Profile, Settings, Data Controls to export or delete your data; by email, send a request to wildboxapps@gmail.com and we will respond within 30 days; or for account deletion, go to Profile, Settings, Data Controls, Delete Account to permanently remove your account and all associated data.

We will action your request in accordance with applicable data protection laws and respond within 30 days. In certain circumstances we may need to verify your identity before processing your request.