Twoleaf Privacy Policy

Effective date: October 15, 2026
Developer: Thomas Lavin
Privacy and support contact: thomas@tjlvn.com

Twoleaf is a personal reading library for iPhone and iPad. It does not require a Twoleaf account.

Information stored in Twoleaf

Twoleaf stores on your device the material and information needed for your library. Depending on what you add, this can include article text and page details, links and titles, files and images you select, media source links and available transcripts, collections, highlights, notes, and reading position. Some settings, such as appearance and library display choices, are stored on the device.

When you import a public web page or media source, Twoleaf may contact the source website or provider to retrieve page content, public media details, or a transcript. The site or provider receives the network request from your device and may receive information such as your IP address and request details. Twoleaf does not control those providers' privacy practices.

Photos and Files are selected by you using Apple's system pickers. Twoleaf reads the selected file or image; it does not ask for general access to your Photos library. Adding text or pasting is initiated by you through the system's text controls. Twoleaf does not poll the clipboard.

iCloud sync

Your library is stored on this device. If you choose iCloud sync, Twoleaf stores library records and saved reading-copy files in the private CloudKit database for your iCloud account so they can be available on your devices using that account. Apple operates iCloud and processes this data under Apple's terms and privacy information. The private CloudKit database is associated with your Apple Account; the app developer does not operate a server that hosts your library contents.

You can choose to keep the library on this device without enabling iCloud. You can pause syncing on a device in Library Settings. Pausing stops that device from syncing; it does not delete data already in iCloud. Re-enabling sync may send changes that were waiting on that device.

When you delete an item that has been synced, Twoleaf requests deletion of its library record, personal notes and highlights, and linked saved-copy files from iCloud. If iCloud cannot complete the request, Twoleaf keeps it queued on the device, shows the number of pending iCloud deletions in Settings, and retries until CloudKit confirms the cleanup. A small deletion marker may remain so another device that has been offline does not restore the item. The request cannot be sent while the app cannot run, the device cannot reconnect, or the relevant iCloud account is unavailable. Pausing sync also pauses sending. Another device may keep its local copy until it receives the change. There is no fixed completion time when the device is offline or the app cannot run.

To preserve recovery, the deleted item's source and notes remain on this device under Recovered Copies. Delete Permanently removes that app-managed recovery copy, including legacy local copies and notes, and continues the cloud deletion request for the original item. Keep as a New Item creates a new item with new identities; if sync is enabled, that new item can sync. A minimal deletion marker may remain; it does not contain the deleted source, notes, or highlights.

Images and media while reading

Some saved pages refer to images hosted by the original website instead of containing a local image copy. Those images may load from that website when you open the page and may require an internet connection. The website receives those requests and its own privacy policy applies.

Media items keep a source card and any transcript available when saved. Tapping a media link opens your browser or the provider's app outside Twoleaf. Other outbound links in the reader also open outside Twoleaf. Twoleaf does not include a media player or download media files. The external site or app has its own terms and privacy practices.

Developer collection

Twoleaf does not use analytics, advertising, or crash-reporting services, and does not send your library to a Twoleaf-operated server. The app keeps limited diagnostic event information on the device to help manage local library operations; Twoleaf does not upload it. This does not describe data collected directly by Apple, websites, or media providers.

Retention and deletion

Your local library remains on your device until you delete items or remove the app and its local data. Before removing the app, you can export a portable library folder from Library Settings. If iCloud sync is enabled, deletion requests are sent through iCloud as described above; they cannot be delivered while the app cannot run or reconnect. A deletion marker may remain in iCloud to prevent an offline device from restoring an item. Pausing sync is not a cloud-data deletion action. Twoleaf removes abandoned temporary import and library-restore preparation files after seven days when the app next opens, an import starts, or a restore begins. Temporary workspaces are removed when their operation completes or is cancelled. This cleanup does not remove saved library items or set a time limit for iCloud deletion requests.

An exported Library folder is a separate copy. Deleting an item in Twoleaf does not delete that export. Device backups, if any, are managed through Apple's backup settings and are outside Twoleaf's direct controls.

Support requests

If you email support, the information you choose to include is sent through your email provider to thomas@tjlvn.com. Include only information needed to describe the issue. Support correspondence is separate from information stored by the app.

The Twoleaf app and the Twoleaf pages on tjlvn.com are separate. This policy describes the app. The website may use hosting or site features with their own data practices; review the site's applicable privacy information when visiting it.

Changes

This policy will be updated if the app's data practices change. The effective date above identifies the current version.