Privacy policy

Your local record

Leeward is a private, CBT-informed self-monitoring app published by NOCT Labs. Your observations, selected feelings and labels, optional notes, and optional weather snapshots are stored locally. The app and its widgets share an on-device storage container; this does not sync your record to another device.

Core logging, access to your entries, and deterministic analysis work without a network connection. Leeward does not automatically send your record or Apple Health data to NOCT Labs.

Optional App Lock uses device biometrics or your device passcode. When App Lock is on, widgets hide information derived from your record and open the app for authentication. When permitted, widgets can display observation counts and your optional streak. Direct widget logging requires local device authentication. iOS controls when cached widget images are replaced.

Optional reminders use local notifications with neutral text, without entry contents. Turning reminders off cancels Leeward’s scheduled reminders.

Optional Apple Health context

If you enable the connection, Leeward requests read access to steps, sleep, workouts, time in daylight, and mindful sessions. It writes no Apple Health data. You choose which permissions to allow in Apple’s system sheet and can change them in system Settings.

Leeward reads Health summaries on demand and holds them in memory. It does not copy Health samples or summaries into its saved entries, exports, widgets, Apple Intelligence input, iCloud backups, or a background cache. Removing Health context from an entry saves only that entry’s exclusion preference. Erasing Leeward’s record does not erase Apple Health data.

Optional weather and location

Weather is a separate, off-by-default connection. If you enable it, Leeward requests When In Use location access. For a present-moment log, it rounds your current coordinate to a roughly kilometer-scale grid to request Apple Weather. Coordinates are not stored, exported, or sent to NOCT Labs. Apple processes the weather request under its own terms.

Leeward saves the weather condition, temperature, capture time, symbol, and Apple Weather attribution beside the entry. You can remove the snapshot. With weather off, Leeward makes no location or weather request. It does not request current weather for a backdated log.

Optional on-device interpretation

Ask Leeward and interpreted recaps use Apple’s on-device Foundation Models framework. Leeward supplies bounded facts and a temporary digest of your own entries. Apple Health values are excluded. There is no cloud model fallback.

Model answers are screened for advice and diagnosis, with deterministic information as the fallback. Leeward is for self-monitoring, not therapy or diagnosis.

Apple-managed purchases

If you use Leeward Plus, Apple handles purchases, billing, and restoration through StoreKit and your Apple Account. Leeward checks Apple-verified purchase information to determine access. You do not create a Leeward account, and NOCT Labs does not receive your payment-card details through the app.

Your mood record and Apple Health data are not included in purchase requests. Existing entries, export, erase, and privacy controls remain available without an active subscription.

Optional iCloud backup

In beta builds that include the iCloud backup pilot, you can choose to store versioned journal copies in your Apple Account’s private CloudKit database. Backup is off by default. Finding existing backups is a separate action and does not enable automatic uploads. NOCT Labs operates no backup server.

Backups include your Horizon, entry dates and identifiers, selected labels, written observations and notes, and label library. They exclude Apple Health samples and summaries, Weather snapshots and coordinates, audio, AI prompts and answers, purchase information, consent and lock settings, and older recovery stores. Written notes can themselves contain sensitive information.

Leeward uses encrypted CloudKit assets and encrypted metadata fields. Apple’s standard iCloud protection and Advanced Data Protection differ; this is not a claim that every user’s backup is end-to-end encrypted.

Automatic backup runs while Leeward is open and unlocked. Turning it off keeps existing cloud copies. Erasing the local record turns uploads off and keeps cloud copies; Delete iCloud backups is a separate action. Restoring a backup requires a preview and confirmation and preserves existing entries.

Export, recovery, and erase

You can export selected entries and labels as JSON, CSV, or Markdown through the system share sheet. Exports exclude connected Apple Health and weather context. Only JSON supports restore. You control where exported files are saved and who can access them. Temporary share files are cleaned up after sharing; an interrupted share can leave a temporary copy until later app or system cleanup.

The app excludes its local record and migration working copies from system backup. This cannot remove older system backups or files you exported. JSON export and import provide a recovery path independent of the optional iCloud backup feature.

If an earlier local record remains after an upgrade, Leeward offers a separate recovery export. Import previews missing entries and skips duplicate identifiers, without replacing newer entries.

Erase all removes your active entries, label customizations, weather snapshots, per-entry context choices, and retained migration copies on this device. It recreates the default label library and keeps app settings. If cleanup or default-library restoration fails, Leeward reports the problem. Exports saved elsewhere, older system backups, and Apple Health data are outside this erase operation.

Support and policy updates

Sending feedback is your choice and opens your email app. The prepared message includes the app version and build, iOS version, and device model. It does not automatically attach your entries or Health data. You can review the message before sending it.

If you contact support, NOCT Labs receives the information you choose to include and uses it to respond to your request. Avoid including private entries or Health information unless you intend to share them.

Questions about this policy can be sent to leeward@noctlabs.dev. Updates to the policy will appear on this page with a revised date.

This website

This site is hosted with GitHub Pages and uses Cloudflare for domain and web delivery services. Those providers may process standard request information, such as IP address and browser information, to deliver and protect the site. We do not add analytics, advertising trackers, or a contact form. Email links open your own email app.