Privacy policy
Last updated: 25 October 2026
Leeny is an app for borrowing clothes within private groups of people you know. We only collect what’s needed for that. In this policy, you can read which data that is, why we use it, where it’s stored and what you can manage yourself.
In short
- We only use data that’s needed to make Leeny work.
- Your data is stored in the EU (Belgium and the Netherlands).
- We never sell your data, we don’t track you and we don’t show ads.
- What you share is only seen by the people in your groups.
- You can download your data and delete your account, both in the app.
Who is responsible?
Leeny is an app by Yorick Boshuijzen. He is the data controller within the meaning of the General Data Protection Regulation (GDPR). Send any questions about privacy to privacy@leeny.app.
Which data we use and why
| Data | What for | Legal basis | How long |
|---|---|---|---|
| Email address and sign-in method (Apple, Google or email) | Signing in and your account | Contract | Until you delete your account |
| Name, bio and avatar colour | Your profile within your groups | Contract | Until you delete your account |
| Clothing sizes and notification preferences | The “In your size” filter and your notifications (only visible to you) | Contract | Until you delete your account |
| Items: title, description, category, size, colour, brand and photos | Sharing clothes with your groups | Contract | Until you delete the item or your account |
| Groups and memberships | Private groups | Contract | Until you leave the group |
| Loans: items, period, note and status | Arranging loans | Contract | Stays visible to the other person, also after you delete your account (then as “Deleted user”) |
| Chat messages | Making arrangements | Contract | Stays visible to the other person, also after you delete your account (then as “Deleted user”) |
| Favourites and blocks | Saving what you like, and your safety | Contract | Until you delete your account |
| Reports you make | Moderation: dealing with inappropriate content and misuse | Legitimate interest | Up to one year after the report has been dealt with |
| Installation ID and app language per device | Sending push notifications, in the right language | Contract | Until you sign out or delete the app |
| App Check token | Preventing misuse of our servers | Legitimate interest | Short-lived |
| Crash reports (technical details about the crash and your device, without who you are) | Fixing bugs in the app | Legitimate interest; can be turned off in the app | 90 days |
“Contract” means we need the data to make Leeny work for you (Article 6(1)(b) GDPR). “Legitimate interest” means we use it to keep Leeny safe and stable (Article 6(1)(f) GDPR).
Who sees your data
- Members of your groups see your name, bio, avatar and the items you share with their group.
- The other person in a loan sees the loan, the note and your chat.
- Only you see your sizes, favourites, notification preferences and who you’ve blocked.
- Reports are only seen by Leeny’s moderators, not by the person who was reported.
Nobody outside your groups can see your items or your profile. Leeny has no public search.
What we don’t collect
No date of birth, gender, phone number, location, contacts or advertising ID, and no usage statistics. We remove location data (GPS) and other metadata from photos before they’re stored. Recognising clothes in photos happens on your own iPhone.
Where your data is stored and who helps us
We use a few services from other companies (processors). Agreements with them protect your data.
- Google Firebase:
- database and photos: in the EU (Belgium and the Netherlands);
- server functions: in the Netherlands;
- sign-in, push notifications, App Check and crash reports: global Google services, including in the United States. For these, the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses apply.
- Apple: Sign in with Apple and delivering push notifications to your iPhone.
- Google: Sign in with Google, if you choose it.
All connections are encrypted and the data is also stored encrypted. Access rules on the server make sure only the right people can get to data.
On your device
Some things the app only keeps on your iPhone: your preferences (such as theme, haptics and crash reports), your recent searches, a device ID for push notifications and a temporary copy of data, so the app also works quickly without a connection.
Crash reports
If the app crashes, we send a report to Firebase Crashlytics so we can fix the bug. A report like this contains technical details, such as the device model, the iOS version and the place in the code where it went wrong, but not who you are. This is on by default. You can turn it off in the app via Profile → Privacy and data → Share crash reports.
Minimum age
Leeny is for people aged 16 and over.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and you can object. You can do much of this yourself in the app:
- Download your data: Profile → Privacy and data → Download my data.
- Change your data: Profile → Edit profile and My sizes.
- Delete your account: Profile → Account → Delete account. Also read what happens then.
- Turn off crash reports: Profile → Privacy and data.
For everything else, email privacy@leeny.app. We’ll reply within a month. Don’t agree with how we handle your data? Then you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own EU country.
This website
The website leeny.app uses no cookies and no statistics. Our hosting provider (Google Firebase Hosting) processes technical data, such as your IP address, to show and secure the site. We don’t use it to track you.
Changes
If Leeny changes, we’ll update this policy. We’ll let you know about important changes in the app beforehand. The top of this page shows when it was last updated.
This policy is also available in Dutch.