Privacy Policy

What we collect for your Leftway Account

• Your phone number. Every account needs one. We store it with your account, along with the type of line it is (mobile, landline, internet), which our phone carrier looks up for us. We use it to verify you are one real person with one account.
• Texts you send to 1-855-LEFTWAY. When you verify by text, we receive your number and the message, which contains a one-time code. See leftway.ai/sms.
• Sign in with Apple, if you use it. Apple gives us an identifier for you and, if you choose to share it, an email address (possibly an Apple relay address). We don’t receive your name.
• Sign-in sessions. When you sign in, your device gets a session token. We store only a one-way hash of it. Sessions last up to 90 days.
• Which Leftway apps you use with your account.
• Device check. Our iPhone apps use Apple’s App Attest to prove a request comes from our genuine app on a real Apple device. We store the key Apple creates for the app on your device and Apple’s receipt for it. It doesn’t identify you outside our apps.
• Fraud signals. When an app reports activity such as a vote from a web browser, it can send us an identifier computed in your browser, your browser’s user agent, and your IP address. We store the IP address only as a keyed one-way hash.
• Records of phone verification attempts: a keyed hash of the number and of your IP address, the line type, and how many tries were made. These let us rate-limit and stop abuse without keeping numbers in clear.
• Notification tokens. If you allow notifications, Apple gives the app a token so we can send them. We store it to send notifications, such as when the day’s winner is in.
• Leftway Pass, if you get one. Your pass number and how you got it. Each pass is also recorded on the Base blockchain (see below).
• Messages you send us, such as support or privacy emails.

On this website, if you sign up for updates we keep your email address and the IP address you signed up from.

How we keep it to real people

Our apps count real people, so fraud checks run on every account. We combine the signals above into a risk score: whether your phone is verified and is a mobile line, whether an internet number was tried, whether your device passed Apple’s check, and whether the same browser was used by other accounts recently. Apps use that score to decide whether activity counts, for example whether a vote is included. The score stays on our servers and is never shown to other people. If you think we got it wrong, write to us and a person will review it.

Why we use it

• to create and run your account and sign you in (needed to provide the service you asked for)
• to verify your phone, enforce one account per person, and prevent fraud, spam, and abuse (our legitimate interest in fair results, and yours)
• to keep the apps secure and working, and to fix errors (legitimate interest)
• to send the notifications you turned on (your consent, which you can withdraw in your phone's settings)
• to answer you when you contact us
• to meet legal obligations, such as tax records for purchases

We don’t sell or rent your personal information, we don’t share it for advertising, and we don’t track you across other companies’ apps or websites.

Who helps us run it

These service providers handle information for us, only to provide their service, under contract:

• Telnyx: our phone carrier for 1-855-LEFTWAY; receives verification texts and looks up line type (United States)
• Apple: Sign in with Apple, App Attest, and push notifications
• Hetzner: the servers that run Leftway Accounts and its database (United States)
• Cloudflare and Vercel: network and website hosting (global)
• Datadog: error and performance monitoring (United States)

We may also share information if the law requires it, to protect people from harm or fraud, or as part of a sale or merger of our business, in which case this policy keeps applying to it.

Public blockchain records

Some things, such as a Leftway Pass, are also recorded on a public blockchain (Base). Those records are public and permanent; nobody, including us, can change or delete them. We don’t put your phone number, name, or email on a blockchain.

Where it's stored

We are a Canadian company. Our servers and most of our providers are in the United States, so your information is stored and processed there, where it may be accessible to authorities under local law. Wherever it is, we protect it as this policy describes.

How long we keep it

• Your account information: until you delete your account.
• Sign-in sessions: up to 90 days, or until you sign out or delete your account.
• Verification codes: 10 minutes.
• Hashed records of phone verifications and deleted numbers, and fraud signals: only as long as we need them to stop repeat abuse. They are one-way hashes and don't contain your number.
• Purchase records: as long as tax law requires.
• Backups: overwritten on their normal schedule.

Deleting your account

You can delete your Leftway Account at any time from inside any Leftway app (in emoji.today: You, then Delete account). That immediately deletes your account, your phone number, your sign-in identities and email, your sessions, your app profiles, your device keys, and the fraud signals linked to your account. We keep a one-way hash of your number so the same number can’t delete and re-join to vote twice in one day, and hashed verification records, as described above. Records on a public blockchain can’t be deleted. Each app’s privacy page says what happens to that app’s data, such as your votes.

Can’t get into the app? Email bill@leftway.ai from any address with the phone number on the account, and we will verify it’s you before we delete anything.

Your rights

Wherever you live, you can ask us to show you the personal information we hold about you, correct it, delete it, or give you a copy in a portable format, and you can object to how we use it or withdraw consent you gave. Write to bill@leftway.ai. We answer within 30 days, and we’ll ask you to prove the account is yours first (for example, by text from the number on it). It’s free.

If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada, the Information and Privacy Commissioner for British Columbia, or the data protection authority where you live (in the EU or UK, for example). California residents: we don’t sell or share personal information as California law defines it, and we won’t treat you differently for using your rights.

Children

Leftway Accounts are for people 13 and older (older where local law requires it, and some apps set a higher age). We don’t knowingly collect information from children under 13. If you think a child has given us information, tell us and we will delete it.

Security

We encrypt information in transit, store tokens and many identifiers only as one-way hashes, keep secrets in a password manager rather than in code, and limit who can access production systems. No system is perfectly secure; if a breach puts your information at real risk, we will tell you and the regulators the law requires us to tell.

App privacy pages

• emoji.today: emoji.today/privacy

Contact

Leftway Labs Limited is responsible for your information. Our privacy contact is reachable at bill@leftway.ai, or by mail at 1075 Burnaby St #112, Vancouver, BC V6E 1N9, Canada.

Changes to this page

When we change this page we update the date at the top and list the change here. If a change affects how we use your information in a way you would care about, we tell you in the app or by text before it takes effect.

• October 22, 2026: First version: one policy for the Leftway Account across all Leftway apps.