Privacy Policy.
Last updated: October 23, 2026
The short version
This policy covers Leyora’s company website and its Daily Downloads product. We collect your email and chosen Android or iOS app when you sign up for Daily Downloads. We use them to manage your requested download updates. This version does not include advertising or analytics trackers. Email delivery and access to private download reports require separate configuration.
1. Information we collect
When you submit the company enquiry form, we store your name, email, optional phone number, selected project type, message, submission time, and a reference number. We use these details to review and respond to your request. When email delivery is configured, an enquiry notification is sent to our contact inbox through our Livera Connect SMTP mailbox. Enquiry records remain on the server until the operator removes them. Phone, email, Instagram and WhatsApp links open the relevant service; their own privacy policies apply when you use them.
- Signup details: your email address, selected app’s store, name, and package identifier or App Store ID, signup time, subscription status, and confirmation and unsubscribe tokens.
- Report records: app download figures and report dates when reports are imported, plus records of successful email deliveries.
- Search and technical details: text entered into app search is sent to our server and used to query your selected store (Google Play or Apple’s App Store). The server processes your connection’s IP address to limit excessive requests. Search queries, app results, and rate-limit information are held in server memory and may remain there until cleared or the server restarts.
Signing up does not give this service access to your Gmail account, passwords, Google Play Console, or App Store Connect. We do not ask visitors to enter those credentials.
2. How we use information
We use your information to find the app you choose, save and manage your subscription, prevent duplicate signups, confirm your email when sending is configured, send requested reports, process unsubscribe requests, and limit misuse.
Your email is not sent to Google Play or Apple as part of app search. This version does not use your signup details for ad targeting.
3. Services involved
- Google Play: receives app-search queries from our server. App icons load from Google’s image services, which receive your browser’s network request, including its IP address.
- Apple App Store: when iOS is selected, Apple receives app-search queries from our server. App icons load from Apple’s image services, which receive your browser’s network request, including its IP address.
- Apple Developer video: the setup guide includes an optional official video. Pressing its load button connects your browser to Apple’s streaming service, which receives network information such as your IP address. You can read the guide without loading the video.
- Google Fonts: the Daily Downloads page loads fonts from Google. Those requests send connection information such as your IP address and browser details to Google.
- Email delivery and MongoDB: Livera Connect processes recipient addresses and message content for email delivery. MongoDB Atlas hosts subscription, enquiry, imported report and delivery records. A copy of each report is sent to our operational mailbox at alert@leyora.in.
These services process information under their own policies: Google Privacy Policy, Apple Privacy Policy, and MongoDB Privacy Policy.
4. Storage and retention
Signup, enquiry, report, and delivery records are stored in MongoDB Atlas. The operator retains the previous local database as a migration backup. They remain there until the operator removes them; automated retention and deletion are not currently configured.
Unsubscribing changes your subscription status to stop future daily letters. It does not automatically delete your email or historical records. No system can guarantee absolute security.
5. Your choices
You can browse without signing up. When delivery is enabled, daily report emails include an unsubscribe link. You can use it to stop future reports for that subscription.
To request access to, correction of, or deletion of your stored personal information, email touch@leyora.in using the contact link below. We may need to verify that a request relates to your information. Rights and available remedies may depend on your location.
6. Cookies, analytics, and advertising
The current application does not set first-party cookies, store signup details in your browser’s local storage, or include Google AdSense or analytics scripts. Third-party resources described above still involve external network requests.
If advertising is introduced, this policy must be updated to identify the actual vendors, cookies, and data uses, and the necessary consent controls must be configured before ads are enabled. Google’s advertising controls are available at My Ad Center.
7. Changes to this policy
Updates will appear on this page with a revised “Last updated” date. Material changes to data handling should be reflected here before those changes take effect.
Privacy contact
For privacy questions or requests to access, correct, or delete your personal information, email touch@leyora.in. Please include the email address you used to sign up and the app concerned; do not send passwords or account credentials.
Website analytics reports
When you connect a website, we store your report email, domain, ownership verification record, setup status and secret token hashes. Your DNS TXT record verifies control of the domain. Do not share your private setup or management email links.
After you confirm your email and verify the domain, the optional tracking script sends page paths (without query strings or fragments), referrer hostname, a random event identifier and coarse device type to our service. The server processes the visitor’s IP address and browser user-agent to filter common bots, rate-limit requests and calculate a site-specific, day-specific visitor hash. Raw IP addresses and raw user-agent strings are not stored in the analytics event collection. Infrastructure providers may maintain their own access logs.
The tracker does not use cookies, local storage or cross-site identifiers. It honours Do Not Track and Global Privacy Control. Daily visitors are estimates and cannot be summed into lifetime unique visitors. Ad blockers, consent choices, shared networks and filtered bots affect counts. Site owners must describe this processing in their own privacy policy and configure consent where required.
Detailed events and their daily hashes expire after 90 days through MongoDB’s asynchronous retention mechanism. Aggregate page-view totals, website setup records and report delivery records remain until removed by the operator. Email reports include page views, estimated daily visitors, popular paths, referrer hostnames and device breakdowns. Reports go only to the verified report email. Avoid personal information in page paths.
Use the private management link in a website report to stop emails and collection, then remove the snippet. Stopping does not automatically erase stored records. For deletion requests contact touch@leyora.in.