Product
Stay up to date
Receive updates on new product features.
Effective Date: 23 May 2025
Leapfrog, located at Mathenesserweg 18A, Rotterdam, is responsible for the processing of personal data as shown in this privacy statement.
Leapfrog processes your personal data because you use our services and/or because you provide this data to us yourself.
Below is an overview of the personal data we process:
The table below shows the legal basis for each type of personal data processing activity at Leapfrog:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract |
| Processing payments and subscriptions | Performance of a contract / Legal obligation |
| Providing customer support and service communications | Performance of a contract / Legitimate interests |
| Sending functional emails and product updates | Performance of a contract / Legitimate interests |
| Sending marketing communications (e.g., newsletters) | Consent |
| Website analytics and usage tracking | Legitimate interests / Consent (where required) |
| Error monitoring and diagnostics | Legitimate interests |
| Authentication and security | Performance of a contract / Legitimate interests |
| Real-time collaboration features | Performance of a contract / Legitimate interests |
| Document storage and processing | Performance of a contract |
| Compliance with tax, accounting, or legal requirements | Legal obligation |
| Handling data subject requests (access, deletion, etc.) | Legal obligation |
| Natural Language Processing | Performance of a contract / Legitimate interests |
Clarification on Legal Bases:
For some processing activities, the legal basis may depend on your relationship with Leapfrog or the context of your interaction. For example, "performance of a contract" includes steps taken at your request prior to entering into a contract, such as creating a free account or using free features. "Legitimate interests" may apply where processing is necessary for the security, improvement, or reliable operation of our services, or for responding to general inquiries from non-users. Where both bases are listed, the applicable basis depends on the specific situation.
This mapping ensures that every processing activity at Leapfrog is supported by a valid legal basis under the GDPR.
Our website and/or service does not intend to collect data about website visitors who are younger than 16 years old, unless they have permission from parents or a guardian. However, we cannot check whether a visitor is over 16. We therefore recommend that parents be involved in the online activities of their children, to prevent data about children being collected without parental consent. If you believe that we have collected personal data about a minor without such consent, please contact us at legal@leapfrogapp.com, and we will delete this information.
Leapfrog processes your personal data for the following purposes:
Leapfrog makes decisions based on automated processing about matters that can have (significant) consequences for people. These are decisions made by computer programs or systems, without a human being (for example, a Leapfrog employee) being involved. Leapfrog uses the following computer programs or systems:
Leapfrog uses third-party AI tools, such as large language models (LLMs) and transcription services (e.g., AssemblyAI), to provide specific features like natural language processing, transcription, and analysis. When you use these features, your data may be securely transmitted to the AI provider's API for processing. These providers act strictly as data processors on our behalf and do not use your data for their own purposes, such as training or profiling. We have agreements in place to ensure your data is handled securely and in compliance with privacy regulations.
Data sent to these AI providers is processed only as necessary to provide the requested feature and is not retained or used for any other purpose by the provider. If you have questions about our use of AI tooling, please contact us at legal@leapfrogapp.com.
Leapfrog does not retain your personal data longer than is strictly necessary to realize the purposes for which your data is collected. We use the following retention periods for the following (categories of) personal data:
| Data Category | Retention Period |
|---|---|
| Account and contact information | As long as the user account is active, deleted immediately after account deletion, unless a longer period is required by law. |
| Payment and subscription information | 7 years (in accordance with tax and accounting regulations) |
| Analytics and website usage data | Up to 26 months (in line with Google Analytics default) |
| Communications (emails, support) | Up to 2 years after resolution of the inquiry or closure of the account |
| Data of minors collected in error | Deleted immediately upon discovery |
Leapfrog shares your personal data with various third parties if this is necessary for the execution of the agreement and to comply with any legal obligation. With companies that process your data on our behalf, we conclude a data processing agreement to ensure the same level of security and confidentiality of your data. Leapfrog remains responsible for these processing operations. In addition, Leapfrog provides your personal data to other third parties. We only do this with your explicit consent.
Below is an example of a third party we share data with:
| Category | Name | Data location | Purpose | Data Shared |
|---|---|---|---|---|
| Payment Provider | Stripe | United States | Processing subscription payments | Name, email, payment details (for subscribers) |
| Transcription/AI | AssemblyAI | European Union (EU) | Transcription and AI analysis of user data via API. Data is not used for training or other purposes by AssemblyAI. | Uploaded files, transcripts, derived data |
| Email/Newsletter | Resend | European Union (EU) | Sending functional e-mails and product updates | Email address, subscription preferences |
| Hosting Provider | Vercel | United States | Website hosting and deployment | Website usage data, deployment logs |
| Serverless Functions | Vercel Functions | European Union (EU) | Backend API endpoints and data processing | Request data, user input, processing results |
| Analytics | Google Analytics | United States | Website analytics and user behavior tracking (with user consent) | Anonymous usage data, page views, user interactions |
| Analytics | PostHog | European Union (EU) | Product analytics and usage tracking (with user consent) | Pseudonymized usage data, feature interaction events, context/source |
| Error Tracking | Sentry | European Union (EU) | Error monitoring and performance tracking | Error logs, performance metrics, device information |
| Authentication | Google Cloud Platform | United States | User authentication and identity management | Email, authentication tokens, user profile data |
| Database | Google Cloud Platform | United States | Database storage and management | User data, application data, system data |
| Real-time Collaboration | Liveblocks | United States | Real-time collaboration features | User collaboration data, shared workspace content |
| Document Storage | Chroma DB | United States | Document storage and processing | User documents, processed content, metadata |
| LLM provider | OpenAI | United States | Natural language processing via API. Data is not used for training or other purposes by OpenAI. | User input, processed data, analysis results |
Leapfrog uses functional, analytical, and tracking cookies. A cookie is a small text file that is stored in the browser of your computer, tablet, or smartphone when you first visit this website. Leapfrog uses cookies with purely technical functionality. These ensure that the website works properly and, for example, that your preferred settings are remembered. These cookies are also used to make the website work well and to optimize it. In addition, we place cookies that track your browsing behavior so that we can offer customized content and advertisements.
During your first visit to our website, we already informed you about these cookies and asked for your permission to place them.
You can opt out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information previously saved via your browser settings.
Cookies are also placed on this website by third parties. These are, for example, advertisers and/or social media companies. Below is a list of cookies used on www.leapfrogapp.com, their purpose, and description:
| Cookie Name(s) | Purpose | Description |
|---|---|---|
| _ga | Analytical: website usage (Google Analytics) | Tracks unique visitors and their interactions |
| _ga_61B1N2ZMNE | Analytical: session tracking (Google Analytics) | Distinguishes between different user sessions |
| authToken, authToken.custom, authToken.sig | Authentication/session | Manages user authentication and session state |
| Analytics/3rd-party cookies | Analytics, diagnostics, error tracking | Provides insights into website performance |
| viewType | UI state management (view preference) | in-app |
| sidebar, sidebar:state | UI state management (sidebar) | in-app (sidebar components) |
| preferredChartType | UI state management (chart type) | in-app (chart-type-context) |
You have the right to view, correct, or delete your personal data. In addition, you have the right to withdraw your consent to data processing or to object to the processing of your personal data by Leapfrog, and you have the right to data portability. This means that you can submit a request to us to send the personal data we have about you in a computer file to you or another organization named by you.
You can send a request for access, correction, deletion, data transfer of your personal data, or a request to withdraw your consent or objection to the processing of your personal data to legal@leapfrogapp.com.
To ensure that the request for access has been made by you, we ask you to send a copy of your identity document with the request. In this copy, please black out your photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN). This is to protect your privacy. We will respond to your request as quickly as possible, but within four weeks.
Leapfrog would also like to point out that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons
At Leapfrog, we respect your right to have your personal data erased from our systems, in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This is also known as the Right to Be Forgotten (RTBF).
You can request the deletion of your personal data at any time by:
Please include sufficient information to verify your identity and specify the data you wish to have deleted.
Upon receiving your deletion request, we will:
When we process a deletion request, we will:
If you have any questions about your rights or our data deletion process, please contact us at legal@leapfrogapp.com.
How we secure personal data Leapfrog takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. If you have the impression that your data is not properly secured or there are indications of misuse, please contact our customer service or via legal@leapfrogapp.com
Receive updates on new product features.