LeaveKit

Privacy Policy

Last updated: 29 May 2026

1. Who we are

LeaveKit ("we", "us", "our") is a staff leave management service operated at leavekit.com. We are the data controller for information collected through our website and mobile application.

2. What we collect

  • Account data — name, work email address, hashed password.
  • Leave data — leave requests, dates, leave types and approval decisions you create within your workspace.
  • Usage data — pages visited, session duration and device type, collected via Google Analytics 4. No personal identifiers are sent to GA4.
  • Device tokens — a short-lived JWT stored securely on your device to keep you signed in to the mobile app.

3. How we use your data

  • To provide and operate the LeaveKit service.
  • To send transactional emails (leave requests, approvals, invites) via Resend.
  • To improve the product using aggregated, anonymised analytics.
  • To comply with legal obligations.

We do not sell your data. We do not use your data for advertising.

4. Data storage and security

Your data is stored on Neon (PostgreSQL), hosted in the EU (eu-west-2). Passwords are hashed using bcrypt. All data in transit is encrypted via TLS. We follow industry-standard security practices and review them regularly.

5. Third-party services

  • Resend — transactional email delivery.
  • Vercel — hosting and serverless functions.
  • Neon — PostgreSQL database.
  • Google Analytics 4 — anonymised usage analytics.

6. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing privacy@leavekit.com. Workspace owners can also delete their account and all associated data from within the app settings.

7. Cookies

We use a single session cookie to keep you signed in to the web application. We do not use tracking or advertising cookies.

8. Children

LeaveKit is a workplace tool intended for adults (18+). We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the latest revision. Continued use of LeaveKit after changes constitutes acceptance.

10. Contact

For any privacy questions, email privacy@leavekit.com.