Legafo

Privacy policy

Legafo keeps what you write on your own device. This page explains exactly what that means, what leaves your device when you ask a question, and what we hold on our side.

Last updated: 16 September 2026 (version 2026-09-16).

What stays on your device

The buttons you create, the context you write into them, your conversations, any files you add, and your settings are stored in your browser on the device you are using. They are not copied to our servers, and we cannot read them.

Because this storage is local, it is also separate on each device. Opening Legafo on a different phone or computer shows an empty app: your notes and files do not appear there, even though your plan and purchase history are tied to your account. Clearing your browser data for the site deletes everything Legafo has stored on that device.

What leaves your device when you ask something

To answer a question, Legafo sends what is needed for that answer to Anthropic, whose models generate the reply. That can include the question itself, the context you wrote into the button you are using, and relevant parts of the conversation. Sending is not the same as storing, and we do not present it as the same thing: the request passes through our server, and its contents are not saved there.

If a question needs current information, the assistant may run a web search. That search is carried out by the provider of the AI model as part of handling your question: the query goes to the search engine from there, not from your device and not from our server. The search provider handles such queries under its own terms.

The Google button is different: it does not use the assistant at all. It opens a Google search in a new tab, and from that point Google's own privacy policy applies, not ours.

You decide what goes into a button. If you put information about another person there, it travels the same way as everything else, and you are responsible for having grounds to share it.

What we hold on our side

What we hold on the server: an account record (a random account identifier, when it was created, which version of the terms you accepted), a one-way fingerprint of your email address, your current sign-in sessions, and a log of purchases and usage. We do not store your email address itself — only a fingerprint we cannot reverse. Rate-limit counters hold a short-lived fingerprint of your IP address. None of your content is among it.

Outside services we use

Legafo relies on the services below. Each is listed with what it does and what it sees.

  • Cloudflare hosts this website and the app, and every request passes through its network, including a question on its way to the model. It sees your IP address and keeps request logs for 3 days; for calls to the AI model it records metadata only, never their contents. It also receives mail sent to support@legafo.com.
  • When you sign in to the app, the sign-in screen uses Cloudflare Turnstile to tell people from automated abuse. Turnstile loads only at the step where you enter your email address; it does not run when the app starts. According to Cloudflare, Turnstile processes technical signals such as your IP address, TLS fingerprint, User-Agent header, and the site key and origin of the page. When our server checks the Turnstile result, it also sends your IP address to Cloudflare and gets back only the outcome of the check. Cloudflare processes these signals on our behalf to protect sign-in, and as an independent controller to improve its bot detection. For the processing done on our behalf, contact us; Cloudflare describes its own processing in the Turnstile Privacy Addendum.
  • Resend, which sends through Amazon SES, delivers the emails with your sign-in codes and sees the address each one goes to. Its data is held in the United States.
  • Anthropic runs the AI models that write the replies and receives what is needed to answer a question, as described above.
  • Plans are bought inside the app, not on this website, and Paddle.com Market Ltd handles each purchase as merchant of record. Card details are given to Paddle, never to us, and we never see them. Paddle keeps the email address you buy with and a record of the purchase, and processes that data under its own privacy policy.
  • Google Fonts supplies the typefaces the app uses. As soon as the app opens, your browser fetches them from Google's servers, so Google receives your IP address and the ordinary details of a web request, but none of your content. This website does not load fonts that way.

Although we store only a fingerprint of your email address, the email service necessarily sees the address a sign-in code is sent to, and it keeps the emails with codes for up to 30 days.

Cookies and similar storage

This website stores one thing in your browser: the language you chose. There is no analytics, no advertising, and no third-party tracking on it. Web fonts are not loaded from external services.

The app at app.legafo.com uses cookies only for signing in. After you sign in, it sets a session cookie that keeps you signed in; while you are entering a code, a short-lived cookie links that code to the device that asked for it. Both are technical and not used for tracking, and there are no advertising or analytics cookies.

Your rights

You can ask what account data we hold and have your account deleted. Deleting the account removes your sign-in details and sessions. A record of purchases and usage stays in our log, because we need it for accounting and tax purposes. What is on your device stays on your device — you can clear it separately.

Requests go to support@legafo.com. We answer within 30 days.

Children

Legafo is not intended for children under 16, and accounts should not be created for them.

Changes to this policy

If this policy changes in a way that affects you, the date above changes with it and the change is announced in the app before it takes effect.

Legafo is operated by Arkadii Kavun. For anything in this policy, write to support@legafo.com.