Privacy

Privacy Policy

The Lede is built to need as little of your data as possible. This page explains exactly what that means.

Last updated: November 3, 2026

What we don't collect

The app has no sign-up. We do not collect your name, phone number, password, precise location, contacts, photos, or any advertising identifier. The app contains no third-party advertising or analytics SDKs and no cross-app trackers. The one piece of contact information we ever collect is an email address, and only if you choose to give it to us on this website to hear from the desk (see The mailing list below). The app itself never asks for it, apart from a Kindle address you choose to save. If you save a Kindle address for Send to Kindle, it stays on your devices and in your own iCloud, and never reaches us. Our server never sends the book: your own Mail app sends it by email to that address, or, if Mail isn't set up, you pick where it goes from your device's share sheet.

Your article library stays in your iCloud

The articles you save, their briefs, your highlights, and your reading history are stored in your private iCloud account (Apple CloudKit) and synced across your devices by Apple. We do not store, copy, or have access to your library. We keep no list of the specific articles you read. For a saved story, our usage records hold the publisher's domain and a one-way keyed fingerprint of the web address, never the address itself and never the article's text. The full detail is under "Usage data" below. If you delete the app and remove its iCloud data, that content is gone.

What happens when you save an article

When you save an article, the app sends its web address, headline, and extracted text to our server so we can produce the brief. From there:

• The article's title and text are sent to our AI provider (Anthropic) to generate the brief. The article's web address is sent to Anthropic as well in two cases: when you ask for a "Dig Deeper," so the desk can research the piece, and when the piece is opinion or commentary, where the brief is written from the reporting the address points to. Our contract bars model training on your text. Anthropic deletes the text within 30 days, unless it flags a piece for safety review or the law requires a longer hold.
• For some stories we run a web search (via Tavily or Exa) using the headline to gather additional context.
• We never store the article's full text. We keep a short, one-way fingerprint (a hash) of the text, which can't be turned back into the article, so that an identical article isn't re-processed, alongside the brief we generated, in a temporary cache that automatically deletes itself (within 14 days for a brief, 7 days for a "Dig Deeper," 48 hours for redirected sources). And for sources your device can't read on its own, the server returns that same extracted text to your device so your copy saves alongside the brief — it passes through to you but is never stored on our servers; your saved copy lives only in your own iCloud.
• We keep a hash of the web address, not the address itself, so an identical article isn't re-processed. That cache entry has no name, no device identifier, and no account attached to it, and it deletes itself on the schedule above. The raw web address is never kept in our databases. It only passes briefly through our host's operational logs (see below).

Notifications and your device

To deliver "Dig Deeper" results, your device registers with our server using a random identifier we generate (never your Apple device's hardware ID) and an Apple push token. A device secret is stored only as a one-way hash. Push notifications are scoped so a result is only ever delivered to the device that requested it.

Usage data

We record a small amount of first-party usage data. It is pseudonymous: keyed to a random per-device identifier and to an opaque iCloud account identifier from Apple, never your name, your email, or your device's hardware ID. Because those identifiers are stable (the iCloud one persists even if you reinstall the app), Apple's App Store privacy label now counts this data as linked to you. We still never attach your name, and we never sell it. We use it to operate the service, watch for abuse and runaway costs, improve the app, and set fair pricing. This includes:

• Service events — such as "a brief was generated," the AI token and cost counts, the publication's domain, and a keyed fingerprint of the article address: a one-way code we can't turn back into the web address without a secret we hold.
• In-app usage & funnel events — such as which features you use, how far you get in onboarding, that a brief was opened, when an upgrade screen is shown, and subscription events (for example, a trial starting). These tell us where the app is working and where people get stuck. We log that a brief was opened, the publisher's domain, and the keyed fingerprint of the address. We don't store the addresses themselves, and we keep no list of the specific articles you read. These events are tied to the random identifier we generate for your device and to an opaque iCloud account identifier Apple provides. Neither carries your name or email.

The in-app usage and funnel data stays on our own servers and is not shared with any third party, sold, used for advertising, or combined with data from other apps or websites. It carries nothing that identifies you by name — no name, email address, or contact details — and we never sell it. The app contains no third-party advertising or analytics SDKs. If you joined our mailing list, that email address is stored separately and is never linked to this usage data.

Subscriptions

Subscriptions are processed entirely by Apple through the App Store. We never see your name, card, or payment details. To understand how well the app converts and to set fair pricing, Apple sends our server automatic notifications about subscription lifecycle events — a free trial converting to paid, a renewal, a cancellation, a refund, or a subscription lapsing. We record these as events tied only to the random identifier we generate for your device (never your name or payment information); a random app-account token, set to that same device identifier, lets Apple's notification be matched to your device without identifying you. We retain the Apple-issued transaction identifier for your subscription while it is active and for a limited period afterward, so we can correctly handle refunds, cancellations, and billing disputes that Apple reports to us. We may keep this identifier even if you ask us to delete your usage data, where retaining it is necessary to handle these subscription events — it is an Apple reference that contains no name or payment details.

One more thing about renewals: the app shows every Member an annual renewal notice. If you have ever emailed support@theledeapp.com, we may also send that year's notice to the address you wrote from — a legal notice about your subscription, never marketing. Your address stays in our support mailbox at Fastmail, where your message put it; we don't add it to any database or mailing list.

The mailing list

On this website you can give us your email address to hear from the desk. This is entirely optional and separate from the app. The app never asks for an email, apart from a Kindle address you choose to save, and you do not need to join the list to use The Lede.

The list serves three purposes, and we treat the three groups differently:

• If you signed up before launch to be told when The Lede opened to everyone, that is all you asked for, and it is all we will send you: a single notification that the app is available. We will not add your address to our ongoing notes unless you choose to stay on for them. If you would rather hear nothing at all, you can use the unsubscribe and deletion options below today.
• If you asked for occasional notes, through the notes form our home page used to carry, you asked for occasional notes about The Lede: a short message when something meaningful ships. Ticking the box on the country form asks for the same notes, starting after your country email. There is no schedule and no digest, and we will not use your address for anything else, or share it, without asking you first.
• If you ask to hear when The Lede reaches your country, through the form on our home page, we keep your address and the country you pick from the list, send one email when The Lede arrives there, then delete your address. If you also tick the box to keep hearing from the desk, your address moves to the notes list instead once that email has gone out, for the occasional notes described above. If The Lede hasn’t reached your country 12 months after you first sign up, we delete your address anyway, even if you ticked the box.

For everyone on the list, the same promises hold:

• What we collect: only the email address you type in, plus the date you signed up. If you ask to hear when The Lede reaches your country, we also keep the country you pick and whether you ticked the box to keep hearing from the desk. Nothing else. No name, and we don’t track whether you open or click our messages.
• Kept separate: your address is stored on our own servers (our database, Neon, and our host, Railway) and is never linked to the usage data the app collects. We do not use a third-party email-marketing or tracking service, and we never sell or rent your address. We send each email by hand from our own mailbox at Fastmail, and delete our sent copies once a send is done.
• How long we keep it: until you ask us to delete it. If you unsubscribe from the notes, we keep your address only as a record not to email you again; ask and we delete that too. If you signed up only for the launch notification, we remove your address once that notification has been sent, unless you have told us you want to keep hearing from the desk. If you asked to hear when The Lede reaches your country, we delete your address and the country once that one email has been sent, unless you ticked the box to keep hearing from the desk. If The Lede hasn’t reached your country 12 months after you first sign up, we delete your address and the country anyway. Unsubscribing from that email deletes them straight away.
• Unsubscribe & deletion: you can ask us to delete your address at any time by emailing support@theledeapp.com, and any message we send will include a way to unsubscribe. We honor these requests promptly, always within 5 business days and in practice much sooner.

By giving us your email you consent to receiving what is described above for your group: a single launch notification, a single email when The Lede reaches your country, or occasional notes from the desk. You can withdraw that consent at any time using the unsubscribe link or by emailing us.

Who processes your data

We rely on a small set of service providers, each handling only what's described above: Anthropic (AI briefs), Tavily and Exa (web search context), Apple (iCloud storage, push notifications, and subscriptions), Neon (our database), Railway (server hosting), and Fastmail (our email: the support mailbox, and the mailbox we send mailing-list email from). We do not sell or rent your information to anyone. Each of these providers acts only on our instructions. We do not share your data with any provider that does not protect it to the same standard this policy sets out. That includes Anthropic: our contract bars model training on your text, limits Anthropic to writing the brief we asked for, and sets the deletion terms described under Data retention below.

Where your data is handled

Charles Klein LLC is a company in the United States. Every provider listed above handles data in the United States, except Fastmail, an Australian company, which may hold our email in the United States, the Netherlands, Australia, India or Austria. If you use The Lede from outside the United States, the information described on this page is sent to and handled in those places, where privacy law may differ from the law where you live.

Data retention

The temporary AI cache deletes itself on the schedule above. We never store the article's text ourselves. Anthropic deletes the text within 30 days, unless it flags a piece for safety review or the law requires a longer hold. Usage records are retained for up to 13 months and then automatically deleted. Your device registration is kept while the app is installed and registered. Subscription transaction identifiers that Apple reports to us are kept while your subscription is active and for a limited dispute-and-refund period afterward.

Your choices and your rights

Deleting the app removes its local data; removing its iCloud data deletes your library. You can also stop the sending described above at any time:

• Turn the desk off. In the app's own Settings, under Privacy, switch off Sending articles to the desk. From then on, articles you save stay on your phone and land without a brief, and nothing goes to our AI provider. You can switch it back on whenever you like, and the same screen shows the full list of what leaves your phone.

For the pseudonymous usage records on our servers, you can:

• Request deletion — email us and we will delete the usage records associated with your device. (We may retain the Apple transaction identifier tied to an active or recently-ended subscription where doing so is necessary to process refunds, disputes, or required financial records, as described under Subscriptions above.)
• Request a copy — email us and we will provide the usage records we hold for your device.

Because this data is keyed to a random device identifier, we may ask you to make the request from the device so we can locate the right records. Wherever you live, you may ask us about the data we hold and request its deletion. California residents: we do not sell or share your personal information, and you may exercise the access and deletion rights above by contacting us.

Australia: you may ask to see or correct the information we hold about you, or make a complaint about how we handled it, by emailing us. We'll reply within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Singapore: for the usage records described above, which we use to run, protect and improve the app, we rely on the legitimate interests exception in Singapore’s Personal Data Protection Act. Our Data Protection Officer is Charles Klein, reachable at support@theledeapp.com.

Reporting a mistake

If a brief or a Dig Deeper gets something wrong, tell us. Every Dig Deeper has a Report a problem with this Dig Deeper row, and you can email support@theledeapp.com about any brief. We read every report, and we can remove a Dig Deeper from our temporary cache so it isn’t shown again.

Children

The Lede is not directed to children under 13, and we do not knowingly collect information from them.

Changes

If we change this policy we'll update the date above and, for material changes, note it in the app.

Who runs The Lede

The Lede is built and operated by Charles Klein LLC. For any privacy question or request, email support@theledeapp.com.