What Data Leassh Collects
The Leassh agent, when installed on a monitored device, may collect the following data depending on your configuration:
- Periodic screenshots — captured at configurable intervals (default: every 5–10 minutes) for AI-powered activity classification
- System metrics — CPU, RAM, disk, GPU utilization, temperatures, and uptime
- Process lists — running application names and resource usage for activity categorization
- Session data — login/logout times, idle duration, and active user sessions
Leassh does not collect keystrokes, passwords, browser history, file contents, messages, emails, or audio/video from cameras or microphones.
How Data is Handled
Local Mode (Self-Hosted)
In Local Mode, your data never leaves your home network. Period.
When you self-host Leassh, all data collection, AI analysis, and storage happens entirely on your own hardware. Screenshots are analyzed locally using your own Ollama instance and are stored on your own disk. No data is transmitted to Leassh servers or any third party.
You have full control over data retention periods, what is collected, and when it is deleted. We cannot access your data because we never receive it.
Cloud Mode (Managed)
When using Leassh Cloud, screenshots and system metrics are transmitted to our servers over encrypted connections (TLS 1.3) for AI analysis. Here is what happens:
- Screenshots are analyzed and immediately deleted. We do not store raw screenshots. The AI classification result (e.g., "gaming", "homework", "social media") is retained; the image is not.
- System metrics are retained for the duration of your configured retention period (default: 30 days) to generate reports and trends.
- Activity classifications are retained to produce weekly reports and insights.
Key principle: We analyze and discard. Raw screenshots are never stored in Cloud Mode. Only the derived classification data is kept.
What We Will Never Do
- Sell your data. Not to advertisers, not to data brokers, not to anyone. Ever.
- Use your data for advertising. Leassh has no ads and never will.
- Share data with third parties. Your data is not shared with any external company, partner, or service, except as required by law with valid legal process.
- Train AI models on your data. Your screenshots and activity data are never used to train or improve machine learning models.
GDPR Compliance
If you are in the European Economic Area (EEA), you have the following rights under GDPR:
- Right to access — request a copy of all data we hold about you
- Right to deletion — request that we delete all your data. In Cloud Mode, we will purge all activity data, classifications, and account information within 30 days of your request.
- Right to data portability — request your data in a machine-readable format (JSON export)
- Right to rectification — request correction of inaccurate data
- Right to restrict processing — request that we stop processing your data while retaining it
In Local Mode, you already have complete control over your data and can delete it at any time from your own servers.
To exercise any of these rights, contact us at hello@leassh.com.
Children's Privacy
Leassh is designed as a parental monitoring tool. We take children's privacy seriously:
- Parental consent is required. Leassh must be installed and configured by a parent or legal guardian. Children cannot create accounts or install agents themselves.
- COPPA compliance. We comply with the Children's Online Privacy Protection Act. We do not knowingly collect personal information from children under 13 without verified parental consent.
- Minimal collection. Even in Cloud Mode, we only retain activity classifications, never raw screenshots or personal content.
- Age-appropriate controls. Parents control exactly what is monitored, what limits are enforced, and what data is retained.
If you believe we have inadvertently collected data from a child without proper parental consent, please contact us immediately at hello@leassh.com and we will delete it promptly.
Security
- All network communication uses TLS 1.3 encryption
- SSH key-based authentication for fleet connections
- License tokens are hashed and cannot be reversed
- Cloud infrastructure runs on isolated, hardened servers
- Regular security audits and dependency scanning
Data Retention
- Screenshots (Cloud Mode): Analyzed and immediately deleted. Never stored.
- Activity classifications: Retained for your configured retention period (default 30 days), then automatically purged.
- System metrics: Retained for your configured retention period, then automatically purged.
- Account data: Retained while your account is active. Deleted within 30 days of account closure.
Terms of Service
By using Leassh, you agree to the following terms:
- Lawful use. You may only install Leassh on devices you own or have legal authority to monitor. Installing monitoring software on devices without the owner's consent may violate local laws.
- Parental responsibility. If monitoring a minor's device, you must be the child's parent or legal guardian.
- No reverse engineering. You may not decompile, reverse engineer, or attempt to extract the source code of the Leassh agent, except where permitted by law.
- Service availability. Leassh Cloud is provided "as is." We aim for high availability but do not guarantee uninterrupted service. Self-hosted deployments are under your own control.
- License scope. Your license entitles you to monitor the number of devices specified in your plan. Exceeding your device limit requires an upgrade.
- Termination. We may suspend or terminate accounts that violate these terms. You may cancel your subscription at any time.
Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you via email (if you have an account) and update the "Last updated" date at the top of this page.