Privacy policy

The short version

Ledgerly keeps every figure on your device. There is no Ledgerly account and no server holding your data, and nothing is sold to anyone. Three things do reach the network, and each one is named below: a backup you switch on yourself, your purchase, and crash reports. Only backup carries what you have recorded. That is what backup is for, and it does nothing until you turn it on.

What stays on your device

Your budgets, categories, accounts, transactions, repeat rules and every setting sit in a file on the phone, inside the app's own storage. They get written when you add something and read when you open a screen. Deleting the app deletes them.

There is no sign-up, no email address, no password and no profile. Ledgerly does not ask who you are, and it has nowhere to put the answer.

Backup, the one thing that copies data off the device

If you switch on backup, Ledgerly writes a copy of everything you have recorded to the place you chose: your Google Drive, your iCloud, or a file you save yourself. That copy sits in your own storage account, under that provider's terms rather than ours. We cannot read it and we are not sent a copy.

Backup is off until you turn it on, and turning it off stops it. Deleting a backup removes the copy at the other end and leaves everything on your device untouched. Nothing is backing it up after that.

What the app sends on its own

Two services are built into the app. Neither one receives your figures.

Purchases, through RevenueCat

You buy with your App Store or Google Play account, and RevenueCat checks the purchase so the app knows you can keep adding transactions. It knows a purchase exists and which store it came from. It does not know what you spent, budgeted or recorded.

Crash reports, through Sentry

When the app crashes it sends a report saying where in the code it failed, along with the device model and the operating system version. That is how a crash gets fixed instead of guessed at. It carries the fault, not your figures.

This website

ledgerly.download uses Google Analytics to measure how people find it: which pages get read, which links get followed, and which sites and searches lead here. That is how we know which parts of the page are doing their job. It runs on this website and not in the app, it has no access to anything you have recorded, and the two share nothing but a name.

The site loads its typeface from Google Fonts, which means your browser requests those files from Google and Google sees the request.

Permissions the app asks for

• Notifications, if you want a daily reminder, budget warnings or a weekly summary. You can decline and still use everything.
• Face or fingerprint, if you switch on app lock. The check happens on the device, and Ledgerly never sees the fingerprint or face itself.
• Storage or a cloud account, only when you set up backup or export a file, and only for the destination you picked.

What you can do

• Export everything you have recorded as a CSV, whenever you like, including after a trial or a subscription ends.
• Delete a transaction, an account, a budget, or the whole app. There is no copy anywhere else for you to ask us to remove.
• Turn backup off, or delete the copy at your backup destination.

Changes, and how to reach us

If what the app does changes, this page changes on the same day and the date at the top moves with it. Questions about any of it can go to hello@ledgerly.download.