Legal
Privacy Policy
Last updated November 14, 2026
The short version: your expenses stay on your own device. We keep only what's needed to run your account (your username and email), we record anonymous usage events that aren't linked to you, and we never sell your data or show ads.
What we collect
- Your account. Your username, email address and password. Passwords are stored in scrambled (hashed) form by our sign-in provider, so no one, including us, can read them. If you sign in with Google, we receive your name and email address from Google.
- Security details. When you signed up and last signed in, and, if you turn on two-step verification, the secret your authenticator app uses.
- Your expenses. Amounts, categories, notes and dates are saved in your browser on your device. They are not sent to our servers. If you clear your browser's data or switch devices, use Settings → Backup to keep a copy.
- Anonymous usage events. Which screen was opened, which features were used (for example "expense added" with its category), app errors, whether you're on a phone or computer, and the app version. These are not linked to your account and never include amounts, notes, dates or anything you type.
- Technical logs. Our hosting and sign-in providers keep short-lived request logs, including IP addresses, to keep the service secure and running.
How we use it
- To create your account, sign you in and keep it secure.
- To send account emails, such as your sign-up code and password reset codes.
- To understand which features are used and to find and fix errors.
What we don't do
- We don't sell or rent your data.
- We don't show ads or share data with advertisers.
- We don't use advertising cookies or third-party trackers.
Who helps us run Ledger
- Supabase provides sign-in and stores account details and the anonymous usage log.
- Netlify hosts the website.
- Google, only if you choose "Continue with Google".
- An email delivery service that sends account emails on our behalf.
Storage on your device
Ledger uses your browser's local storage to keep you signed in and to save your expenses. You can clear it at any time in your browser settings; this signs you out and removes expenses saved in that browser.
Your choices
- Change your username in Settings → Account.
- Download your expenses any time with Settings → Backup.
- Delete your account any time in Settings → Account. This permanently removes your sign-in and profile from our systems. Expenses saved on your device stay there until you clear them.
Children
Ledger is not intended for children under 13, and we don't knowingly collect their information.
Changes to this policy
If we change how we handle your information, we'll update this page and the date above. If a change is significant, we'll let you know in the app or by email.