Last updated: 20 May 2026

Ledger ("the App") is a personal and small-business accounting app that helps you track income and expenses, manage accounts, send invoices, and understand your finances. This Privacy Policy explains how the App handles your information.

In short: Ledger does not collect, sell, rent, or share your personal or financial data. The App has no accounts to sign up for, no analytics, no advertising, and no third-party tracking. Everything you enter stays on your device — and, only if you choose, in your own private iCloud.

Who is responsible

The App is developed and maintained by an independent developer. If you have any questions about this policy or your privacy, contact us at [email protected].

Information you enter

You may enter financial information into the App, such as transactions, accounts, categories, contacts, invoices, bills, budgets, and tags. This data is:

• Stored locally on your device using Apple's on-device database.
• Never transmitted to the developer or to any third-party server.
• Under your control at all times — you can edit or delete it within the App.

iCloud sync (optional)

If you enable iCloud sync, your data is synchronized across your own Apple devices using Apple's private CloudKit database. This data:

• Is stored in your personal iCloud account, governed by Apple's Privacy Policy.
• Is not accessible to the developer. We cannot see, read, or retrieve it.
• Can be turned off at any time in the App's settings.

Subscriptions and payments

Ledger offers an optional premium subscription. All purchases are processed by Apple through the App Store. The developer never receives or stores your payment card details, billing address, or Apple Account credentials. Purchase and subscription management is handled entirely by Apple. See Apple's Privacy Policy for how Apple processes payment information.

App Lock and biometrics

The App offers an optional App Lock secured by a PIN and, where available, Face ID or Touch ID.

• Your PIN is stored on your device only, in hashed form. It is never sent anywhere.