Privacy Policy

Ledger Leaf ("we," "our," "us") is a personal finance app — subscription and bill tracking today, expanding into a full personal budgeting toolkit. This policy applies to the Ledger Leaf website, web application, and any Android or desktop apps we release under the Ledger Leaf name (together, the "Service"). By creating an account or using Ledger Leaf, you acknowledge this Privacy Policy.

1. Our Core Commitment

We do not sell, rent, or trade your personal or financial information to advertisers, data brokers, or anyone else. We do not build advertising profiles from your transactions, balances, budgets, or subscriptions. The records you enter — subscriptions, bills, payment methods, receipts, and (as we build them out) accounts, budgets, and goals — remain yours.

2. Information We Collect

Account information: name, email address, password (stored only in hashed form — never readable by us), passkey (WebAuthn) or two-factor authentication data where you enable it, and preferences such as currency, timezone, and category visibility.

Financial information you provide: subscriptions and recurring bills, payment methods, transaction and payment history, receipts and attachments, and shared-subscription/group details where you use that feature. As we ship the budgeting expansion, this will extend to financial accounts, budgets, income, savings goals, debts/installments, investments, and net worth — always information you enter yourself, never pulled from an outside institution (see §4).

Automatically collected information: IP address, browser/device type, request timestamps, session and login data, and security/error logs — used to keep the Service secure, diagnose problems, and detect abuse. We do not use this data, or your financial records, for behavioral advertising.

3. Sensitive Authentication Data

Ledger Leaf never asks for your online banking password, banking or card PIN, CVV, or OTP for ordinary use. Never enter these into a note, description, or attachment. A genuine Ledger Leaf message will never request them either.

4. No Bank or Financial Institution Integration — Ever

Ledger Leaf does not connect to banks, mobile financial services, card networks, or brokerages to automatically pull your balances or transactions, and this is a deliberate, permanent design decision — not a "not yet." Financial data enters Ledger Leaf only two ways: you enter it directly, or you optionally upload a statement file (CSV/XLSX) for the app to help you organize. Creating an "account" record inside Ledger Leaf (a bank, wallet, or card entry) never creates a connection to that real institution.

5. Cookies & Session Storage

We use cookies and browser storage only where necessary to keep you signed in, remember your preferences, and secure your session. We don't currently run third-party advertising or tracking cookies; if that ever changes, we'll update this policy first.

6. How We Use Your Information

To operate the Service (store your records, calculate balances/forecasts, send reminders, generate reports), to secure it (authenticate you, detect suspicious activity, prevent abuse), to maintain and improve it (diagnose bugs, build features), and to communicate with you (verification, security, and support emails; optional product updates you can opt out of — account and security emails are not optional).

7. Forecasts, Calculations & Reports Are Informational

Renewal forecasts, spend projections, and any budgeting/net-worth calculations we build are computed from the data you've entered, for your own planning. They are not financial advice, and their accuracy depends entirely on the accuracy of the data behind them.

8. Infrastructure & Service Providers

We rely on infrastructure providers to run Ledger Leaf — cloud hosting and security (Cloudflare), database storage, and transactional email delivery. These providers process data only as needed to provide their service to us and are not permitted to use it for their own advertising purposes. When we introduce a payment provider for paid plans, we'll name it here and disclose exactly what it receives.

9. We Do Not Sell Your Data

Not your transaction history, not your balances, not your subscription list, not anything else. We are not a data brokerage.

10. Data Security

Traffic between your device and our servers is encrypted (TLS). Passwords are hashed, never stored in plain text. We support passkeys (WebAuthn) and TOTP-based two-factor authentication if you want stronger sign-in security. No internet-connected system can guarantee absolute security — you're also responsible for protecting your own credentials and devices.

11. Data Retention & Backups

We keep your information for as long as your account is active, plus a limited period afterward for backups, fraud prevention, and legal compliance. Deleted data may persist briefly in encrypted backups until they roll off our normal backup cycle.

12. Account Deletion & Data Export

You can export your subscriptions and transaction history as CSV or JSON at any time. You can request account deletion by contacting us — we'll delete or anonymize your personal information except where we need to retain something for security, fraud prevention, or legal reasons. Deleting the app from your device does not delete your account or server-side data; you need to actually close the account.

13. Uploaded Files & Attachments

Where attachments (receipts, invoices) are supported, only upload files you're entitled to store, and avoid including unnecessary sensitive information — we can't automatically screen the contents of what you upload.

14. Notifications

We send reminders for renewals, upcoming bills, and things that need your attention. If your device shows notification previews on a lock screen, that content may be visible to anyone with physical access — check your device's own notification privacy settings if that's a concern.

15. Your Privacy Rights

Depending on where you're located, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights — we may need to verify you're the account owner first.

16. International Users & Bangladesh Law

Ledger Leaf is built primarily for users in Bangladesh, though the Service may be reachable from other countries. We operate with Bangladesh's applicable privacy, cybersecurity, and consumer-protection laws in mind; where another law grants you stronger protections, that law prevails.

17. Children's Privacy

Ledger Leaf isn't designed for young children. Use it only if you meet the age of majority in your jurisdiction, or with a parent/guardian's involvement where required.

18. Changes to This Policy

As Ledger Leaf grows — new features, new infrastructure, an eventual payment provider — this policy will change with it. We'll update the date at the top and, for material changes, notify you in the app, on this site, or by email.

19. Contact Us

Questions, concerns, or requests about your privacy or personal information — one address, no maze of inboxes: support@ledgerleaf.app. Please don't include your password, PIN, OTP, or CVV in any message to us.