What we collect: nothing.

Last updated 14 October 2026.

Ledger is a personal money tracker built privacy-first. Your financial data belongs to you, and it stays on your iPhone.

What we collect

Nothing. Ledger does not collect, transmit, share or sell any personal or financial information. There is no server, no account, no analytics, no advertising identifier and no crash reporting tied to you.

Where your data lives

Every entry, pool, budget, plan, payment and setting is stored only on your device, in storage private to Ledger (and, for widgets, a container shared only with Ledger's own widgets). We have no way to see it. iCloud sync is not part of this version.

Photos and bills

Photos you attach — receipts and pool covers — stay on your device and are never included in data exports. When you photograph a bill, Ledger reads its total with Apple's on-device text recognition; the photo is never uploaded. Ledger asks for the camera only when you choose to take a photo, and asks to add to your photo library only when you choose to save a card there.

Voice

If you tap the microphone in Quick log, Ledger uses Apple's speech recognition set to run on your device. Your voice is not sent to us or stored.

Bank messages

Ledger never reads your messages. A bank SMS is read only when you paste it into Quick log, or when a Shortcuts automation you set up yourself hands it over. Ledger keeps the amount, the merchant and the date — never account or card numbers.

Quick log and Apple Intelligence

Quick log reads what you type or say on your iPhone. On devices that support Apple Intelligence it may use Apple's on-device model; nothing is sent to us.

Siri, Spotlight and learning

If you ask Siri what a pool or your month has cost, your iPhone shows or speaks the answer — and asks you to unlock first. Spotlight can find your pools by name (names only, never amounts); with Lock with Face ID on, Ledger adds nothing to Spotlight. When you correct a category, Ledger remembers that merchant name on your device (Settings → Learned merchants).

Widgets and the Lock Screen

Widgets, and a pool you put on the Lock Screen, show the totals you choose to put there. With Lock with Face ID on, Lock Screen widgets hide amounts until your iPhone is unlocked. A pool on the Lock Screen can be seen by anyone who sees your Lock Screen; remove it any time from the pool's menu.

Face ID

If you turn on Lock with Face ID, Ledger asks iOS to check it's you. Your face data never leaves Apple's Secure Enclave; Ledger only learns whether the check succeeded.

Notifications

Reminders you turn on — a daily nudge, due dates, pool payments — are scheduled on your device by iOS. They are not sent from any server.

Importing, exporting and sharing

When you import a spreadsheet, a bank statement or a Ledger backup, Ledger reads only the file you choose, on your device. When you export your data (JSON or CSV) or share a month, year or chapter card, it is handed to the iOS share sheet under your control. Where it goes from there is your choice; we are not involved.

Third parties

Ledger includes no third-party SDKs, trackers or advertising. It uses only Apple's own frameworks.

Children

Ledger is rated 4+. Because it collects no personal information from anyone, it collects none from children.

Changes to this policy

If this policy changes — for example, if optional iCloud sync is added through your own private iCloud account — the new version will be posted here with a new date, before the change ships.

Contact

Questions about privacy? Write to dmaulikr@gmail.com.

Ledger stores all data on your device. No servers, no accounts, no analytics, no third-party services.