Privacy Policy

• Account details — your email address and, optionally, your name, used to sign you in and secure your account.
• Financial data you enter — the debts, balances, interest rates, and payments you add to build your plan.
• Preferences — settings like currency, theme, and reminders, stored locally in your browser.
• Payment information — if you subscribe to Pro, billing is handled by Stripe. We never receive or store your full card number; we keep only a Stripe customer reference and your subscription status.

We use your information solely to provide the service: to calculate your payoff plan, save your progress, sign you in, process subscriptions, and send account and reminder notifications you've opted into. We do not use your financial data for advertising.

Your account and financial data are stored in a Postgres database (Supabase) with row-level security, so each account can only access its own records. Billing data is stored by Stripe under their security standards. Preferences remain in your browser's local storage.

We do not sell your data. We share information only with the processors that run the service on our behalf — Supabase (database and authentication) and Stripe (payments) — and only as needed to operate Ledger. We may disclose information if required by law.

We use essential cookies to keep you signed in and maintain your secure session. We don't use advertising or third-party tracking cookies.

Depending on where you live (including the EU/UK under GDPR), you have the right to access, correct, export, and delete your personal data, and to withdraw consent. You can act on these directly:

• Access & portability — export everything we hold about you as JSON from Settings → Data & privacy.
• Erasure — permanently delete your account and all associated data from Settings → Danger zone.
• Correction — edit your debts, payments, and profile at any time in the app.

We keep your data while your account is active. When you delete your account, your profile, debts, and payment history are removed from our database, and your Stripe customer record is deleted. Backups and legal records may persist for a limited period as required.

Data is encrypted in transit. Access is scoped per user with row-level security, and payment credentials never touch our servers. No system is perfectly secure, but we work to protect your information and limit what we collect.

Ledger isn't directed to anyone under 16, and we don't knowingly collect data from children.

We may update this policy as the product evolves. We'll revise the “last updated” date above and, for material changes, notify you in the app or by email.

Questions or requests about your data? Email privacy@ledger.app.