Ledjer privacy policy

Ledjer is a cashbook app for Android and iPhone, made by GailByte Ltd ("GailByte", "we"). This policy says what Ledjer keeps, where it goes, and what you can do about it. If anything here is unclear, write to admin@gailbyte.com.

The short version

• Your books live on your phone. Ledjer works fully without an account and without a connection.
• An account is optional. If you make one, your books are backed up to our cloud so you can get them back on a new phone. If you don't, nothing you record leaves your phone, except through your phone's own backup or a file you choose to share.
• No ads, no analytics, no selling. Ledjer has no advertising, no tracking and no usage analytics. A crash report is sent only when you say yes to it. We never sell or rent your information.
• You can delete everything. Deleting your account removes it and everything it backed up.

What Ledjer keeps on your phone

Everything you record: your books, entries, categories, budgets, repeating entries, debts, payments, promises to pay, the people you record (their names and, if you add them, phone numbers, email addresses and addresses), your bank account details for "How you get paid", your business profile and logo, invoices, receipts and the counts from Close the day. Also your settings, such as the theme, Hide amounts and the app lock.

This stays on your phone and is read only by the app. The app lock uses your phone's own fingerprint, face or passcode check; Ledjer never sees or stores them.

If you make an account

What we receive. To make and run your account we receive your email address and, if you use Google (or Apple, once offered), the name and account identifier that service shares. If you use a password, it is handled by our sign-in provider and we never see it. The sign-in provider also records when you sign in and the network address you sign in from, to keep accounts secure.

What is backed up. Once your email is confirmed, everything listed under "What Ledjer keeps on your phone" is copied to our cloud, except your phone's own settings and waiting payment alerts (see below). This includes the details of the people you record. Each change is copied as you make it.

Deleted entries. When you delete something, the cloud keeps a copy marked as deleted. That copy is what stops another of your phones, offline at the time, from bringing it back. On your phone, a deleted entry is gone for good about 30 days after you delete it. At that point its copy in the cloud is emptied: the amount, the note, the person and the items go. What stays, until you delete your account, is what identifies the record: its date, its book and category, whether it was money in or out, how it was paid (cash, transfer and so on) and its receipt number if it had one. If it was a payment towards a debt, the record of which debt it paid stays, without the amount. If it was a loan, the debt it recorded is emptied the same way: its amount, note and due date go, and so do the amounts of any payments towards it; which person and which book it was for stay.

Deleted people and debts. A debt you delete goes the same way about 30 days later: its amount, note and due date are emptied in the cloud, and so are the amounts of any payments towards it. A person you delete goes too, once nothing else in your books still names them: their name, phone number, address, email and notes are emptied, and so are the amounts of any promises they made. A person named on a quote or an invoice, and the debt behind an invoice, are kept as they are, since a numbered document keeps who it was for.

Deleted books. A book you delete goes about 30 days later with everything in it, its quotes and invoices included, since deleting a book says all of it goes. Its name, its starting balance and every amount, note, name, address, phone number, bank account and item in it are emptied in the cloud, and so are its business details, logo and stamp photo. What stays, until you delete your account, is what the record of each row needs: its dates, its kind and its document numbers.

Where it is kept. Accounts and backups are kept with Google Firebase. Your backup is kept by Cloud Firestore in Google's data centres in London, in the United Kingdom. Your account, meaning your email address, your name and how you sign in, is kept by Firebase Authentication, which Google runs only from the United States. This may mean your information is kept outside your country, including outside Nigeria. Google processes it for us under its own data processing terms and may not use it for its own purposes.

Emails. We send you emails only to run your account: confirming your address and resetting your password. No newsletters or marketing.

Premium and payments

Premium is bought through Apple's App Store or Google Play. They take the payment; we never see your card or bank details. We use RevenueCat, a subscription service, to check whether your Premium is active. RevenueCat receives a random identifier, or your Ledjer account identifier once you sign in, together with your purchase records from the store. It does not receive your books. RevenueCat processes this for us under its own data processing terms.

Payment alerts (Premium, Android)

If you turn on entries from payment alerts, Ledjer reads notifications only from the banks and payment apps you pick (including a bank's texts, as they arrive in your notifications), and only to offer them as entries. Notifications from anything else are not read beyond seeing which app or sender they are from. This happens on your phone. The alerts waiting for you to record or skip stay on your phone, are never backed up to our cloud, your phone's backup or a backup file, and go after 30 days. Once you tap Record, the entry is like any other you made.

Ledjer does not read your text messages directly. You can turn alerts off, for one app or all of them, at any time, in Ledjer or in your phone's settings.

Your phone's own backup, and backup files

Your phone may back up Ledjer's data with its own backup (Google's backup on Android, iCloud on iPhone), under the settings and terms you have with Google or Apple. Waiting payment alerts are left out.

A backup file is made only when you tap Back up, and goes wherever you send it. Anyone who has the file can read it, so keep it somewhere safe.

What you send to others

Statements, invoices, receipts, reminders and exports are made on your phone and sent only when you send them, through the app you choose (such as WhatsApp, email or your messages app). Ledjer never sends anything to your customers itself. Once sent, what happens to it is up to you and that app.

"Send feedback" opens your email app with our address filled in; we receive only what you send.

The waitlist on our website

If you join the waitlist on Ledjer's website, we keep the email address or phone number you type and when you typed it, in our Firebase project in London, and nothing else about you. We use it only to tell you when Ledjer is out, and we delete the whole list once we have. To be taken off sooner, write to admin@gailbyte.com.

Crash reports

If Ledjer stops suddenly, it keeps a crash report on your phone, and the next time you open it asks whether to send it. Nothing is sent unless you tap Send; Don't send deletes it. It asks again after each crash.

A report holds where in Ledjer's code it failed, your phone's model and system, Ledjer's version, the phone's state at that moment (such as free memory and storage, and whether it is rooted or jailbroken) and a random identifier for this install of Ledjer. It never holds your books, the names or amounts in them, or your account. Reports go to Firebase Crashlytics, run by Google, which processes them for us under its own data processing terms, possibly outside your country, and keeps them for 90 days.

The people in your books

The people you record are your customers, suppliers, friends or family. You decide what to record about them, and you are responsible for having a fair reason to keep it, as you would in a paper book. We hold their details only as part of your backup, and only to give it back to you.

If you pick someone from your phone's contacts, the phone's own contacts screen hands Ledjer only the name and number you tap. Ledjer never reads the rest of your contacts and does not ask to.

How long we keep things

• On your phone: until you delete them, or uninstall the app.
• Your account and backup: until you delete your account. We may also remove an account whose email was never confirmed.
• Sign-in records kept by our sign-in provider: for the period Google sets for security logs.
• Purchase records: as long as the stores and RevenueCat need them, and as tax law requires.
• Crash reports you send: 90 days.
• The website's waitlist: until we have told everyone on it that Ledjer is out.

Your choices and rights

You can, at any time:

• See and copy your information: everything is in the app, and Export entries and Back up give you a copy in CSV, Excel, PDF or a backup file.
• Correct it: edit anything in the app; the backup follows.
• Delete it: delete entries, people or books in the app; or delete your account in Settings, Account, Delete account, which removes the account and everything it backed up. Your books stay on that phone until you delete them or the app. Without the app, see Delete your Ledjer account.
• Stop backing up: sign out, and keep using Ledjer on your phone.

Depending on where you live, data protection law (such as Nigeria's Data Protection Act 2023, or the GDPR in the EU and UK) may give you further rights, such as to object, to restrict use, or to complain to a regulator (in Nigeria, the Nigeria Data Protection Commission). To use any of them, write to admin@gailbyte.com. We answer within 30 days.

Why we use your information

We use your information only to give you the app and its backup, to check your Premium, to keep accounts secure, to fix what a crash report you sent shows, and to answer you when you write to us. Where the law asks for a legal basis: running the service you asked for (your account and backup), our legitimate interest in keeping it secure, and your consent: for payment alerts, which you can withdraw by turning them off, and for each crash report, which you give by tapping Send.

Security

Your backup travels encrypted and is stored encrypted by Google. Only your signed-in account can read or write it through the app; our cloud rules refuse anyone else. We do not look at anyone's books, except when you ask us to help with your account or the law requires it. No system is perfect: protect your phone with a lock, and consider Ledjer's app lock and Hide amounts for a phone others can see.

Children

Ledjer is not meant for children under 13, and we do not knowingly hold information about them. If a child has made an account, write to us and we will delete it.

Changes to this policy

If we change this policy, we will update this page, and tell you in the app before a change that affects what we collect or share takes effect.

Contact

GailByte Ltd. Email: admin@gailbyte.com.