We don't collect your data. Here's exactly what that means.
Ledger is a spending tracker for iPhone and Android, made by Rajat Rao in Dubai. This policy covers the Ledger app and this website.
The short version
- Ledger has no account, no server and no analytics. We never receive your spending, your messages or anything about you.
- Everything Ledger records stays on your phone, in the app's own encrypted storage.
- Ledger uses no AI. Messages are read by fixed rules on your phone.
- The only thing that goes over the internet is a subscription purchase, which is handled by Apple.
What Ledger keeps on your phone
| What | Why | How long |
|---|---|---|
| Purchases and refunds: amount, currency, shop, date, category, the card's last 4 digits, and where it came from (bank text, Apple Pay, voice, import) | To show your calendar, totals and budget | Until you delete them or the app |
| A bank text Ledger couldn't read | So you can tap the amount and shop once and Ledger learns that layout | At most 7 days, encrypted, then deleted. Deleted at once when you fix it. |
| Your settings: country, budget, salary if you enter it, categories, recurring payments | To work out budgets and tips | Until you change them or delete the app |
| A capture log: when a source last added something, and the result (added, skipped, needs a look) | So you can check your setup works | Recent entries only |
The full text of a bank message is never stored, except the 7-day case above. Personal messages, one-time passwords, balances and transfers are dropped the moment they arrive.
What Ledger never does
- It never logs in to your bank or asks for bank credentials.
- It never reads messages on its own. On iPhone, a Shortcuts automation that you create passes Ledger only the messages containing your keyword (such as AED). You can switch it off any time in the Shortcuts app. On Android, Ledger reads incoming texts only after you allow SMS access, keeps only bank purchases and refunds, and reads Google Wallet notifications only if you turn on notification access. Both can be switched off in Settings › Apps.
- It never uploads, syncs or backs up your data to us, and it doesn't use iCloud for your spending.
- It contains no advertising, analytics, tracking or crash-reporting code from anyone.
- It never sells or shares data, because it doesn't have any of yours.
Microphone, speech and Face ID
Voice entry uses the phone's on-device speech recognition while you hold the mic. Audio isn't recorded or kept. Face ID or fingerprint, if you turn it on, is checked by the phone; Ledger only learns whether it succeeded.
Subscriptions
Ledger Pro is sold through the App Store and Google Play. Apple or Google handles the payment and tells the app on your phone whether you're subscribed. We don't receive your name, email or payment details.
Jailbroken phones
Ledger checks, on the phone, whether iOS or Android has been modified (jailbroken or rooted). If it has, Ledger doesn't open, because other apps could read its data. The result isn't sent anywhere.
Your choices
- Delete any item, or everything, from the You tab.
- Export your data as a CSV file from the You tab.
- Deleting the app deletes everything Ledger stored.
Children
Ledger isn't meant for children under 13 and doesn't knowingly collect anything from anyone.
This website
This site uses no cookies, analytics or third-party content. Its fonts are served from this site. The server that hosts it may keep standard access logs (such as IP address and time) for security.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions: rajatrao13@gmail.com.