Privacy Policy
Last updated 16 August 2026
Ledger is a personal finance tracker operated by Sayantan Roy as an individual project. This page describes, in plain terms, what the app does with your information. It reflects how the app currently works and is written by the app owner, not by any third party.
Who runs this app
Ledger is run by Sayantan Roy. For any privacy question or request, write to sayantan.royy@gmail.com.
Sign-in data
Sign-in is available only through Google. During sign-in the app reads your name and email address from your Google account. Ledger never receives or stores your Google password, and it does not request access to your Gmail, Drive, contacts or any other Google service.
Access is invite-only. If your email address is not on the owner's approved list, the app records the sign-in attempt (email and name) so the owner can approve or decline it, and no app data is made available to that account.
Statements and transactions
Statement files (CSV, Excel, PDF) are read and parsed inside your own browser. Password protected PDFs are unlocked locally in the browser; the file itself is not uploaded to a server for parsing.
What is stored is the resulting transaction data — date, description, amount, account label and category — together with your account and category settings, so that your dashboard, charts and history persist between visits. Your data is stored in the app's managed database and is scoped to your account.
AI categorisation
Transactions that keyword rules cannot classify may be sent to the AI provider and model you select in the app's settings, using the API key you supply. Only the transaction description and amount needed for classification are sent. Your API key is stored encrypted and is used only to make those requests on your behalf. If you do not configure a key, no transaction data is sent to an AI provider.
Family sharing
If you join a family group, other members of that group can see shared household totals. You can turn on "hide my transaction details from family" in your profile, in which case family members see only aggregate monthly figures for you and not individual transactions.
What Ledger does not do
Ledger does not sell your data, does not share it with advertisers, and does not run third-party advertising or marketing trackers. It does not connect to your bank; it only reads the statement files you choose to upload.
Retention and deletion
You can delete individual transactions or an entire import from inside the app at any time. To have your account and all associated data removed, email sayantan.royy@gmail.com and the owner will delete it.
Changes
This policy may be updated as the app changes. The date at the top of this page shows the most recent update.