Privacy policy

Last updated 16 October 2026

Ledgerly is a private household finance app. It is run by its owner for their own household and the people they invite. This policy explains what data it handles and why.

What we collect

• Your account: email address and a two-factor authentication factor.
• Financial data you choose to connect or import: account names, balances, transactions and, for crypto, holdings and trade history. Bank data is read-only via regulated open-banking providers; we never see your bank login.
• Things you add: categories, budgets, goals, notes, alert settings and notification preferences.

How it is used

Only to show you and your household your finances: balances, net worth, budgets, gains and alerts. We do not sell data, show adverts, or use it for anything else.

Who can see it

Members of your household see shared accounts. Accounts you mark private are visible only to you. Data is processed by the services that run the app: Supabase (database and sign-in), Vercel (hosting), and, only for features you use, Plaid or Enable Banking (bank connections), Coinbase, Kraken, Binance, OKX, Crypto.com, Bitstamp, Gemini, Bitpanda, Trading 212, eToro, Interactive Brokers or SnapTrade (exchange and broker data you connect), mempool.space and PublicNode (balances of wallet addresses you add; the address is sent to them), CoinGecko and Frankfurter (public price and exchange-rate data; none of your data is sent), and Resend (alert emails).

Usage analytics

The live site counts page views with Vercel Web Analytics to see which pages get used. It sets no cookies and stores no personal data: visits are counted with a hash that resets every day. Before a page view is sent, the app removes search terms and filters from the address and replaces account, transaction, member and invite ids with placeholders, so it records only which page was opened, along with the browser, device type, country and referring site. No financial data is ever included.

AI features

AI is off unless your household owner turns it on and, for your private accounts, you agree to the AI terms. When it's on, transaction descriptions, amounts, dates and category names are sent to an AI provider to suggest categories. Account numbers, names and logins are never sent. No AI provider is in use yet; this policy will name it before any data is sent.

Security

Two-factor sign-in is required. Access tokens and API keys for connected services are encrypted. Every database row is restricted to its household. Connections are read-only.

Your choices

You can disconnect any account at any time, which deletes its stored access. You can revoke bank access in your bank's app. Settings → Your data downloads a copy of everything you can see, and Settings → Delete account deletes your login and your data.

Contact

Questions about this policy: contact the Ledgerly operator at the email address you were invited from.