Privacy Policy
Last updated: 2 November 2026
This policy explains how Ledger, the personal finance app made by spyglee, handles your information. In short: Ledger keeps your financial data on your device. There is no account, no server holding your records, and we cannot see what you enter.
1. Who we are
Ledger is developed and published by spyglee (“we”, “us”). For anything about this policy or your data, write to hello@spyglee.work.
2. Data that stays on your device
Everything you enter or create in Ledger is stored locally on your device, including:
- accounts, transactions, transfers, categories, and collections;
- budgets and planned or recurring payments;
- receipt photos and the merchant, date, total, and items read from them;
- price history and personal inflation figures;
- app settings.
This data is not sent to spyglee or to anyone else, and we have no copy of it.
3. Receipt scanning
When you photograph a receipt or share a photo into Ledger, text recognition runs on your device. The image and the text read from it are not uploaded anywhere for processing.
4. Device permissions
Ledger asks only for the permissions it needs, and only when you use the related feature:
- Camera — to photograph receipts when you choose to.
- Photos — to read only the photos you pick or share into Ledger.
- Notifications — to tell you when spending reaches a budget limit or a planned payment is due. These are scheduled on the device.
- Face ID, Touch ID, or fingerprint — to unlock Ledger, if you turn this on. The check is done by the operating system; Ledger only learns whether it succeeded and never receives your biometric data.
You can withdraw any permission at any time in your device settings.
5. Import and export
When you import or export a CSV file, Ledger reads or writes only the file you choose. Once you save or share an exported file — for example to a cloud drive, by email, or to another app — that copy is handled by the service you chose, under its own privacy policy.
6. Device backups
Depending on your settings, your device may include Ledger’s data in its own backups, such as iCloud Backup or Android backup. Those backups are controlled by you and by Apple or Google, not by spyglee.
7. What we do not do
- We do not require an account or sign-in.
- We do not show ads or use advertising trackers.
- We do not sell, rent, or share your data.
- We do not build profiles about you.
8. App stores
Ledger is distributed through the Apple App Store and Google Play. Apple and Google process information about your download and purchases and, if you allow it, crash reports and usage statistics, under their own privacy policies. They may give us aggregated, anonymous statistics, such as download counts, that do not identify you.
9. If you contact us
If you email us, we receive your email address and whatever you choose to write. We use it only to reply and keep it only as long as the conversation needs. Please do not send us your financial records.
10. Your rights
Because your Ledger data stays on your device, you control it directly: you can view, change, export, or delete it in the app at any time. Deleting the app removes its data from the device, apart from any backups or exported copies you keep.
If you are in the European Economic Area, the United Kingdom, or another place with similar laws, you have the right to access, correct, delete, restrict, or object to the processing of personal data we hold about you, and to lodge a complaint with your data protection authority. In practice, the only personal data we may hold is email correspondence with you.
11. Children
Ledger is not directed at children under 16, and we do not knowingly collect information from them.
12. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change meaningfully affects how your data is handled, we will also point it out in the app or in the release notes.
13. Contact
Questions about privacy: hello@spyglee.work.