Privacy Policy

1. Local-First Architecture

Ledgio is engineered from the ground up to keep your financial life private. When you use the app without logging in (or while offline), all data remains strictly inside your device's browser memory (LocalStorage and IndexedDB).

In offline or guest mode, your numbers, transaction history, categories, and debts never leave your physical device.

2. Optional Cloud Synchronization

If you choose to create an account and sign in, your ledger automatically synchronizes so you can view your budgets on your other devices. Here is exactly how that works:

• Encrypted in Transit: All communication between your device and our cloud backend uses secure HTTPS/TLS encryption.
• Postgres Row Level Security (RLS): Our database runs on Supabase (PostgreSQL). Every table row is gated by database-level Row Level Security policies matching your authenticated UUID. No other user can query or view your financial records.
• Private Account Ownership: Your records are private to your account. We never monetize, package, train AI models on, or sell your transactions.

3. Anonymous Analytics & Telemetry

To ensure reliability and monitor installation performance across devices (such as Android PWA vs desktop browser), Ledgio records minimal, anonymous application events to an internal app_analytics table:

• What we record: Anonymous installation confirmations, app launch counters, platform type (e.g., Android, Windows), display mode (standalone PWA vs browser tab), and the app software version. Analytics events are not linked to your account.
• What we NEVER record: We never record account IDs, account balances, transaction amounts, merchant names, category titles, bank information, or sensitive financial data in telemetry.
• No Third-Party Ad Trackers: We do not include Google Analytics, Facebook Pixel, advertising SDKs, cross-site trackers, or commercial telemetry beacons.

4. Third-Party Infrastructure

Ledgio utilizes a minimal set of established infrastructure providers to deliver its services:

• Supabase: Provides authentication services, PostgreSQL database storage, and edge API routing.
• GitHub Pages / GitHub: Hosts static web application assets and serves as our open-source codebase repository.
• Content Delivery Networks (CDNs): Google Fonts and Cloudflare CDNJS provide typography and vector icon stylesheets with non-blocking media loading.
• OAuth Providers: If you choose "Continue with Google" or "Continue with GitHub", your authentication token is verified through that provider.

5. Data Portability & Deletion

You have complete control over your information at all times:

• Export: You can export your full transaction ledger, category caps, and loan records to CSV spreadsheets or portable JSON files at any time with a single click in Settings.
• Local Wipe: Clearing your browser data or using the reset option immediately deletes all offline records stored on your device.
• Cloud Account Deletion: If you wish to delete your synchronized account and all associated cloud database records, you can execute a profile reset or open a data deletion request on our GitHub repository.

6. Open Source Verifiability

Because Ledgio is 100% open-source software under the MIT License, every network request, database query, sync queue mechanism, and telemetry payload is open for public inspection on GitHub. You can verify that our code behaves exactly as described in this policy.

7. Changes to this Policy

We may update this Privacy Policy periodically. Any revisions will be reflected with an updated date at the top of this document. Continued use of Ledgio indicates acknowledgment of the revised policy.

8. Contact Us

If you have any questions, feedback, or concerns about privacy in Ledgio, please reach out by opening an issue on our public GitHub repository: Ledgio GitHub Issues.