Privacy policy

Effective 15 September 2026

Ledger is a monthly expense tracker for Android, published by Silow. This policy explains what the app does with your information. It is written to match exactly what the app does; if the app changes in a way that affects your data, this page changes with it.

Using Ledger without an account

Signing in is optional. Without an account, your entries, categories, repeats and receipt photos are stored only on your phone and are never sent to us.

What we store when you sign in

Signing in lets the same ledger sync across your phones. To do that, we store:

Your account

• If you sign in with Google: your name, email address, Google account identifier and a link to your profile picture, as provided by Google.
• If you add a passkey: its public key and the name of the password manager that keeps it. The private part of a passkey never leaves your device.

Your ledger

• Entries: amount, date, whether it is an expense or income, category, payment method (cash, credit or debit), and any description or note you type.
• Categories: names, icons, colours and their order.
• Repeats: their name, amount, how often they renew, the day they renew, whether they remind you to top up, and which months you added or skipped.
• Receipt photos you attach, compressed on your phone before upload.
• A random identifier for each install of the app, and the time each change was made, which is how changes from different phones are put in the right order.

What stays on your phone

• Voice entry. When you add an entry by voice, Android's speech recognition service turns what you say into text. Ledger receives only that text and reads it on your phone. We never receive the audio. The recognition service is part of your device, so its handling of audio is covered by its provider's terms, usually Google.
• Top-up reminders. Worked out and scheduled on your phone. Nothing about them is sent anywhere.
• Assistant features. Android can let an assistant on your phone, such as Gemini, read or add Ledger entries when you ask it to. That only happens at your request and is covered by the assistant's own terms.

Who handles your data

Account and ledger data is stored with Supabase, which hosts our database, sign-in and file storage. Supabase processes it only to provide that service to us. Signing in with Google involves Google, and your profile picture is loaded from Google's servers.

We do not sell your data, share it with advertisers or data brokers, or use it for advertising. Ledger contains no advertising, analytics or tracking code.

We would disclose data only if required by law, and then only what is required.

How it is protected

• Everything sent between the app and our servers is encrypted in transit (HTTPS).
• Data is encrypted at rest by our hosting provider.
• Access is restricted per account in the database itself: a signed-in account can read and add only its own ledger and photos.

Android backup

If you have Android's backup turned on, Android may include Ledger's data on your phone in the backup it keeps in your Google account. That backup is controlled by you in Android's settings, not by us.

How long we keep it, and deleting it

We keep your account and ledger for as long as your account exists. You can delete it at any time:

• In the app: Settings, then Account, then Delete account. Your account, ledger, receipt photos and passkeys are deleted from our servers straight away, and the ledger is erased from that phone.
• Without the app: email privacy@silow.net from the address you signed in with. We delete the account within 30 days and reply to confirm.

Other phones signed in to the same account keep the copy already on them; uninstall the app or clear its storage on those phones to remove it. Deleted data may remain in our hosting provider's routine backups for a limited time before it is overwritten.

See Deleting your Ledger account for the details.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, by emailing privacy@silow.net. Most of it you can also see, change and delete in the app yourself.

Children

Ledger is meant for adults and is not directed at children. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

Changes to this policy

If this policy changes, the new version will be posted here with a new effective date.

Contact

Silow
privacy@silow.net