Privacy Policy

Who we are

LedgerWallet (“we”, “us”) is a household budgeting and money-coaching web app available at useledger.net. This policy explains what information we collect, why we collect it, and how you can control it.

Questions or requests: randymcdonalds236@gmail.com.

Information we collect

Account & profile

• Email address and password (password stored by our auth provider)
• Optional display name and account mode (Personal, Shared, or Linked)
• Household membership and invite-related data when you share with a partner

Financial data you provide

• Transactions and related fields from statement uploads (CSV and PDF)
• Budgeting inputs you create in the app (bills, paycheck plans, goals, categories, habits, coaching notes)

Bank connection (Plaid)

If you connect a bank or credit account with Plaid, we receive and store data needed to sync your accounts, including:

• Institution and account metadata (for example, institution name)
• Transaction history returned by Plaid for linked accounts
• Plaid access tokens and item identifiers stored server-side so we can refresh and sync data on your behalf

We do not ask you to type your bank password into LedgerWallet. Bank login happens through Plaid Link. You can disconnect a linked institution in the app (Upload / bank connect).

Billing (Stripe)

• Subscription status and Stripe customer / subscription identifiers associated with your account
• Payment card details are collected and processed by Stripe — we do not store full card numbers on our servers

Technical & session data

• Session cookies and auth tokens used to keep you signed in (Supabase Auth)
• Basic operational logs from hosting (for example, errors and request metadata) as part of running the service

How we use your information

We use the data above to:

• Provide and sync your budget, transactions, and household sharing
• Power coaching features (insights, goals, bills, habits, weekly brief)
• Connect and refresh bank data via Plaid when you opt in
• Manage LedgerWallet Pro subscriptions through Stripe
• Secure the service, prevent abuse, and fix bugs
• Respond to support and account-deletion requests

We do not sell your personal or financial data.

Who we share data with

We share data with service providers only as needed to run LedgerWallet:

• Supabase — authentication, database, and related backend storage (including encrypted-at-rest hosting of your app data)
• Vercel — application hosting and delivery of the website / APIs
• Plaid — bank linking and transaction sync when you connect an institution
• Stripe — payment processing and subscription billing

We may also disclose information if required by law, or to protect the rights, safety, or integrity of users and the service. We do not sell personal information to data brokers or advertisers.

Cookies & authentication

We use cookies and similar browser storage for essential session authentication (keeping you logged in) and security. These are not used for third-party advertising. If you clear cookies or sign out, you will need to sign in again.

Security

We take reasonable steps to protect your data, including:

• Transport encryption (HTTPS / TLS) in transit
• Access controls in our database layer (including row-level security patterns for user-scoped data)
• Keeping sensitive secrets (API keys, Plaid access tokens, service role keys) on the server — not in the public client bundle

No method of transmission or storage is 100% secure. If you suspect unauthorized access to your account, contact us and change your password promptly.

Retention, disconnection & deletion

• We retain account and financial data while your account is active so the product can work (history, coaching, household sync).
• You can disconnect bank connections in the app; we then stop syncing that institution and remove associated Plaid item credentials from our systems as part of disconnect.
• You can clear imported transactions from Settings where that action is available.
• To delete your account and associated personal data, email randymcdonalds236@gmail.com. We will process requests within a reasonable time, subject to legal or billing retention needs (for example, Stripe records kept by Stripe).

Children’s privacy

LedgerWallet is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

International users

The service is operated from the United States and may process data in the U.S. or other regions where our providers (Supabase, Vercel, Plaid, Stripe) operate. By using LedgerWallet, you understand your information may be transferred to and processed in those locations.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date above and post the updated policy at useledger.net/privacy. Continued use of the service after changes means you accept the updated policy.

Contact

LedgerWallet / useledger.net
Email: randymcdonalds236@gmail.com