Privacy Notice

Last updated: 27/04/2026

Who we are

Ledger is operated by Egzon Hajdari. We act as the data controller for the personal data we collect through the Service.

What we collect and why

• Account data (email, password hash) — to create and secure your account. Legal basis: contract.
• Journal data (transactions, categories, budget limits) — to provide the Service. Legal basis: contract.
• Usage and device data (IP address, browser type, anonymised event data) — for security, fraud prevention and product improvement. Legal basis: legitimate interests.
• Support messages — to respond to your enquiries. Legal basis: legitimate interests.

Who we share data with

• Hosting and database providers — to operate the Service.
• Paddle, our Merchant of Record — for the sale of subscriptions, payments, tax compliance, billing and invoicing. See Paddle's privacy notice.
• Professional advisers (legal, accounting) where strictly necessary.
• Authorities where required by law.

We do not sell your personal data and we do not use your journal entries for advertising.

How long we keep it

We keep your account and journal data for as long as your account is active. If you delete your account, we delete or anonymise your data within 30 days, except where we are required to retain it (e.g. for tax records, typically 7 years).

Your rights

Depending on your country, you may have the right to access, correct, delete or export your personal data, restrict or object to processing, withdraw consent and lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at [support@yourdomain] and we will respond within one month.

International transfers

Some of our service providers are located outside your country. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Security

We use appropriate technical and organisational measures — including encryption in transit and at rest, access controls and regular reviews — to protect your data against unauthorised access, loss or disclosure.

Cookies

We use only essential cookies needed to keep you signed in and to remember your preferences. We do not use marketing cookies.