How your data is handled in Ledgr
Ledgr is a privacy-focused budget tracking application. This policy describes how your data is handled.
Data Controller: Johnathen Chilcher / Techloom.it LLC
Contact: privacy@techloom.it
All financial data you enter (accounts, transactions, budgets, investments, etc.) is stored locally on your device in an encrypted SQLite database. This data never leaves your device unless you explicitly export it. Optional AES-256-GCM encryption is available to protect your database at rest.
When you add investment holdings with ticker symbols, Ledgr sends those ticker symbols only to the Yahoo Finance API to retrieve current market prices. No personal or financial data is transmitted. Price data is cached locally for 15-60 minutes to minimize external requests. These requests are user-initiated only.
If you use the bank sync feature, your banking credentials are sent directly to your bank's OFX server. Ledgr does not act as an intermediary and does not store, log, or transmit your banking credentials to any third party.
Ledgr periodically makes an anonymous request to the GitHub Releases API to check for new versions. No personal or device-identifying information is sent with this request.
Even though Ledgr stores all data locally, we respect your data rights:
Your data is protected by your device's security. Optional database encryption (AES-256-GCM) and password protection are available within the app. You are responsible for:
Ledgr is not directed at children under 13. We do not knowingly collect data from children.
| Service | Data Sent | Purpose |
|---|---|---|
| Yahoo Finance API | Ticker symbols only | Market price lookup |
| Bank OFX servers | Banking credentials (direct) | Transaction sync |
| GitHub Releases API | Anonymous version check | Auto-update |
These services are subject to their own privacy policies.
We may update this policy from time to time. Changes will be posted to this page and noted in the changelog.