Privacy Policy

Your Privacy Matters

LedgerPad is designed with privacy at its core. Your business data stays on your device and under your control. We do not sell, rent, or share your personal or business information with third parties for marketing purposes.

Data Storage

All data is stored locally on your device using Apple's Core Data framework:

• Invoices, quotes, and receipts
• Customer information (names, emails, phone numbers, addresses)
• Expense records
• Saved items catalog
• Business settings and preferences

If you enable iCloud Sync, data is also stored in your personal iCloud account via Apple's CloudKit framework. Backups are saved to your device's local storage and are never uploaded to external servers without your action.

Data Security

LedgerPad relies on Apple platform security features and secure storage practices:

• iOS Keychain for credential storage (API keys, bank details)
• Biometric authentication (Face ID / Touch ID) for app access
• Secure HTTPS for all external API communications

Third-Party Services

LedgerPad integrates with optional third-party services only when you enable them:

• Stripe — For online payment link creation. Your Stripe API keys are stored in the iOS Keychain. Payment data is processed by Stripe per their privacy policy.
• Zettle by PayPal — For card reader payments. The bundled Zettle SDK (iZettlePayments) and PayPal risk component (PPRiskMagnes) may collect the following data for fraud prevention, payment processing, analytics, and service improvement: email address, name, payment information, product interaction data, coarse and precise location, customer support data, user ID, device ID, performance data, usage data, and other operational data. Some of this data may be used for PayPal's analytics, product personalisation, and developer advertising purposes. None of it is used for cross-app tracking.
• HMRC — For Making Tax Digital VAT submissions. OAuth tokens are stored securely and used only for authorised API calls to HMRC.

No data is shared with these services unless you initiate a specific action (e.g. creating a payment link, using a card reader, or submitting a VAT return).

Notifications

Payment reminders and overdue notifications are scheduled locally on your device using Apple's notification framework. No notification data is sent to external servers.

Analytics & Data Collection

LedgerPad itself does not include first-party analytics, tracking pixels, or advertising frameworks. We do not collect usage data, crash reports, or user behaviour information.

However, the bundled Zettle/PayPal payment SDKs declare data collection for fraud prevention, payment processing, analytics, product personalisation, and developer advertising. The data types include: email address, name, payment information, product interaction, coarse and precise location, customer support data, user ID, device ID, performance data, usage data, and other operational data. This collection occurs only when you use card reader features and is governed by PayPal's privacy policy. None of this data is used for cross-app tracking (NSPrivacyTracking is false across all bundled manifests).

Data Sharing & Export

You can export your data at any time via CSV, IIF (QuickBooks), or PDF formats. You control when and with whom your data is shared. Backups can be created and restored locally.

Children's Privacy

LedgerPad is a business tool not directed at children under 13. We do not knowingly collect information from children.

Your Rights

• Access — All your data is visible within the app
• Export — Export any time via More → Export Data
• Delete — Delete individual records or reset the app entirely
• Portability — Backups are standard JSON files you own

Contact

If you have questions about this privacy policy, please contact us at support@ledgerpad.app