the privacy policy.

A short, plainly-written account of what we collect, why, and what we will never do with it. We tried to make this readable. Please tell us if we didn’t.

what we collect

The Ledger is designed to know as little about you as possible. To make the app work, we collect:

• Account data — your email address and an encrypted password (or a token from Apple Sign-In).
• Wardrobe data — items you add, their prices, the dates you wore them, the photos you upload, the categories you select.
• Device data — the type of device you use, the operating system version, and a randomly generated install ID so we can tell instances of the app apart for crash reporting.
• Diagnostics — anonymous, aggregated crash reports and performance metrics.

We do not collect your location, your contacts, your browsing history, your purchases outside the app, or any data from third-party services unless you explicitly link them.

what we don’t collect

• We do not track you across other apps or websites.
• We do not sell your data. We will not. There is no business case in which we would.
• We do not use your wardrobe content to train any machine-learning model.
• We do not show you ads. We have no plans to.

how we use it

Your wardrobe data is used to do exactly one thing: render the ledger you keep. It is encrypted in transit and at rest. Diagnostics are used to fix bugs.

who can see it

Only you. Our team can access encrypted backups for the purpose of restoring your data if you ask us to. We do not share data with advertisers, brokers, or any third party that has not been listed in the “service providers” section below.

service providers

We use a small set of vendors to run the service:

• Supabase — database and authentication, hosted in the EU.
• Cloudflare — content delivery and DDoS protection.
• Sentry — anonymous crash reporting.
• PostHog — product analytics, hosted in the US.
• Apple App Store / Google Play — app distribution.

a word on analytics

We keep a modest ledger of our own: which features get used, where people wander off, whether the math is earning its keep. It is measured in events — “a piece was added,” “a wear was logged” — not in watching. There is no session recording, no advertising identifier, no tracking of what you type or where else you browse. Prices are recorded as ranges, never amounts. None of it is sold, and none of it follows you anywhere else. If we wouldn’t write it in the margin of our own notebook, we don’t collect it.

your rights

You may, at any time:

• Export your full ledger as a PDF or CSV (Settings → Export the ledger).
• Delete your account, which permanently erases everything we hold for you within 30 days.
• Ask us what we have on file. Write to us at hello@trytheledger.com.

If you live in the EU, UK, or California, you have additional rights under GDPR, the UK GDPR, or the CCPA. We honor them all by default — you do not need to ask.

children

The Ledger is for adults. We do not knowingly collect data from anyone under 16. If you believe we have, write to us and we will delete it.

changes

If we change this policy, we’ll send a note from the desk at least 14 days before it takes effect. We will not change it quietly.

contact

For privacy questions, write to privacy@trytheledger.com. We aim to reply within three working days.

— end of policy —