Privacy Policy
Last updated: September 2026
Information We Collect
To run LedgerNests we collect: your account ID; your email address (to sign you in, and to email you about your account and LedgerNests' own paid features) and display name; the bill data you enter (such as bill names, amounts, due dates, categories and, if you add them, the last four digits of an account) and your households' names and members; your subscription status and purchase history — never your card details — from Apple or Stripe; your time zone, so reminders arrive at the right local time; device and push-notification identifiers; usage and product-interaction events, such as the features you use; on the website, an approximate location (such as city and country) estimated from your IP address; and error and crash reports and other diagnostic data. We never ask for full account or card numbers or bank credentials, and we do not collect any other sensitive financial information.
How We Use Your Information
Your information is used to provide and improve the LedgerNests service, and to email you about your account and about LedgerNests' own paid features (for example, when your free reminders are ending). Bill data is stored securely in Google Firebase and is accessible only to members of your household. We do not sell or rent your personal information, and we never share it for third-party advertising. We share it only with the service providers we rely on to run LedgerNests, described below.
Service Providers
We rely on a few third-party processors to operate LedgerNests, each handling only the data needed for its part of the service: Google Firebase (authentication, database, hosting, and push-notification delivery, through Apple's push service on iPhone), Google reCAPTCHA Enterprise (on the website, to prevent abuse), Apple (In-App Purchase billing for Pro on iOS), RevenueCat (which manages App Store subscriptions for us and receives your account ID and purchase history), Stripe (Pro subscription billing on the web), Resend (email: account verification, account and subscription notices, and messages about LedgerNests' own paid features such as your free reminders ending; bill reminders are push notifications, not email), and PostHog (product analytics and error reporting, which receives your account ID, usage events, error reports, subscription events and, for signed-in users, your email address, so we can understand and improve the service; it is set not to store IP addresses, uses them on the website only to estimate an approximate location, and receives no location from the iOS app). Each provider may use your data only to provide its service to us, and must protect it at least as well as this policy describes. We do not sell your data or use it for third-party advertising.
Payment Processing
Pro is billed monthly — through the Apple App Store (In-App Purchase) when you subscribe on iOS, and through Stripe when you subscribe on the web. We never see or store your card details: on iOS your payment is processed by Apple under its App Store terms, and on the web it is processed directly by Stripe in accordance with PCI DSS standards. See Apple's privacy policy at apple.com/legal/privacy and Stripe's at stripe.com/privacy for details.
Data Storage & Security
Your data is stored in Google Cloud (Firebase) infrastructure with encryption at rest and in transit. We use Firebase Authentication for secure account management and Firestore security rules to ensure users can only access data within their household. We keep encrypted backups of the database for disaster recovery; see Data Deletion for how long they last.
Household Data Sharing
When you create or join a household, bill data within that household is visible to all household members. You control who is added to your household. Leaving a household removes your access to that household's data.
Data Deletion
You can delete your account at any time in the app: open the account menu, tap Manage, then Account and Delete Account. This permanently deletes your account and user data right away, removes you from every household, and deletes any household you own along with its bills. Encrypted database backups are kept for up to 98 days, so deleted data is gone from them within 98 days. Deleting your account cancels a web (Stripe) subscription, but it cannot cancel an App Store subscription — cancel that first on your iPhone in Settings › your name › Subscriptions.
To have the product-analytics data we hold about you deleted as well, email support@ledgernests.com.
Push Notifications
Push notifications are optional and require explicit opt-in. You can turn them on or off at any time in the app under Manage › Notifications, or in your device settings. Notification tokens are stored securely and used only to deliver bill reminders and household activity alerts.
Changes to This Policy
We may update this policy from time to time. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact
For privacy-related questions, or to ask what data we hold about you, email support@ledgernests.com.