Privacy Policy

Information We Collect

• Email address: collected when you sign in with Apple or via a magic link. An account is required to use Nth Ledger.
• Receipt images: photos you take or select are sent to our AI providers (Google and OpenAI) for scanning, regardless of subscription tier. Images are stored in your Nth Ledger account (Cloudflare R2) on every plan, subject to your plan's monthly limits.
• Expense data: merchant or income source name, amount, currency, date, category, and notes that you enter or that AI extracts from receipts.
• Profile photo: if you choose to upload one from Settings.
• Diagnostic data: when the app or our backend hits a crash or an error, a diagnostic report is sent to our error-monitoring provider (Sentry) so we can find and fix it. These reports carry the error itself plus technical context such as your device model, OS version, and app version. They are tagged with your account's internal ID only: no email address, no receipt images, no expense data, and no screenshots.

How We Use Your Information

• To provide and operate the Nth Ledger service: scanning receipts, organising expenses, and syncing data across your devices.
• To process receipt images through our AI providers (Google and OpenAI) for automatic data extraction. Images are sent to them solely for this purpose.
• To sync your data securely across your devices.
• To send transactional emails (e.g. sign-in magic links). We do not send marketing emails.
• To diagnose crashes and errors so we can keep the app working. We use diagnostic reports only to fix problems, never to build a profile of you or to track your behaviour.
• We do not sell, rent, or share your personal data with third parties for advertising.

Third-Party Services

• Google: receipt images and text may be sent to Google's Gemini API for AI processing. Google's privacy policy applies: policies.google.com/privacy
• OpenAI: receipt images and text may be sent to OpenAI's API for AI processing. OpenAI's privacy policy applies: openai.com/privacy
• RevenueCat: handles subscription management and purchase verification. RevenueCat's privacy policy applies: revenuecat.com/privacy
• Cloudflare: our infrastructure provider for compute, database, and file storage. Cloudflare's privacy policy applies: cloudflare.com/privacypolicy
• Resend: used to deliver magic-link sign-in emails. Resend's privacy policy applies: resend.com/legal/privacy-policy
• Sentry: receives crash and error reports from the app and our backend, tagged with your internal account ID only, as described above. Sentry's privacy policy applies: sentry.io/privacy

Data Storage and Security

Your expense data and receipt images are stored in Cloudflare's global infrastructure with encryption in transit (TLS) and at rest. Access tokens are short-lived and refresh tokens are stored as hashed values. We follow industry-standard security practices, but no transmission over the internet is 100% secure.

Data Retention

We retain your data as long as your account is active. You can permanently delete your account and all associated data at any time from Settings in the app; deletion is immediate, with any residual copies purged within 30 days. After deletion we keep a minimal record only as long as needed to meet legal, tax, and billing or dispute-resolution obligations: a one-way hash of your email plus your subscription identifiers, and no receipts, images, or other content. We also retain anonymized, aggregate scan-usage statistics that are no longer linked to you. Any diagnostic reports already sent to Sentry age out on their own retention schedule rather than being erased by account deletion, though because they carry only your internal account ID, deleting your account removes the record that maps that ID back to you; email us at hi@nthledger.com if you want them removed sooner. Data stored locally on your device is removed when you uninstall the app.

Children's Privacy

Nth Ledger is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Your Rights

• Access: you can request a copy of your personal data at any time.
• Deletion: you can request deletion of your account and all associated data.
• Correction: you can update your email or profile information through the app.
• Portability: you can export your expense data as a PDF or CSV from within the app, or download a full archive of everything in your account, receipt images included.
• To exercise any of these rights, email us at hi@nthledger.com.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date above. Continued use of the app after changes constitutes acceptance of the revised policy.