Privacy Policy

Effective date: 2026-06-15

This policy explains how Together Ledger collects, uses, stores, and protects information when you use the app.

1. Who We Are

Together Ledger is a local-first personal and family bookkeeping app.

2. Information We Collect

2.1 Local personal ledger data

When you do not sign in, or when you use your personal ledger, records are stored on your device by default and are not uploaded to our server. This may include transaction records, amounts, notes, categories, accounts, dates, budgets, and local settings.

2.2 Family ledger data

When you create or join a family ledger, family records, accounts, categories, budgets, member relationships, roles, permissions, and recorder identifiers are stored on our server so members can collaborate and sync data.

2.3 Account and sign-in information

• Email address for email sign-in and verification.
• Password hashes for email sign-in. We do not store plaintext passwords.
• Email verification codes, which are temporary and expire after use or timeout.
• Apple user identifier from Sign in with Apple, used only for account identification.
• Nickname and avatar information if you provide it or if Apple shares it during authorization.
• Points, shop items, purchased virtual items, and related account state after sign-in.

2.4 Screenshot quick entry

Screenshot quick entry uses iOS Shortcuts and on-device text recognition. Together Ledger receives extracted text only. The app does not read your photo library and does not upload the original screenshot.

2.5 Information we do not collect

• We do not collect location information.
• We do not actively read contacts, photos, or camera data.
• We do not collect device advertising identifiers for tracking.
• We do not sell your data or use ledger content for advertising.

3. How We Use Information

We use information to provide bookkeeping, family collaboration, account authentication, sync, backup, content safety checks, customer support, and product functionality. Text such as notes, category names, account names, and nicknames may be checked for illegal or harmful content.

4. Third-Party Services

• Sign in with Apple is provided by Apple Inc. Together Ledger receives authorization results needed for sign-in.
• Email verification may use an email service provider to send verification codes.

5. Storage and Protection

Local data is stored in the app sandbox on your device. Server data is transmitted over HTTPS where available. Passwords are hashed before storage. Apple identity tokens are used for verification and are not stored as long-term credentials.

6. Data Retention and Deletion

Local personal data remains on your device until you delete it or uninstall the app. Server account and family ledger data remains until you delete your account, leave the family where applicable, or request deletion. After account deletion, server data linked to your account is removed and cannot be restored.

7. Your Rights

You may access, export, delete, and manage your local data in the app. You may request account deletion or contact us about privacy questions at samegem@163.com.

8. Children

Together Ledger is not directed to children under the age required by applicable law to consent to data processing. If you believe a child provided personal information, contact us so we can take appropriate action.

9. Changes

We may update this policy when laws, platform requirements, or product features change. The effective date will be updated when needed.

10. Contact

Email: samegem@163.com