02
Data that stays on your phone
These never leave your device:
People you added
Names and phone numbers, including those picked from your address book.
Personal records
Entries that are not shared with another person.
Settings and backups
Backups are files encrypted with your password; where you send them is up to you.
Contacts access
Used only to pick a person. The address book is never read in full or uploaded.
03
Data on our server
The bledger.app server is run by the operator. It stores:
Account
A random ID and the public keys of your passkey and devices. There are no passwords.
Email
Only if you add it yourself to recover access.
Invitation name
The name the inviting person typed into the invitation. The invited person sees it.
Shared entries
Amounts, dates, descriptions, signatures, confirmation requests and decline comments, with people you are connected to. Both sides see them. The server can see them too (there is no end-to-end encryption), but cannot change them unnoticed: entries are signed by both sides.
Push token
An Apple or Google token used to deliver notifications.
Request log
Method, route, response code, time and IP address. No content, amounts or tokens.
04
Why we use it
Only to make shared ledgers, sign-in and notifications work. There is no advertising, analytics or tracking, and no data is sold or passed to third parties for their own purposes.
Apple (APNs), Google (FCM)
Deliver notifications. Notification text contains no amounts or descriptions.
Email service
Sends emails to confirm your address and recover access.
05
Deleting your data
In the app, open Account → Delete account. The account is deleted from the server after 30 days; until then the request can be cancelled, and you get a reminder 3 days before.
Everything that is not signed is deleted: email, sessions, push tokens, devices, invitations and the names in them, and decline comments. Signed shared entries remain: they are a shared history with the other person, who can still see it, but nothing new can be added.
Account → Erase from this phone deletes the data on the device. Questions: support@bledger.app.
06
Children
B-ledger is not intended for children under 13.
07
Changes to this policy
Changes are published on this page with a new date.