Ledge
Privacy Policy
Effective date: November 5, 2026 · Last updated: November 5, 2026
The short version
- Your financial data is stored only on your device. It is never sent to Thinkzle.
- No accounts, no ads, no analytics, no tracking.
- Camera, photos, notifications and biometrics are used only for the features you turn on, and are processed on your device.
1. Who we are
Ledge (the “App”) is developed by Thinkzle (“we”, “us”). This policy explains how the App handles information on iOS, iPadOS and Android.
2. Data you enter
Ledge stores the information you add — transactions, amounts, categories, notes, accounts, budgets, savings goals, recurring rules and your preferences (such as currency and appearance) — in a database on your device.
We do not operate servers for Ledge, and the App does not upload this data to us or anyone else. We cannot see, access or recover it.
3. Permissions we ask for
| Permission | Why | What happens to the data |
|---|---|---|
| Camera | Scan a receipt to pre-fill a transaction (where available) | The image is processed on your device to read text. It is not uploaded or kept after scanning. |
| Photos | Pick a receipt photo you already have | Only the photo you select is read, on your device. |
| Face ID / Touch ID / fingerprint | Optional app lock | Handled entirely by your device's operating system. Ledge only learns whether authentication succeeded and never receives biometric data. |
| Notifications | Budget alerts and reminders | Notifications are scheduled locally on your device. |
You can change any of these permissions at any time in your device settings. The rest of the App keeps working without them.
4. Exports & backups
- Exports: when you export data (for example CSV, PDF or a backup file), the file is created on your device and goes only where you choose to save or share it. After that it is subject to the privacy practices of that destination.
- Device backups: depending on your device settings, App data may be included in your iCloud or Google device backups. Those backups are managed by Apple or Google under your account, not by us.
5. Third parties
Ledge contains no advertising, analytics or crash-reporting SDKs, and we do not sell or share your personal information.
On Android, on-device receipt text recognition uses Google ML Kit. The recognition runs on your device and your images are not sent to Google; ML Kit may contact Google to download model updates and may send limited, non-personal diagnostic data about the API's performance. See ML Kit terms.
6. Security
Your data is protected by your device's own security (passcode, encryption) and, if you enable it, Ledge's biometric lock. Because data never leaves your device through Ledge, there is no Thinkzle server that could be breached.
7. Children
Ledge is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children.
8. Your rights & deletion
You are always in control of your data:
- Edit or delete any entry inside the App.
- Use Settings → Clear All Data to erase everything (where available).
- Uninstalling the App removes its data from your device.
Because we do not hold any of your personal data, there is nothing for us to access, correct or delete on our side — but if you have a question about rights you may have under laws such as the GDPR or CCPA/CPRA, contact us and we'll gladly help.
9. Changes to this policy
If we change how Ledge handles information, we will update this page and the “Last updated” date above. Significant changes will also be noted in the App's release notes.
10. Contact us
Questions about privacy? Email privacy@thinkzle.com.