Privacy Policy

1. Information We Collect

We collect information that you provide directly to us when you:

• Create an account (phone number, name, and password)
• Create and manage ledgers
• Add entries to your ledgers
• Contact us for support

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Enable ledger sharing functionality with other users
• Send you technical notices and security alerts
• Respond to your comments and questions
• Protect against fraudulent or illegal activity

3. Data Security

We take data security seriously:

• All passwords are encrypted using bcrypt hashing
• Database connections are secured and encrypted
• User authentication uses JWT tokens with expiration
• We never store passwords in plain text

4. Information Sharing

We may share your information in the following circumstances:

• Ledger Sharing: When you add a phone number to an entry, that ledger becomes visible to the user with that phone number (read-only access)
• Legal Requirements: If required by law or to protect our rights
• We do NOT sell your personal information to third parties

5. Your Rights

You have the right to:

• Access your personal information
• Update or correct your information
• Delete your account and all associated data
• Export your ledger data (CSV, HTML, PDF)

6. Data Retention

We retain your information for as long as your account is active. When you delete your account, all your data (ledgers, entries, and personal information) is permanently deleted from our servers.

7. Cookies and Tracking

We use local storage to maintain your login session. We do not use third-party tracking cookies or analytics services.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.