Legal

Privacy policy

Last updated 2 August 2026 · Applies to Ledgerious, operated by Ledgerious, Baghdad, Iraq.

The short version

You are trusting us with your family's financial records, so this page tries to be specific rather than reassuring. We collect what the product needs to work — your mobile number, a hash of your PIN, and the records you enter. We do not sell it or advertise against it. Two things do leave our systems: your mobile number goes to Meta so WhatsApp can deliver your sign-in code, and — only if you use the assistant — parts of your records go to the AI provider behind it, which today is DeepSeek, outside Iraq. Both are explained below.

What we collect

To give you an account:

• Your mobile number. It is your identifier — there is no email and no username.
• Your PIN, stored only as a cryptographic hash. We cannot read it or recover it; a forgotten PIN is reset, never retrieved.
• Your family's name, your chosen language, and which family or families you belong to.

Because you entered it:

• Your financial records — accounts, entries, amounts, dates, categories, notes, budgets, goals, recurring rules.
• The people you record: family member names, roles and their balances; and, if you use those parts, employees, salaries, suppliers, projects and clients.
• Files you upload, such as photographs of receipts.

Because the service runs:

• Server logs — request time, page, IP address, browser type — kept for security and troubleshooting and rotated routinely.
• Counts of how much you use the service each month (sign-ins, assistant messages), used for fair-use limits and billing questions.
• A session cookie that keeps you signed in. Your language and light/dark choice are stored in your browser.

We do not use advertising trackers, social-media pixels, fingerprinting, or third-party analytics inside the application.

Who else sees your data

We do not sell, rent or trade personal data, and we do not share it for marketing. There are exactly two places your information goes outside our own systems, plus the ordinary case of a legal obligation.

Meta (WhatsApp), for sign-in codes. When you sign in or verify a number, we send that mobile number and a one-time code to the WhatsApp Cloud API so the message can be delivered. Meta processes it under its own terms. We send nothing else — no financial data ever goes over WhatsApp.

The AI provider, but only when you use the assistant. The assistant answers questions by reading your books, which means the relevant parts of your records — account names, balances, entries, the text of your question — are sent to our Peak AI service and on to the model provider behind it. That provider is currently DeepSeek, and the request is processed on their infrastructure outside Iraq, under their terms. We do not control their retention or whether they use API content to improve their models.

This is the most significant privacy trade-off in the product, so it is worth stating plainly: if you never open the assistant, none of your financial records are sent to it or to any AI provider. The rest of Ledgerious works fully without it. If we change provider, or move the model onto our own hardware, we will update this page and tell existing families.

Legal obligation. We will disclose data if a valid legal order under Iraqi law requires it, and we will tell you unless we are prohibited from doing so.

What we don't do with it

• We do not sell it, rent it, or trade it — to anyone, for any price.
• We do not use your financial records to advertise to you or anyone else.
• We do not use your records to train our own models, and we do not read your books except where you ask us for support and we need to look.

Where your data lives

Each family's records are kept in that family's own separate database, on servers we operate, currently hosted in Microsoft Azure. Backups are taken regularly and kept on the same infrastructure.

We protect access with the usual measures — traffic to the app is encrypted in transit, PINs are stored only as hashes, sessions can be revoked, and access to the servers is limited to us. We are honest about the limits of that: no system is perfectly secure, we do not currently encrypt the databases at rest beyond the protections the hosting platform provides, and we do not promise that a determined attacker could never reach your data. If a breach affects your records we will tell you promptly and tell you what happened.

How long we keep it

Your records are kept for as long as your family exists in Ledgerious, including while a subscription is lapsed or locked — we do not delete a family's books because a payment stopped. Server logs are rotated within a short period. If you ask us to delete your family, we remove its database, uploaded files and control records; the deletion is irreversible, so export first. Backups age out on their normal cycle.

Your choices

• Get a copy. Export your complete records at any time from inside the app, in any subscription state.
• Correct it. Everything you entered can be edited or deleted by your family's admin.
• Ask what we hold. Contact us and we will tell you.
• Have it deleted. Ask us to remove your family and we will, after confirming the request comes from the account's admin.
• Avoid the AI entirely. Simply do not use the assistant; nothing is sent to any AI provider unless you do.

Children

Ledgerious is for adults managing a household. A family admin must be 18 or over. An admin may record a child as a family member, or create a sign-in for an older child — if you do, you are responsible for that consent and for what is recorded about them. We do not knowingly create admin accounts for children.

Changes

If this policy changes, the date above changes with it. If a change materially affects how your data is handled — a new provider, a new category of sharing — we will tell you in the app or by WhatsApp before it takes effect.

Contact

Questions about this policy, or a request about your data: reach us through the support contact shown inside the app. Ledgerious, Baghdad, Iraq.