Privacy Policy

Last updated October 2026

Your financial life is personal. This policy explains exactly what we collect, why, and the control you have over it.

1. Who we are

Ledger UK ("Ledger", "we") is the data controller for personal data processed through the Ledger app and website. Contact our privacy team at support@ledgeruk.app.

2. What we collect

Account details: name, email, and optionally mobile number, postcode and date of birth.
Finances you enter: debts, bills, savings goals, budgets and categories.
Bank data (only if you connect a bank): account names, balances and transactions, received read-only through an FCA-authorised open banking provider.
Technical data: basic device and usage information needed to keep the service secure and working.

3. Why we use it (lawful basis)

Contract: to provide the app and the features you choose.
Consent: for open banking connections and marketing emails — withdraw any time.
Legitimate interests: to keep the service secure and prevent fraud.
Legal obligation: tax and accounting records for paid subscriptions.

4. Open banking

Bank connections are read-only. Ledger can never move money. Consent lasts 90 days, after which you'll be asked to renew. You can revoke access at any time in Settings, and every consent is recorded with its date and version.

5. Sharing

We never sell your data. We share it only with trusted processors needed to run Ledger — hosting, our open banking provider, our payment provider (Paddle, as merchant of record) and AI processing for coach features — under strict data processing agreements. Household members only see items you choose to share.

6. Retention

We keep your data while your account is active. Delete your account in Settings and your data is erased permanently. Billing records are kept for 6 years as required by HMRC.

7. Your rights

Under UK GDPR you can access, correct, export, restrict, object to or erase your data. Export and delete are built into Settings; email us for anything else. We reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

We only use essential storage to keep you signed in and remember preferences. We do not use advertising or cross-site tracking cookies.

9. International transfers

Where data is processed outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement to keep it protected.