LedgerSecurity at Ledger
Bank-grade protection, designed in from day one.
Encrypted everywhere
TLS encryption in transit and AES-256 encryption at rest.
Read-only banking
Bank links can view, never move, money. Consent expires every 90 days.
Strict data isolation
Every record is locked to its owner at database level — nobody else can read it.
No passwords stored
Passwords are hashed by our authentication provider. We never see them.
On-device reports
Your health dossier PDF is built on your device and never uploaded.
You're in control
Export or permanently delete everything in one tap from Settings.
100% ad-free
No ad networks, tracking pixels or behavioural profiling — on every plan, forever.
Subscriptions you can't fake
Plan access is checked on our servers, not in your browser, so paid features can't be unlocked by tampering with the app.
Ongoing checks
We run automated security and dependency scans before each release and fix findings promptly.
Report a vulnerability
Found a security issue? Email support@ledgeruk.app with "Security report" in the subject. We'll respond within 48 hours and credit responsible disclosures.