Privacy Policy

Ledger ("we," "us," or "our") is committed to protecting your privacy. This policy explains what data we collect when you use Ledger, how we use it, who we share it with, and the choices you have. We keep it plain.

1. What We Collect

Account information. When you create an account, we collect your email address, display name, and profile photo (if you provide one).

Study data. The core of Ledger — your study sessions, hour logs, section progress, readiness scores, exam window dates, and any notes you enter.

Social data. If you use study groups, follow other users, or share activity, we store your firm code, follower/following relationships, and any activity visible to your connections based on your privacy settings.

Usage data. We collect standard technical data: device type, browser, IP address, pages visited, and feature usage. We use this to keep the app running and improve it.

Payment data. If you subscribe, payments are processed by Stripe. We do not store your full card number. We receive and store a payment token, subscription status, and billing history.

2. How We Use Your Data

We do not sell your personal data. We do not use your study data for advertising.

3. Who We Share Data With

We share data only as necessary to operate the Service:

• Firebase (Google): Authentication and database storage. Your data is stored in Google Cloud infrastructure.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Vercel: Application hosting. No user data is stored at the CDN layer.
• Other users: If your account is public, your display name, avatar, study streak, and logged hours are visible to other Ledger users. You can make your account private in Settings.

We may share data if required by law (subpoena, court order) or to protect the safety of users or the public.

4. Your Privacy Controls

Private accounts. In Settings → Privacy, you can make your account private. Private accounts require follow approval, and only approved followers can see your study activity.

Delete your account. You can delete your account from Settings. This permanently removes your data from our systems within 30 days, except where retention is required by law.

Export your data. Contact us at support@ledgercpa.com to request an export of your study data.

Email communications. You can opt out of non-essential emails at any time by clicking "unsubscribe" in any email or updating your notification settings in the app.

5. Data Retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Aggregated, anonymized data (not linked to you) may be retained for product analytics.

Stripe retains billing records for as long as required for tax and compliance purposes.

6. Security

We use industry-standard measures to protect your data: TLS encryption in transit, Firebase security rules, and Stripe for all payment handling. No system is 100% secure. If you discover a security issue, please email support@ledgercpa.com.

7. Children's Privacy

Ledger is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have, we'll delete it promptly.

8. Changes to This Policy

We may update this policy as the product evolves. When we do, we'll update the "Last updated" date above. For material changes, we'll notify you by email or in-app notice. Continued use of Ledger after changes means you accept the updated policy.