Privacy Policy

Who we are

OurLedger is operated by AutoServeX, Ahmedabad, Gujarat, India ("we," "us"). This policy explains what data OurLedger collects, why, and what control you have over it.

What we collect

• Account information: name, email address, phone number (optional, used to help others find you for groups/debts), password (hashed, never stored in plain text).
• Financial data you enter: transactions, accounts, budgets, goals, group expenses, and debts — this is the core purpose of the app and stays under your control.
• Receipt images, if you use AI receipt scanning — sent to our AI provider (Anthropic) to extract line items. We never save or act on what's extracted until you confirm it on screen.
• Device and usage data: standard technical data (IP address, device type, app version) for security and debugging.

We do not collect data from you that isn't needed to run the app. We do not buy data about you from third parties.

How we use it

• To run the app's core features (tracking, splitting, budgeting, reporting).
• To process payments for Individual Plus / Family Plan subscriptions, via Razorpay.
• To send you account-related emails (verification codes, password resets, receipts) and, if enabled, push notifications.
• To improve the app and fix bugs — only using de-identified or aggregate data where possible.

Who we share it with

• Razorpay — processes subscription payments. We never see or store your card/UPI details ourselves.
• Anthropic (Claude API) — processes receipt images you choose to scan, to extract line items. Images are sent only when you initiate a scan.
• Email/push notification providers — to deliver the emails and notifications described above.

We do not sell your data to anyone, for any reason.

Data retention & deletion

When you delete your account, your phone number and email address are removed immediately, so they can no longer be linked back to you or used to log in again. For accounting-integrity purposes, your transaction records are retained in a de-identified state rather than purged instantly, and are permanently erased 90 days after deletion.

Your rights

• Access & export: download a full copy of your data in-app at any time.
• Correction: edit any of your data directly in the app.
• Deletion: delete your account in-app at any time — see retention note above.
• Grievance: contact our Grievance Officer (below) with any complaint about how your data is handled.

Security

Your password is protected using industry-standard one-way hashing (scrypt) — we cannot see or recover it, even internally. Every password change signs you out of all other sessions. All data is encrypted in transit (HTTPS). If you sign in with a phone number, we treat it as a secondary contact method rather than a standalone credential once your account has a password or verified email — this protects you if an old, unused phone number is ever reassigned to someone else by your telecom provider.

Children's privacy

OurLedger is not directed at children under 18. We don't knowingly collect data from anyone under that age.

Changes to this policy

We'll post any changes here with an updated date, and notify you in-app for material changes.

Grievance Officer

Parth KaPatel
Email: hello@ourledger.in

Governing law

This policy is governed by the laws of Ahmedabad, Gujarat, India.