MiniLedger
Privacy policy
MiniLedger is a personal record-keeping app for money you lend to and borrow from people. It does not offer, arrange or process loans or payments, and the people you record never receive anything from MiniLedger. This policy explains what the app stores and why.
What we store in your account
- Your email address, to sign you in with one-time codes.
- An optional display name and your timezone, so due dates and "overdue" use your local day.
- Your records: the names you give to people, and each loan and repayment you enter (direction, amounts, dates and optional notes).
- Security data: sign-in sessions (only a keyed hash of the refresh token), and one-time code records (a keyed hash of the code and of the requesting IP address) that are deleted within about 24 hours.
What stays on your phone
Receipt photos never leave your device. They are stored in the app's private storage, are not uploaded, and are excluded from Android backup, so they are lost if you uninstall the app or change phones. Sign-in credentials are kept in Android's encrypted secure storage.
Why we use it
Only to provide the app: signing you in, showing your records and totals, and keeping your account secure. We do not use your data for advertising, we do not sell or share it, and the app contains no analytics, advertising or crash-reporting SDKs.
Service providers
- Neon hosts the database that holds your account and records.
- Render runs the MiniLedger server; its request logs contain no amounts, names or codes.
- Resend receives your email address to deliver sign-in codes.
Data is encrypted in transit (HTTPS) between the app, the server and these providers, who process it only on our behalf.
Permissions
The app asks for the camera only when you choose to photograph a receipt. Choosing a photo uses Android's photo picker, which needs no storage permission. MiniLedger never accesses your contacts, location or SMS.
Retention and deletion
Your data is kept until you delete your account. Deleting it (in the app: Settings → Delete account) permanently removes your account, people, loans, repayments and sessions, and removes receipt photos from that phone. Encrypted backups roll off within 30 days. See how to delete your data.
Children
MiniLedger is not directed at children under 13.
Changes and contact
We will update this page and its effective date if anything changes. Questions: support@surajmishra.me.