Privacy policy
Daily Ledger is operated by Allen Bing. We process necessary data to provide sign-in, ledger synchronization, data recovery and service security.
Without signing in, entries stay on your device. After sign-in, account entries—including amounts, income/expense type, categories, dates, notes, currencies, saved exchange rates, ordering and deletion markers—are stored with Supabase to sync across your devices. Existing local entries upload only if you choose to import them.
Google or Apple verifies your identity. Supabase stores your user ID, email and basic profile returned by the provider, which may include your name. Apple may supply a private relay email. We do not receive your Google or Apple password. The cloud database is currently hosted in Seoul, South Korea.
Existing email accounts can also sign in with an email and password verified by Supabase. The app does not save the entered password; session credentials are kept in system secure storage. The app does not offer email registration or self-service password resets.
The local database is encrypted; its key is kept in system secure storage. Cloud data uses HTTPS in transit and provider storage encryption. It is not end-to-end encrypted: authorized administrators can access cloud entries. Losing the device or encryption key may make unsynced, unbacked-up data unrecoverable.
Reference-rate requests go to open.er-api.com without entry amounts, notes or account emails. Network providers may process IP addresses, timestamps and operational/security logs. Currency, language and privacy-lock preferences stay on-device. The operating system verifies biometrics or device passcodes; the app does not receive those credentials. The current app has no advertising or third-party behavioral analytics SDK.
Signing out retains the account and cloud data and may leave account data cached on-device. Account deletion removes the online account, cloud entries and synchronization data, and clears account data on the current device. Your independent local ledger remains. Offline copies on other devices and exported backups may require separate cleanup. Provider backups and security logs follow provider retention policies; underlying copies may not disappear immediately.
New backups are password-encrypted and contain active entries and saved rates. The backup password is not uploaded and cannot be recovered by us. Legacy JSON backups are unencrypted; store or dispose of them carefully.
This website is hosted by Cloudflare, which may process connection information such as IP addresses for delivery and security. The website stores your chosen language locally in your browser. We have not added advertising or behavioral analytics to the website.
For privacy questions, access or correction requests, or account deletion, contact the email below. We may verify account ownership; never send passwords or verification codes. Policy updates are posted here with a revised date.
allenbing.apps@gmail.com