Privacy policy

The short version

• Your transactions never leave your phone. Bank alert emails are downloaded, read and stored on your device only.
• We only look at bank and receipt emails. Ledga searches your mailbox for emails from supported bank alert and payment receipt addresses and never downloads anything else.
• Your email sign-in stays on your phone. Whether you connect Gmail, Outlook or Yahoo, our servers never receive access to your mailbox.
• Our servers hold your account and nothing more: your name, email address, the addresses of the mailboxes you connect, and push notification details for your devices.
• No ads, no selling, no analytics on your money.

What stays on your device

The following is stored only on your phone and is never sent to us or anyone else:

• Bank alert and payment receipt emails Ledga downloads from your mailbox
• Transactions, balances, categories, rules and any edits you make
• The sign-in tokens for each mailbox you connect (Google, Microsoft or Yahoo), kept in your phone's secure storage (the iOS Keychain)

Because this data exists only on your device, we can't recover it for you. If you delete the app or lose your phone, it is gone, and Ledga will rebuild it from your inbox the next time you connect.

What our servers store

We never receive or store email content, subjects, senders, message IDs, attachments, transactions, balances or mailbox sign-in tokens. Our server logs record technical identifiers and error types, never the content of your emails.

How new alerts reach your phone

When you turn on auto-sync, Gmail tells our server that “something changed” in your mailbox. That notification contains only your mailbox address. Our server then sends a silent push to your devices, and your phone checks Gmail for new bank alerts by itself. Our server never contacts Gmail.

Yahoo has no such notifications, so our server is not involved at all: your phone checks your Yahoo mailbox for new alerts when you open Ledga, and from time to time in the background.

Google user data

Ledga requests read-only access to Gmail (the gmail.readonly permission) for one purpose: finding and reading transaction alert emails from supported banks so the app can show your transactions. This access is used only on your device.

• Ledga only searches for emails from supported bank and payment receipt sender addresses.
• Gmail data is never transferred to our servers or to any third party.
• Gmail data is never used for advertising, and never used to train AI or machine-learning models.
• No person at Ledga can read your emails.

Ledga's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Ledga's access at any time by disconnecting the mailbox in the app, or from your Google Account permissions.

Microsoft user data

If you connect an Outlook.com, Hotmail or Live mailbox, Ledga asks Microsoft for permission to read your mail (the Mail.Read permission) and to keep that access while you stay connected. It uses this access the same way as Gmail: only on your device, only to find and read emails from supported bank and payment receipt addresses.

• Outlook data is never transferred to our servers or to any third party.
• Outlook data is never used for advertising, and never used to train AI or machine-learning models.
• No person at Ledga can read your emails.

You can remove Ledga's access at any time by disconnecting the mailbox in the app, or from your Microsoft account's app permissions.

Yahoo and AOL user data

If you connect a Yahoo or AOL mailbox, Ledga asks Yahoo for read-only access to your mail. Your phone connects directly to Yahoo's mail servers (over IMAP) to find and read emails from supported bank and payment receipt addresses. Our servers are never part of this.

• Ledga never changes, sends or deletes email in your mailbox, and doesn't mark emails as read.
• Yahoo and AOL mail data is never transferred to our servers or to any third party, and never sold.
• It is used only to show you your own transactions in the app: never for advertising, profiling or tracking, and never to train AI or machine-learning models.
• No person at Ledga can read your emails.

You can remove Ledga's access at any time by disconnecting the mailbox in the app, or from your Yahoo account security settings. Changing your Yahoo password also removes it.

Service providers

We use a small number of providers to run the service:

• Supabase: account sign-in and our database
• Railway: hosting for our server
• Google Firebase Cloud Messaging and Apple Push Notification service: delivering silent pushes to your devices
• Google Cloud Pub/Sub: telling our server when your Gmail mailbox changes
• Resend: sending your sign-up verification email

These providers process data only to provide their service to us. Some of them store data outside Nigeria. We do not sell or share your personal data with anyone else.

Your rights

Under the Nigeria Data Protection Act 2023 and similar laws, you can ask to see, correct or delete the personal data we hold about you, or object to how we use it. You can delete your account yourself at any time (here's how). For any other request, email support@ledga.app and we'll reply within 30 days.

Security

Data is sent over encrypted connections (HTTPS). Passwords and verification codes are stored only as hashes. Mailbox sign-in tokens and your Ledga session are kept in your phone's secure storage. No system is perfectly secure, but keeping your financial data off our servers means there is very little for anyone to take.

Children

Ledga is not intended for anyone under 18.

Changes

If we change this policy, we'll update the date at the top and, for significant changes, tell you in the app.

Contact

Questions about privacy: support@ledga.app