Effective date: October 13, 2026
MonthLedger respects your privacy. This policy explains how the app handles data.
1. Data We Handle
MonthLedger does not require registration or sign-in. The developer does not receive, store, sell, or use your name, contact information, location, usage activity, transactions, account balances, tags, notes, or other ledger content for advertising, analytics, or cross-app tracking.
If you enable online exchange-rate updates, the third-party rate service may process necessary network information, such as your IP address, request time, and base-currency code, to provide rates, prevent abuse, and secure the service. This information may be linked to a device or network identity, but it is not used for advertising or cross-app tracking. See Section 3 for details.
2. Data Storage and Backups
Your ledger is stored locally on your device. The main app shares only the data needed for widgets and quick entry with MonthLedger’s own widget extension through an Apple App Group container. This sharing occurs only between MonthLedger and its widget on your device. The developer cannot access this local data.
Deleting MonthLedger also deletes the app data managed locally by iOS. CSV exports and full JSON backups are created at your request, and you choose where they are saved and how they are shared. If you enable daily iCloud backups, the app saves full JSON snapshots to the iCloud Drive folder you select, and Apple synchronizes those files using your iCloud account. You can turn automatic backup off at any time. Turning off automatic backups does not itself delete existing exported files. The app keeps 7 days of app-generated backups by default; you can customize the retention period or confirm deletion of a selected backup. Retention cleanup runs after a new backup syncs successfully and keeps at least the latest valid snapshot. Files with custom names are not automatically removed. Files in iCloud Drive remain subject to your iCloud settings and file management. iOS controls background backup scheduling; missed backups are attempted when you next open the app. This is file backup, not live ledger synchronization. Restoring a file replaces the local ledger after saving a local recovery point. The developer cannot access or control exported or iCloud backup files.
Statement import and reconciliation read only the files you select. PDF text extraction, image recognition, matching, and optional Apple on-device model processing happen on your device, with no cloud-model fallback or transmission of statement content to the developer. Unconfirmed drafts are stored separately on the device and excluded from ledger exports and backups. Confirmed entries retain compact source references for duplicate detection; original documents and recognition text are not attached to each exported transaction. You can clear an unconfirmed draft from its review page.
After you confirm an import or reconciliation, the app keeps a limited, private on-device history of recognition corrections and confirmed transaction mappings to improve later suggestions. It may include shortened statement text and the original and corrected fields. This history is separate from the ledger, excluded from CSV, JSON, widget data and iCloud backups, and is not sent to the developer or a cloud model. Suggestions never submit transactions for you.
3. Exchange-Rate Service
After you enable multiple currencies, fiat reference rates refresh at most once every 24 hours. For enabled cryptocurrencies, prices refresh when you open or return to the app if more than 5 minutes have elapsed. You can also refresh manually. Fiat requests send a base-currency code over HTTPS to the keyless public ExchangeRate-API Open Access service. If it fails or omits a quote, the app tries Currency API daily data via jsDelivr and Cloudflare. Failed automatic attempts wait at least 5 minutes before retrying; failure alerts appear at most once in 24 hours, including after an app restart. The service returns daily reference rates, which MonthLedger uses only for ledger estimates. They are not bank, transaction, trade-execution, clearing, or settlement rates. Source: Rates By Exchange Rate API.
Crypto prices come from the public Coinbase exchange-rates endpoint over HTTPS, requested with USD as the reference currency. Conversion to your chosen base currency happens on the device. If Coinbase fails or omits a quote, the app tries public Kraken USD market prices, with fiat conversion from the daily rate services. Coinbase receives no selected crypto list or holdings; Kraken receives the same fixed set of 16 supported USD pairs for every user, not your selected currencies or holdings. The app does not connect to wallets or exchanges for trading. Source: Coinbase Data API.
Requests do not include target-currency selections, transactions, balances, account names, tags, notes, contacts, device identifiers, or other ledger content. As with any internet request, the exchange-rate service and its network infrastructure providers may process necessary network information, such as your IP address, request time, and base-currency code, to deliver and secure the service and prevent abuse. Their own privacy policies govern that processing.
Backup sources: Currency API, Kraken public ticker API.
4. Permissions and Third-Party Services
MonthLedger does not include advertising SDKs, third-party analytics SDKs, social sign-in, or bank connections. It does not request access to your contacts, precise location, microphone, camera, or health data. Backup import and export use the system file picker. You choose the file or folder that the app can access; iCloud backups use your Apple account through iCloud Drive, without sending backup files to the developer.
5. Children’s Privacy
MonthLedger is not specifically designed for children. The developer cannot access ledger content stored locally on the device. If online exchange rates are enabled, the third-party rate service handles necessary network information as described in Section 3.
6. Changes to This Policy
If MonthLedger’s data-handling practices change, this policy will be updated with a new effective date and published on this page.
7. Contact
For privacy questions, email monthledger@orins.top.