Privacy Policy - ETLedger

This Privacy Policy explains what information ETLedger (the “App”, “we”, “us”) collects, why we collect it, how we use and protect it, and the choices and rights you have. It applies to the ETLedger Android application and its backend service.

By creating an account or using the App, you agree to the practices described here. If you do not agree, please do not use the App.

1. Who we are

ETLedger is a personal finance app that helps you record expenses and income, organise them into categories and wallets, set budgets, schedule recurring entries, and view reports. It is published by Web Nest Developer. You can reach us at webnest247@gmail.com (see Section 13).

The App stores your data in a secured cloud database so it stays in sync and is available when you sign in. We are the data controller for the information described in this policy.

2. Information we collect

We only collect what the App needs to work. This includes:

a. Account information

Email address and display name you provide at sign-up.
Password - stored only as a one-way cryptographic hash (Argon2). We never store your password in readable form and cannot recover it.
Authentication tokens used to keep you signed in.

b. Financial data you enter

Transactions: amount, type (expense / income / transfer), category and subcategory, wallet, date, note, merchant/payee, payment method, tags and description.
Wallets/accounts you create: name, type, opening balance and running balance.
Budgets and recurring rules you configure.

All financial data is entered by you. The App does not connect to your bank, does not read your SMS or messages, and cannot move, hold or access real money.

c. AI feature input (while AI mode is on)

The short note/description you write, plus the names of your categories, which are sent to a third-party AI provider to suggest a category, subcategory, tags and a description. See Section 3.

d. Device & technical information

App version and device/OS type.
Server logs such as IP address, request time and error diagnostics, kept for security and reliability.

What we do NOT collect: we do not read your SMS or messages, and we do not access your contacts, photos, precise location, call logs, or any personal files on your device.

3. AI features & automated processing

The App offers an “AI mode” that can suggest a category, subcategory, tags, a note and a short description from a few words you type, and can help fill a recurring-rule form from a plain-English description. It is on by default for new accounts, and you can switch it off at any time in Settings - once off, nothing is ever sent to an AI provider.

When - and only when - AI mode is on and you actively trigger a suggestion, the App sends the following to a third-party AI provider (currently Google Gemini, and optionally OpenAI):

the note or description you wrote,
the transaction type and amount, and the merchant if you entered one,
the names of your categories/subcategories (so the AI can pick a valid one).

We do not send your email, password, full transaction history, wallet balances or account numbers to the AI provider. If AI mode is off, no data is ever sent to any AI provider. AI suggestions are best-effort and may be inaccurate - you can always change them before saving.

These providers process the request under their own terms and privacy policies. See Google Gemini API terms and OpenAI’s privacy policy.

4. Device permissions we request

Permission	Why we request it	Required?
`INTERNET` / network access	Sync your account and data with our secure backend.	Yes - the App cannot function without it.

The App does not request SMS, contacts, location, camera, microphone, storage or any other sensitive permission.

5. How we use your information

To create and secure your account and keep you signed in.
To store, sync and display your transactions, wallets, budgets, recurring rules and reports.
With AI mode on, to suggest categories and notes - only when you trigger a suggestion.
To operate, secure, debug and improve the service, and to prevent fraud and abuse.
To comply with legal obligations.

We do not sell your personal data. We do not use your financial data for advertising or profiling.

We share data only with service providers that help us run the App, and only as needed:

Cloud hosting & database - our backend and database run on managed cloud infrastructure (e.g., Render and a managed MongoDB database) that stores your account and financial data on our behalf.
AI providers - Google Gemini and/or OpenAI, only for the limited AI input described in Section 3, and only when AI mode is on.
Legal & safety - if required by law, or to protect the rights, safety and security of our users and the service.

We do not share your data with advertisers or data brokers. If ownership of the App ever changes, we will require any successor to honour this policy or notify you of changes.

7. Storage, security & retention

Data is transmitted over encrypted HTTPS connections. Passwords are stored only as Argon2 hashes. Your session refresh token is kept in the device’s secure keystore.
We apply reasonable technical and organisational measures to protect your data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
We keep your data only for as long as your account is active. When you delete your account, all of your personal and financial data is permanently and irreversibly erased from our servers and database. We do not keep backups, copies, anonymised remnants or tombstone records of a deleted account.

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. The App gives you direct control:

Access & edit - view and edit your entries, wallets, budgets and profile in the App.
Export - request a copy of your data by contacting us at the address in Section 13.
Disable features - turn AI mode on or off at any time in Settings.
Delete - delete your account and data (Section 9).

To exercise any right, use the in-app controls or contact us at webnest247@gmail.com. We will respond within the timeframe required by applicable law.

9. How to delete your data

You can permanently delete your account and associated data from within the App: Settings → Delete account. This permanently and irreversibly deletes your account and every record tied to it - your profile, transactions, wallets, budgets, recurring rules and notifications are hard-deleted from our servers. Nothing is retained, and the action cannot be undone.

If you cannot access the App, email us at webnest247@gmail.com from your registered address and we will permanently delete your account and all associated data. For full detail, see our Account & Data Deletion policy. Uninstalling the App alone does not delete data already stored on our backend.

10. Children’s privacy

The App is intended for users aged 18 and older and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. International data transfers

Your data may be processed on servers located in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected consistent with this policy and applicable law.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Effective date” and, where appropriate, by an in-app notice. Your continued use of the App after an update means you accept the revised policy.

13. Contact us

Questions or requests about this policy or your data:

Email: webnest247@gmail.com
Published by: Web Nest Developer

Contents