HomeLedger Privacy Policy
Publisher: Codegully
Effective date: 3 October 2026
Your personal ledger
The free version stores personal entries, accounts, categories, budgets, schedules, settings and receipt images in the app’s private storage on your phone. You can use it without a Google account. Android’s device backup may also retain app data if you enable that device feature. HomeLedger does not read your bank accounts, SMS, contacts or email messages.
Google sign-in and household sharing
When you connect Google, Firebase Authentication processes your Google account identifier, name, email and profile photo. We save your profile and household membership in Google Firebase. Records marked shared, including financial amounts, dates, notes, payer and split details, are stored in Firestore and available to current household members according to their roles. Receipt image files stay local unless included in your private Drive backup. Invite recipients’ email addresses are stored to restrict invitation redemption. Invites expire after seven days or when revoked or redeemed. Leaving, removal and household deletion end future access. A frozen copy of previous shared entries, household names and payer/split names is kept in each departing member’s private archive and on their phone. Deleting a household removes all active members and invitations; it preserves each member’s past financial history. Only the archive’s account can read its cloud copy. These copies remain until the account or local records are deleted, and can be included in private backups and exports.
Private Google Drive backups
If you enable Drive backup, HomeLedger requests access only to its private appData folder. The backup includes your local ledger and attached receipts. It does not grant access to your other Drive files. Automatic backup uses Android background scheduling and an internet connection; delivery depends on device restrictions. You can turn it off, restore the latest backup, and delete HomeLedger backups. Backups stay in your Drive until you delete them or remove the app’s hidden data in Google Drive settings. A copy you export or share is controlled by you and its recipient.
Pro subscriptions and complimentary codes
Google Play processes payments. We do not receive your card details. Our server verifies purchase tokens and stores entitlement status, expiry and account linkage to prevent duplicate claims and manage renewals, cancellations and refunds. Complimentary codes are stored as hashes and can be claimed once. A lifetime complimentary entitlement is linked to the Google account that redeems it, without recurring charges.
One-month welcome trial
Eligible new HomeLedger users signing in with Google receive one calendar month of Pro without payment details or an automatic charge. The server records trial start and end dates. A hash of the Google account identifier, with trial dates but no email, name or financial entries, is retained after account deletion to prevent repeated trial claims. Reinstalling or recreating an account does not reset this trial.
Permissions and service providers
Camera and image access are used only when you attach a receipt or scan an invitation. Notification permission is used for reminders. Precise alarm access is optional for timed reminders. Google Firebase, Google Drive and Google Play process data under their own terms and security practices; processing may take place outside your country. Firebase services process authentication identifiers, IP addresses, installation identifiers and technical request information for functionality, security and account management. Operational server logs may contain technical error and security information.
QR scanner diagnostics
The invitation scanner uses Google's ML Kit barcode SDK. Camera images are processed on the device. The SDK sends technical information to Google, such as device model and operating system, app version, per-installation identifiers, scanning feature events, configuration, performance measurements and error codes, for diagnostics and SDK usage analytics. These diagnostics are separate from your financial entries and receipt images. HomeLedger includes no advertising, advertising identifiers or sale of your data. We do not include Google Analytics or use your financial records for advertising.
Retention and deletion
Personal records remain on the device until you delete them or remove the app. You can export your records or use Settings → Your data → Reset your ledger to erase this phone’s entries, accounts, budgets, schedules, archived household history and receipts while keeping your cloud account and Pro entitlement. Reset signs you out and can optionally erase HomeLedger Drive backups. Shared records belonging to other household members remain. Currency selection changes how the same numeric amounts are displayed and does not erase or convert your records. You can request deletion of your connected cloud account in Settings → About & support → Delete account, or through the public account deletion page. Deletion removes the Firebase profile, memberships and Pro entitlement. Shared entries in homes you do not own are anonymised to preserve other members’ financial history. The live household owned by a deleted account, including its shared records and invites, is deleted; other members lose active access. The deleted account’s own cloud archives are removed. Its identity in other members’ frozen cloud history is anonymised. Copies already exported, backed up or held locally by other people cannot be recalled. Purchase reference records needed for entitlement reconciliation and fraud prevention are removed from our database; Google Play retains its own payment records. You can optionally delete Drive backups and local data. Deleting an account does not cancel a Google Play subscription; cancel separately in Google Play. Support deletion requests are normally completed within 30 days after identity verification. We may retain information when legally required, and will explain any exception.
Security and your choices
Access to shared financial records is limited by Firebase authentication and membership rules. Google services encrypt data in transit and at rest; exported files and device access remain your responsibility. Leave a household, revoke invites, disable backups, or revoke Google access at any time. We do not guarantee that a device or internet service can never fail. HomeLedger is intended for adults managing their own or their household’s money.
Contact and policy changes
Contact Codegully at monu.giri.work@gmail.com or WhatsApp +91 7669006847 for privacy, support or deletion requests. We will publish material changes with a new effective date. This policy describes HomeLedger’s intended production configuration; test releases may identify cloud features as beta.