Privacy Policy
Ledgr is a bookkeeping and tax app for people and small businesses in South Africa. This policy says what we hold, why, who else sees it, and how to get it back or get rid of it. It is written to be read, not to be survived.
What we collect
Because you tell us. Your name and email address, the name of your business, your tax profile (whether you are an individual or a company, your tax year, whether you are registered for VAT), and — if you use payroll — the details of the people you pay.
Because you record it. Your income, expenses, invoices, clients, and the photographs of receipts, statements and documents you upload. This is the substance of the app: your books.
Because the app runs. Sign-in tokens, the device token needed to send you a notification, and ordinary technical logs.
We do not collect your location, your contacts, your photo library, or anything for advertising. We do not sell your information to anybody, ever, and there is no advertising in Ledgr.
Why we hold it
To keep your books, work out your tax under South Africa law, produce the returns and statements you ask for, and take payment for the subscription. That is the whole list.
Who else sees it
We use a small number of processors, and only these:
- OpenAI — when you photograph a receipt or upload a statement and ask us to read it. The image or document is sent to OpenAI to be read and the text comes back. It is processed on servers in the United States, it is not used to train anybody's model, and we send only the document you asked us to read — never your books, your returns, or your contact details.
- Paystack and PayFast — to take subscription payments. They receive what a payment needs; we never see or store your card number.
- Google Firebase — for phone sign-in codes and push notifications.
- Our own mail server — we send our own email rather than handing your address to a third-party sender.
Nobody else. We do not share your books with any revenue authority: Ledgr prepares your returns for you to file. It does not submit anything on your behalf, and it has no connection to SARS's systems.
How long we keep it
Tax records must be kept for five years after the relevant return, so that is how long your books are held. When you delete your account we remove your personal details immediately and keep only what the law requires us to, for as long as it requires us to.
Deleting your account
You can delete your account from More → Security → Delete my account inside the app, or by emailing support@ledgr.mobi from your registered address. Deletion removes your profile, your books, your uploaded documents and your notification tokens. We will confirm when it is done.
Full details are on our account deletion page.
Your rights
Under the Protection of Personal Information Act 4 of 2013 (POPIA) you may ask what we hold about you, ask us to correct it, ask for a copy, or object to how we use it. Write to support@ledgr.mobi and we will answer. If we do not answer you properly you may complain to the Information Regulator (South Africa) (inforeg@justice.gov.za).
Children
Ledgr is for adults managing money and tax. It is not intended for children and we do not knowingly collect their information.
Security
Your data is held on servers we control, reached only over encrypted connections. Passwords are stored hashed and never in readable form. Access is limited to the people who need it to run the service.
Changes
If we change this policy we will publish the new version here with a new date, and keep the old wording on record so you can always see what applied when you signed up.
Contact
support@ledgr.mobi