Privacy policy

MyLedger is a free personal project run by Sifat Shishir in Bangladesh. For any question about your data, write to sifatshishir@gmail.com.

Each of your accounts has a spreadsheet for each year in a Google Drive folder you choose. MyLedger reads and writes those files for you, and only when you use the app.

It asks Google only for permission to use files it created or that you picked, so it cannot see anything else in your Drive.

• Your email address, your sign-in and the name you give.
• Your settings, such as currency, timezone and theme.
• The names, types and starting balances of your accounts, and your categories.
• Which Drive folder and spreadsheets belong to the app, and an encrypted key that lets it reach them.
• A note that a change clashed with your spreadsheet, without the change itself.
• A copy of a transaction you delete, kept for 30 days so you can bring it back, then removed.

Access rules in the database let only you read your own rows. The connection to the app is encrypted. No system is perfectly secure, but these are the protections in place.

MyLedger’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In practice: your spreadsheet data is used only to show your records back to you in the app. It is not sold, not used for advertising, not used to train AI models, and not read by a person unless you ask for help with a problem and agree to it, or the law requires it.

To keep the service working, the operator has an admin view showing each account’s email, name, when it was created and last signed in, how it signs in, whether Google Sheets is connected and syncing, and how many accounts and spreadsheets it has.

It never shows your transactions, amounts, descriptions, notes or anything inside your spreadsheets, and the operator has no other way into them.

Your light or dark choice, and changes that have not reached your spreadsheet yet, are kept in this browser until they are sent. Signing out does not erase unsent changes, so sign in again on the same browser to send them.

The demo runs on made-up data in the browser tab and sends nothing anywhere.

Vercel, which hosts MyLedger, counts page views and how fast pages load. It sets no cookies and never sees amounts, descriptions or notes.

You can turn this off: switch off “Share anonymous usage counts” on your Profile. The counting scripts are then not loaded for you, on any device you sign in on. The demo's Profile has the same switch, remembered on that device.

MyLedger only emails you to confirm your address or reset your password. There is no newsletter and no marketing.

• Supabase, for sign-in and the database described above.
• Google, for Google Sheets and Drive, and for signing in with Google if you choose it.
• Vercel, to host the app.

These services store data on their own servers, which may be outside your country. Each has its own privacy policy.

You can download your records at any time from More, Import and export, or open your spreadsheets directly in Google Drive.

In your Profile you can disconnect Google, which withdraws the app’s access to your files. The files stay in your Drive.

You can also delete your account there. That removes everything the database holds about you and your sign-in, for good, and withdraws the app’s Google access. Your spreadsheets stay in your Drive. Copies in the services’ own backups expire on their normal schedule.

MyLedger is not meant for children under 13, and they should not create an account.

If this policy changes, the date at the top changes with it, and a significant change will be announced in the app before it takes effect. Questions go to sifatshishir@gmail.com.