Privacy Policy
Last updated October 13, 2026
Zeroed Ledger is a household budgeting app at zeroedledger.com (“Zeroed Ledger”, “we”, “us”). This policy explains what we collect, why, where it is stored, and what you can do about it. The short version: your budget is yours. We never ask for bank logins, we don't sell or share your data, you can export all of it at any time, and deleting your account removes it.
What we collect
Account. Your email address (used to sign you in with a magic link) and the first name you choose to display to people you share a budget with.
Budget data you enter. Budgets and their members, groups and lines, planned amounts, transactions (date, item or merchant, amount, memo, which account paid, who it was for), accounts and their balances, recurring templates, goals, and balance history. We don't connect to your bank, so nothing arrives unless you type it or import it.
Technical data. When you sign in we record a one-way hash of your email and IP address for up to an hour, only to limit repeated sign-in attempts. Our hosting provider keeps standard request logs (IP address, browser, pages requested) for a short period for security and debugging. We do not run advertising or behavioral analytics.
Cookies and local storage. We use strictly necessary cookies: your sign-in session, which budget you last opened, your theme choice, and whether you dismissed a one-time prompt. Your phone's browser may also store a copy of the app shell so it opens offline, and a haptics preference. There are no third-party or tracking cookies.
How we use it
To run the app: show your budget to you and the people you've invited, post recurring transactions on their schedule, send the emails you ask for (sign-in links, invitations, and notices such as a shared budget being deleted), and keep the service secure. We don't use your data to build profiles, train models, or market to you.
Who can see your data
People you invite. Everyone who is a member of a budget can see everything in that budget. Owners can add and remove members. If you leave or are removed, you lose access to that budget; what you entered stays with it.
Service providers. We rely on a small number of providers who process data on our behalf and under contract: Supabase (database and authentication, hosted in the United States), Vercel (application hosting), and Resend (transactional email). If we add paid plans, Stripe will process payments; card numbers go to Stripe and never touch our servers.
No one else. We don't sell, rent, or share your data with advertisers or data brokers. We would disclose data only if legally required, and we would tell you if the law allowed it.
Where it lives and how it's protected
Data is stored in the United States. Connections are encrypted in transit (HTTPS, HSTS) and data is encrypted at rest by our database provider. Access is enforced row by row: the database itself refuses to return a budget to anyone who isn't a member. Sign-in is by emailed link, so there is no password to leak. Sign-in attempts are rate-limited.
Your choices
Export. Settings → Your data lets you download everything in a budget as JSON, and transactions as CSV, whenever you like.
Delete. Settings → Delete account removes you from every budget. Budgets where you are the only member are deleted with everything in them; shared budgets stay with the other members. There is a seven-day grace period during which signing in again cancels the deletion. After that, the data is gone from our live database; it may persist in encrypted backups for up to 30 days before those roll off.
Correct. Everything you entered can be edited in the app. Your email address can be changed by contacting us.
Email. We only send emails that the service needs (sign-in links, invitations, account notices). There is no newsletter.
Retention
We keep your data for as long as you have an account. Sign-in attempt hashes expire within an hour. Hosting request logs are retained by our providers for a limited period. Backups roll off within 30 days.
Children
Zeroed Ledger is for adults managing a household. We don't knowingly collect data from anyone under 13, and if we learn we have, we'll delete it.
Changes
If we change this policy in a way that matters, we'll update the date above and, for significant changes, tell you by email or a notice in the app before they take effect.
Contact
Questions, requests, or concerns: login@zeroedledger.com.