Privacy, in plain language.
Last updated: October 20, 2026 · Pre-release information
Your ledger stays local
LedgerLatch is an iPhone ledger designed without an app server account, advertising or tracking. Ledger records, attached photos and audio are stored encrypted on your device.
Encryption and unlocking
The app uses CryptoKit, Argon2id and SQLCipher in its local encryption implementation. Choose a strong password of at least eight characters. Face ID is an optional convenience. No encryption system can guarantee protection against every threat; device security and backup handling still matter.
Photos, audio and recognition
Photos and audio you attach become part of your local ledger. OCR runs locally and creates a draft for your review. Optional Apple speech recognition uses on-device recognition where available. Unsupported languages do not silently switch to cloud recognition.
Backups and exports
Encrypted backups are optional. You choose where to keep them. PDF exports leave the app as ordinary, unencrypted files; anyone with access to an exported file may be able to read it. Storage and sharing services you select have their own privacy practices. Deleting records inside LedgerLatch does not delete or revoke PDFs, shared files or backup copies already saved outside the app. Manage those copies separately at their destinations.
Purchases through Apple
Pro purchases use Apple StoreKit. Apple processes App Store purchases and related account, payment and transaction information under its own terms and privacy policy. The app uses purchase status to make Pro features available. Local ledger storage does not mean that Apple processes no purchase-related data.
Password attempts and optional automatic erasure
Incorrect password attempts are subject to a cooldown. Automatic erasure is optional and off by default. It takes effect only if you actively enable it, according to the warnings and conditions shown in the app. Read those prompts carefully before enabling it. Erasure inside the app does not revoke exported or externally saved copies.
This website
The product website is hosted using ChatGPT Sites. This site does not include an app account, mailing-list form or advertising analytics. Hosting providers may process technical request information needed to deliver the site; this website is separate from the app’s local ledger storage.
Privacy questions
For privacy questions, email wangnull@outlook.com. If you contact us, your email address and the information you choose to send will be used to respond to your request. Please avoid including passwords, full ledger backups or sensitive receipts.
Pre-release notice
LedgerLatch is not yet publicly released. This page describes the current product design and will be updated if data handling changes before launch.