Smart Ledger
Privacy Policy
1. Data storage
Bills, budgets, categories, trips, and recurring bills are stored locally on the user’s device by default, and in the user’s own iCloud (CloudKit) only if the user enables sync. Smart Ledger does not require a developer account or separate registration.
2. iCloud sync
Only when the user enables iCloud sync or manually uploads a backup is a complete ledger backup stored in that user’s private CloudKit database. It is used to merge and restore data across the user’s own devices. The developer does not use this data for advertising, tracking, or profiling.
3. AI recognition, screenshots, and tracking
“AI Smart Recognition” is an optional feature for Pro members only. It is off by default and is turned on only after the user reads the in-app explanation and explicitly agrees. When it is off, entries and screenshots are recognized only by local rules on the device.
When it is on, Smart Ledger first tries on-device Apple Intelligence where available. If further help is needed, the entry text the user typed or spoke, or the text extracted on the device from a payment screenshot (never the screenshot image itself), together with locally detected hints such as candidate amounts, is sent to the developer’s server on Tencent CloudBase (mainland China) and processed by the third-party AI provider DeepSeek to recognize the amount, merchant, category, and time. DeepSeek processes this content under its own privacy policy.
Content sent for AI recognition, and the recognition result, are used only for that single recognition. They are not written to our database or our server logs. To avoid charging the same request twice, a result may be held in server memory for up to 30 seconds and is then discarded. To run quotas and prevent abuse, the server keeps only an anonymous random account identifier, anonymous usage counts and quota information, and technical records such as error codes, response times, and token counts (none of which contain entry text, amounts, merchants, or card numbers), plus the results of Apple App Attest device checks and App Store (StoreKit) purchase verification. This data is not used for advertising or tracking and is not sold.
Users can turn AI Smart Recognition off at any time in Settings. Smart Ledger contains no advertising SDK and performs no cross-app tracking.
4. Import and export
Users may export a complete JSON backup or CSV/TXT bill files and may choose a backup file to restore. The user controls where those files are stored and with whom they are shared through the system file picker and share sheet.
5. Deletion and opt-out
Users can delete individual bills in the App. Under “Me → iCloud Sync,” users can disable automatic sync and delete the cloud backup without deleting the local ledger. Removing the App handles local App data according to iOS system behavior.
6. Policy updates
If a future release changes how data is handled, this policy and the App Store privacy disclosure will be updated before that change is released.