Privacy Policy

Information you provide directly:

• Account details — name, email address, and password (or your Google account identity if you sign in with Google).
• Business profile — your shop name, contact details, and store configuration.
• Business data — customers, invoices, products, stock levels, expenses, assets, sellers, and bank accounts you enter into the app.

Information collected automatically:

• Device information — device type, operating system version, and unique device identifiers.
• Usage data — screens visited, features used, and crash reports, collected to improve app stability.
• Push notification token — used only to send you in-app alerts you have opted into.

We use the information we collect only for the following purposes:

• To provide the service — syncing your business data across devices, generating PDF invoices, and calculating reports.
• To authenticate you — verifying your identity when you sign in and enforcing your subscription or trial status.
• To improve the app — analysing anonymised crash reports and usage patterns to fix bugs and build better features.
• To communicate with you — sending transactional emails (e.g. email verification, password reset) and, if you opt in, push notifications about your shop activity.
• To process payments — verifying your subscription status through RevenueCat and the App Store / Google Play.

We do not use your data for advertising, profiling, or sell it to any third party for any commercial purpose.

Your data is stored in Google Firebase (Firestore and Firebase Storage), which uses industry-standard encryption in transit (TLS) and at rest (AES-256).

A copy of your data is also stored locally on your device using SQLite so the app works offline. This local copy is protected by your device's own security (PIN, biometric lock, or encryption).

ShopLedger also offers an optional in-app PIN and biometric lock so that even if someone picks up your unlocked phone, they cannot access your financial data without your PIN or fingerprint.

ShopLedger uses the following third-party services, each of which has its own privacy policy:

• Google Firebase — authentication, cloud database, file storage, and push notifications. Firebase Privacy Policy
• RevenueCat — subscription management and payment verification. RevenueCat Privacy Policy
• Google Sign-In — optional sign-in method. When used, Google shares your name and email address with us. Google Privacy Policy
• Google Play / Apple App Store — payment processing for subscriptions.

We do not integrate any advertising networks, social media trackers, or analytics platforms that track you across other apps or websites.

ShopLedger offers a 3-day free trial followed by a paid subscription. Your subscription is managed by the App Store (iOS) or Google Play (Android). We never see or store your credit card number or payment details.

We record, via RevenueCat, whether your subscription is currently active or expired. This record is tied to your email address, not just your device, which means:

• Your subscription works across multiple devices using the same account.
• Your 3-day free trial is also tracked per email address so each email address receives one trial.

To cancel your subscription, do so through your App Store or Google Play subscription settings. Cancellation stops future charges but does not entitle you to a refund for any current billing period.

You have the following rights regarding your personal data:

• Access — you can view all your data inside the app at any time.
• Correction — you can edit your name, email, and business profile from the Settings screen.
• Export — you can export your invoices as PDFs from within the app.
• Deletion — you can delete your account from Settings → Profile → Delete Account. This permanently and irreversibly deletes all your data from our servers within 30 days.
• Push notifications — you can disable push notifications at any time from your device's system settings or from the app's notification preferences.

To exercise any right not listed above, or if you are a resident of the European Economic Area (EEA) or the United Kingdom and wish to exercise your rights under GDPR, please contact us at the address in Section 10.

We keep your data for as long as your account is active. Specifically:

• Your business data (invoices, customers, stock, etc.) is retained for the lifetime of your account.
• When you delete your account, all associated business data is deleted from our servers within 30 days.
• Anonymised, aggregated crash and usage statistics may be retained indefinitely as they cannot be linked back to you.
• Your trial record (the date your free trial started) is retained even after account deletion to prevent abuse of the free trial system. It contains only your email address and a timestamp.

ShopLedger is designed for business use by adults. We do not knowingly collect personal information from anyone under the age of 13 (or the applicable age of digital consent in your jurisdiction).

If you believe a child has provided us with personal information without appropriate consent, please contact us immediately and we will delete that information promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via a push notification or an in-app message.

Continued use of ShopLedger after a policy update constitutes your acceptance of the revised policy. If you do not agree with any changes, you may delete your account at any time.