Privacy Policy
Effective date: July 12, 2026
This is the short version: your inventory data belongs to you. We don’t sell it, we don’t share it with advertisers, and we don’t use it to train AI models. The longer version is below.
1. Who we are
LivingLedger is a household inventory app, independently operated and based in Tennessee, United States. You can reach us anytime at support@livingledger.net.
2. What we collect
When you create an account with an email address and password, we collect that email address and password (stored as a secure hash, never in plain text).
If you use Sign in with Apple (on iOS or the web), we receive your email address from Apple — or Apple’s private relay address if you choose to hide your email — and, on your first sign-in only, the name you choose to share. No password is created or stored for that sign-in method.
When you use the app, we store the inventory data you create — item names, descriptions, locations, categories, and any photos you attach. We also store basic technical information like the time you last signed in.
3. What we don’t collect
We don’t track you across other websites. We don’t run third-party advertising trackers. We don’t sell, rent, or share your personal data with marketers.
4. How we use your data
We use the data you give us to run the app — to show you your inventory, let you search it, sync it across your devices, and process your subscription if you upgrade. That’s it.
We may use aggregated, anonymized usage information (for example, how many AI scans were performed across all users in a given month) to understand how the product is used and to improve it. This information cannot be used to identify you.
We do not actively monitor inventory contents. We may access account data when reasonably necessary to investigate suspected Terms violations, abuse, fraud, security threats, support requests, or legal obligations — see the Terms of Service for the full enforcement-access clause. We do not use data accessed this way for advertising, marketing, or AI model training.
5. Where your data lives
Your account, inventory, and uploaded photos are stored using Firebase (a Google service) — specifically Firebase Authentication, Cloud Firestore, and Cloud Storage. Firebase is a widely-used platform that provides encryption in transit and at rest. You can read Google’s privacy practices at policies.google.com/privacy.
6. AI scanning
When you use the AI scanner, the photo you take is sent to Google Gemini for processing. LivingLedger does not store AI scan photos in its database or in Cloud Storage. The image is held only for the duration of the scan request and then discarded. Google’s handling of images submitted to Gemini is governed by its terms for the Gemini API — see ai.google.dev/gemini-api/terms.
The text Gemini returns describing the items it identified, such as proposed names, brands, and categories, is shown to you so you can review and edit it. Only the item details you choose to save are written to your inventory.
Anonymous diagnostic data, such as whether a scan succeeded or failed, may be retained briefly in standard system logs to help us monitor service health.
If you choose to attach a photo to a saved inventory item, that photo is stored with your account so you can view it later. These saved item photos are separate from AI scan photos.
7. Subprocessors and error monitoring
We use Sentry to monitor errors and diagnose problems in the app. Sentry receives technical information such as browser details and error stack traces, and may receive interaction data when something goes wrong. We have configured Sentry to avoid capturing the contents of your inventory in session recordings. You can read Sentry’s privacy practices at sentry.io/privacy.
We use Google Analytics 4 to understand how visitors discover and use this marketing website at livingledger.net. Google Analytics sets first-party cookies (such as _ga and _ga_*) and collects pseudonymous information including pages viewed, approximate location derived from your IP address, browser and device type, and the referrer that brought you to the site. We use this only to understand site usage and improve the marketing pages. We do not use it to identify you personally, we do not sell it, and we do not share it for advertising. You can read Google’s privacy practices at policies.google.com/privacy.
Analytics in the LivingLedger app. Within the app (inventory.livingledger.net, web browsers only — not the iOS app), we use Google Firebase Analytics (Google Analytics 4) to understand how people use the product so we can improve it. It collects pseudonymous usage events — for example which key actions you take (creating an account, starting or completing an AI scan, saving an item), the platform you’re on, your sign-in state (signed out / unverified / verified), and, if you arrived from one of our links, the campaign parameters in that link (utm_source, utm_medium, utm_campaign, utm_content) and the referring page. It also collects the standard pseudonymous data Google Analytics gathers (browser/device type, approximate location from IP address). It does not collect your inventory contents, photos, name, or email, and we do not use it to identify you, sell your data, or share it for advertising.
8. Payments
If you upgrade to a paid plan on the web, payment is processed by Stripe, Inc. We never see or store your full payment card details. Stripe handles billing, renewals, and refunds.
iOS subscription payments are processed by Apple through In-App Purchase; Apple handles billing and your payment information, and we receive only a purchase receipt to confirm your subscription. We use RevenueCat to manage and verify subscription status on iOS; RevenueCat receives your purchase and subscription-entitlement information (associated with an app-generated identifier), but not your payment card details. See apple.com/legal/privacy and revenuecat.com/privacy.
9. Your choices
You can update your account information from within the app at any time. You can delete your account and associated data yourself from the Account page in the app. You may also email support@livingledger.net if you need help.
To request a full export of your data, email support@livingledger.net. Self-serve export is on the roadmap.
Depending on where you live, you may have additional rights under laws like the GDPR or CCPA — including the right to request a copy of the personal data we hold about you, or to ask us to correct or delete it. Email us and we’ll honor those requests.
10. Children
LivingLedger isn’t designed for children under 13, and we don’t knowingly collect personal information from them. If you believe a child has signed up, please contact us and we’ll remove the account.
11. Security
We use Firebase’s built-in security features, including encryption in transit and at rest. LivingLedger uses Firebase App Check to help protect the app from abuse and unauthorized requests. No system is perfectly secure, but we work to protect your data and we’ll notify you if we ever become aware of a breach affecting your account.
12. Changes to this policy
If we make material changes to this policy, we’ll update the effective date above and notify you. Continuing to use LivingLedger after a change means you accept the updated policy.
13. Contact
Questions, concerns, or requests about your data? Email us — we read every message.
Contact: support@livingledger.net