PocketLedger Privacy Policy

This covers the PocketLedger Android app, published by Kelbilos (“I”, “me”).

What you put into the app stays on your phone. I don't run a server for it, there's no account, and I can't see your records — not because I promise not to look, but because there is no mechanism by which I could.

Three things are worth actually reading: what happens when you send a reminder or export a PDF (section 3), the ads (section 4), and the Premium subscription (section 5).

Your customers' names and phone numbers, the credit and payments you log against them, and the balances that result are stored in a database on your device and only there. In version 1 there is no cloud sync, no online backup, and no account to sign in to. None of it is transmitted to me or to any server I control.

The flip side is that keeping it safe is your job, not mine. If you uninstall the app, reset your phone, or lose it, that data goes with it, and I can't recover it for you — I never had a copy. If any of it matters, back up your device.

One caveat worth knowing: if you've switched on a device-level backup yourself, such as Android Auto Backup or your manufacturer's own service, that backup may include the app's data. It's then covered by whoever provides that service, not by this policy.

To delete everything, clear the app's storage in Android settings or uninstall the app. You don't need to ask me.

A few features deliberately move information out of the app, and all of them only ever happen because you tapped something.

When you send a payment reminder, the app opens WhatsApp or your SMS app with the customer's number and the message already filled in. Nothing is sent until you send it. Once you do, that message — the name, the amount, the number — is in the hands of WhatsApp or your mobile network, and what happens to it there is governed by their terms, not mine. If you would rather not put a customer's balance through WhatsApp, use SMS, or don't use the reminder at all.

When you export a customer's statement as a PDF, the file is created on your device. Where it goes next is entirely your choice — saved to the phone, sent to the customer, shared to whatever app you pick. Once it leaves, it is out of the app's control and mine.

Exporting the book works the same way. The app writes a file to your device, and everything after that is yours to do: keep it, move it to another phone, send it wherever you like. There is no upload step, and the file does not go anywhere on its own. Importing reads such a file back in, and stays available whether or not you have a subscription — a file you exported is yours, and locking you out of it would be indefensible.

The free version of the app shows ads supplied by Google AdMob. Premium subscribers don't see them, and for them this section doesn't apply. To serve and measure those ads, AdMob collects information from your device:

• your advertising ID (the Android Advertising ID), used to make ads more relevant and to stop the same one repeating endlessly;
• your approximate location, worked out from things like your IP address, so the ads are at least in the right country. The app never asks for precise GPS location;
• ordinary delivery data — device type, Android version, whether an ad was shown and whether you tapped it.

Google collects that, not me. What reaches me is a count: impressions and revenue, aggregated, with no way back to any individual. Their side of it is described in Google Privacy & Terms and the AdMob documentation.

You can reset or delete your advertising ID, and turn off personalised ads entirely, under Settings → Privacy → Ads on your phone. Where the law requires it, the app asks your permission before showing personalised ads, and you can change that answer later in the app.

The app is free for up to 10 customers and 3 payment reminders a month, with ads. Premium is a monthly subscription that lifts both limits, removes the ads and adds export. Google Play Billing handles the payment and the recurring charge from end to end. Your card number and billing address go straight to Google — I never see them, never receive them, and have nowhere to store them even if I wanted to.

The subscription is managed in your Google Play account, which is also where you cancel it. Cancelling is between you and Google; it doesn't involve me and I can't do it on your behalf.

What comes back to me is the minimum needed to unlock what you paid for and to keep the books: a token confirming the subscription is genuine and active, plus anonymised sales and payout figures in the Play Console. Google's handling of your payment details is covered by the Google Privacy Policy.

There is no analytics in this app. No crash reporting, no usage tracking, nothing of mine phoning home. I don't sell personal data and I don't share your records with anyone, which is an easy commitment to keep when I have no way to reach them.

The app also doesn't read your phone's contacts. The numbers it knows are the ones you typed into it.

This is a tool for adults running a business. It isn't aimed at children under 13, and I don't knowingly collect anything from them.

One thing worth saying plainly, because the app is about other people's debts: the customers you record here haven't agreed to this policy — you're the one holding their information. Wherever you are, that carries obligations of its own, and they're yours rather than mine.

For what's in the app, you already have every right you could ask me for: it's on your phone, so you can read it, change it and delete it whenever you like, without my involvement.

For what Google collects, the route is your Google Account settings and Google's own privacy controls, since they hold that data and I don't. Access, correction and erasure all run through there.

Exactly which rights you hold depends on where you are — the LGPD in Brazil, the DPDP Act in India, the PDP Law in Indonesia, Ley 1581 in Colombia, the GDPR in the EU/EEA and UK. The mechanism is the same in each case. If something is genuinely mine to answer rather than Google's, email me and I'll get back to you.

If a future version changes how any of this works — optional cloud sync, say — this page gets updated and the date at the top changes before that version ships, not after.

Privacy questions about PocketLedger go to isaloeo1@gmail.com. It reaches me directly.