Fira Ledger Privacy Policy
Fira Ledger is a personal bookkeeping app. This policy explains how the current version handles your data and device permissions.
Your bookkeeping data
- Transactions, accounts, budgets, debts, categories, tags, wishes, and attachments that you enter are stored on your device by default.
- When you are signed in to iCloud, your bookkeeping data can sync to your own private iCloud database so it stays consistent across your devices. The developer does not automatically read or upload this ledger data to its servers. Content that you choose to send as feedback is handled as described under Voluntary feedback below.
- You can save a full card number for a credit card or bank account. It is stored only in your iCloud Keychain and end-to-end encrypted across trusted devices signed in to the same Apple Account. It is not written to a ledger, shared with ledger participants, or included in ledger backups. The app temporarily uses only the last four digits on-device when matching an account in a screenshot.
- You can export records, create backups, or restore backups in the app. These actions are initiated by you.
Device permissions
- Camera: used only when you take a photo for a transaction attachment.
- Photo picker: used only when you choose an existing image as a transaction attachment.
- Notifications: used only when you enable repayment, due-date, or recurring-entry reminders.
- Face ID, Touch ID, or device passcode: used by default to verify the device owner before revealing or copying a full card number. You can turn this verification off in the app's Privacy Settings.
- You can manage camera, photo, notification, and biometric permissions at any time in system settings.
Third-party services and advertising
The current version does not use third-party analytics or tracking services, and it does not sell or share your bookkeeping data with others. If a future version introduces advertising or other third-party services, we will update this policy before release and disclose the relevant data practices in the App Store privacy label.
Contact
For questions about this policy or data handling, contact:
support@maydaychen.topChanges to this policy
This policy was updated and became effective on October 20, 2026. If our data practices materially change, we will update this page before releasing the new version.
Voluntary feedback
Only when you send Contact Us feedback are your title, message, selected images and app/iOS version sent over HTTPS to feedback.maydaychen.top to handle your questions and suggestions. The feedback service stores submitted content and attachments. It does not automatically read or upload the bookkeeping database or read your full photo library.
Up to three selected images are resized, orientation-corrected and converted to JPEG with original location metadata removed. The visible image content and your message are not automatically de-identified. Do not include passwords, full identity documents, ledger records or sensitive health information.
A feedback identifier is generated per submission for receipts and retry deduplication; it is not a persistent user or device identifier. The IP address involved in a feedback request is used for service security and request limits, not advertising or cross-app tracking. If the developer enables feedback notifications, the title and a message excerpt are sent through the configured notification service to the developer's device solely to handle feedback.
To ask about or request deletion of feedback, contact support@maydaychen.top with the app name, feedback title and approximate submission time. Your business records remain under your control in the app and your own iCloud space.