Privacy Policy

Last updated: October 2026

The short version

Bank connections are read-only. Ledgewise never stores your bank credentials and never transmits money on your behalf. We do not sell your data. Ever.

What Ledgewise collects

Stored on our servers in your account. If you link a partner, they see only the debts you choose to share.

• Your email address and a hashed password
• Bank account details from Plaid: institution name, account type, balances and transactions (amount, date, merchant)
• Budget envelopes, debts, payoff plans and other data you enter
• Bank statement files you upload to import, and the transactions parsed from them (the files are deleted once the import is confirmed or discarded)
• Subscription status (from Stripe, Apple or Google; we never see card numbers)
• Server logs, including IP addresses, kept for security and troubleshooting
• A 90-day activity log of what connected apps (such as Muse) have read

Every request to our servers is scoped to your account.

What Ledgewise does not collect

• Your bank username or password — Plaid handles sign-in directly
• Card numbers — payments are handled by Stripe, Apple or Google
• Biometric data or precise location

Who we share data with

We do not sell your data or use it for advertising. We use these processors to run the service: Plaid (bank connections; Plaid’s privacy policy), Stripe, Apple and Google (payments and subscriptions), Adapty (store subscriptions), Anthropic (AI parsing of statements you upload, only for that request), and Google Cloud and Supabase (hosting and database).

Bank connections

You sign in to your bank through Plaid. Ledgewise receives a Plaid access token, stored encrypted, that allows read-only access to your account data. We use it only to sync transactions and balances. We do not initiate any payment or transfer.

Muse and other connected apps

If you connect Ledgewise to Muse or another MCP client, it receives OAuth tokens limited to the permissions you approve. Access is read-only. You can disconnect a connected app any time from Settings → Connected Apps.

Your controls

• Remove a bank account: Accounts → Remove. The Plaid connection is removed once the last account at that bank is removed.
• Disconnect Muse or another app: Settings → Connected Apps → Disconnect.
• Delete your account: Settings → Delete account (confirm with your password). We delete your data right away and disconnect your bank connections. You can also email founder@tenderlab.studio from your account email, and we delete within 30 days.

Data retention

Your data is kept while your account is open. After deletion, copies can remain in encrypted backups for about 7 days until they are rotated out. Payment records held by Stripe, Apple, Google and Adapty follow their own rules, and records we must keep by law may be kept longer.

Children

Ledgewise is intended for adults (18+). We do not knowingly collect data from anyone under 18.

Changes to this policy

If we make material changes, we will update the date above. The full Ledgewise policy is at ledgewise.app/privacy; this page is a summary.

Contact

Questions? Use the contact form on our website, or reach the studio at tenderlab.studio.