Privacy

In effect 6 August 2026

Your ledger — the days, the marks, the notes, the whole history — is stored on your phone and is never uploaded. There is no account to create, so there is nothing for us to hold under your name.

SelfLedger is made by Karatry LLC. This page describes what the app stores, the few things that leave the device, and what happens to them. It covers the iOS and Android apps.

What stays on your phone

Everything that constitutes the ledger. The traits, the seasons and weeks, every timestamped mark, every note you write in the evening review, your settings, and the sealed history. It lives in a database on the device and is included in your phone's own backup if you have one. We cannot read it, and we have no server that stores it.

What leaves the device, and only then

The optional AI features

If you use the weekly whisper, the trait introductions, or the questions and answers, the app sends a request through our own service to Anthropic's API, which writes the reply. That request carries the season and week number, the name of the current trait, the timestamps of that week's marks, and your recent weekly totals.

Your notes are not included unless you turn on “Share notes with the AI” in Settings. It is off until you switch it on, and you can switch it back off at any time.

Our service does not store the content of these requests. It keeps only counters — how many requests an installation has made this week or month — so the built-in limits can be enforced. Anthropic processes the request under their own terms and does not use it to train their models.

An installation identifier

Each install generates a random identifier. It accompanies AI requests so the limits can be counted and the purchase can be confirmed. It is not derived from your device, your phone number, your email, or any advertising ID, it is never joined to your name, and it is never used to track you across apps or websites. Deleting the app ends it; a reinstall creates a new one.

Your purchase

The purchase is made through the App Store or Google Play, who handle the payment. We never see your card, your billing address, or your store account. RevenueCat processes the receipt on our behalf so the app can confirm your purchase and restore it on a new phone; it receives the installation identifier and the store's receipt, nothing else.

Your own API key, if you use one

You may supply your own Anthropic key instead of using ours. It is stored in your device's keychain or keystore, not in the app's database. It is sent with your requests solely to reach Anthropic on your behalf. We do not store it, log it, or keep a copy.

Crash reports

If crash reporting is enabled in a build, a report may be sent when the app fails. Reports are scrubbed before they leave: request parameters are removed, console output is dropped, and no user identifier is attached. Your ledger is never part of a crash report.

What we never do

No advertising, and no advertising identifiers.
No analytics measuring how you use the app.
No selling or sharing of personal information, under any definition.
No tracking across other companies' apps or websites.
No profile of you, because we hold nothing to build one from.

Deleting your data

Delete the app and the ledger goes with it. There is no account to close and no request to file. The counters our service holds expire on their own and contain no content. If you would like the entitlement record removed as well, write to us and we will remove it — you will need to restore your purchase through the store afterwards.

Children

SelfLedger is not directed to children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes we will post the new version here with a new date. Material changes will also be noted in the app's release notes.

Contact

Write to privacy@selfledger.app. Karatry LLC, United States.