Privacy Policy

1. The short version

Ledger stores the email and password you sign up with, the trades and theses you log, who you follow, and the comments and likes you make. We don't sell your data, we don't serve you ads, and we don't share your private trades with anyone. Public trades are visible to other signed-in users by design.

2. What we collect

Account info: email address, hashed password, username, display name, bio.
Trades: ticker, entry price, target, stop, horizon, thesis, exit reasoning, and the resolution outcome.
Social: who you follow, who follows you, likes and comments you make on public trades.
Usage: standard server logs (IP address, browser type, timestamps) for debugging and security. We don't use third-party analytics or ad tracking.

3. What we don't collect

We don't access your bank accounts or your real trading positions. We never place trades or move money. We have no plans to sell your data or share it with advertisers.

3a. Brokerage connections (optional)

If a brokerage connection is offered to you and you choose to connect it, we receive a read-only access token from the broker (for example Charles Schwab) that lets us fetch price quotes for the tickers in your ledger. Tokens are stored encrypted, prices fetched this way are shown only to you, and you can disconnect at any time from Settings, which deletes the token and those prices. We never receive your brokerage password and cannot place orders.

4. How we use it

To run the service: show you your trades, calculate your stats, surface other users you follow, deliver notifications. To improve the service: debug issues, monitor performance. That's it.

5. Who sees what

Private trades (the default): only you. Database row-level security enforces this — even our admin tooling can't casually browse private content.
Public trades: any signed-in Ledger user can see them, along with your track record on those public trades. Comments and likes on public trades are also public.
Profile info (username, display name, bio, follower counts): visible to any signed-in user.
Email + password: only you. Never displayed anywhere on the site.

6. Third parties

We use Supabase to host the database and handle authentication, Vercel to host the app, and Yahoo Finance to fetch price data for tickers you've logged, an email delivery provider to send account emails (sign-up confirmation, password reset), and, only if you connect it, your brokerage. Each has its own privacy policy. Any usage statistics we collect are aggregate and cookie-free, and we never send your data to ad networks.

7. Your rights

You can edit your profile at any time on the Settings page, delete trades from the trade detail page, and permanently delete your whole account from Settings → Delete account. Deletion immediately erases your profile, trades, comments, likes, follows and any brokerage connection; residual copies in encrypted backups expire within 30 days. You can also email us to request a copy of your data or help with deletion.

8. Security

Passwords are hashed, traffic is HTTPS, and database access is scoped by row-level security policies. We're a small project without a dedicated security team yet, though — don't put anything in your thesis you wouldn't want a determined attacker to see. If we ever learn of a breach affecting your personal information, we'll notify you as required by law.

9. Children

Ledger is not directed at anyone under 18. If you believe a child has created an account, please contact us and we'll remove it.

10. Changes

We may update this policy. Material changes will be announced in-app. Continuing to use Ledger after a change means you accept the updated policy.

11. Contact

Privacy questions? Email getledger.app@gmail.com.