Privacy Policy

This Privacy Policy explains how Saint Rose Ledger ("Saint Rose Ledger", "we", "us" or "the app") handles information when you use our website at saintroseledger.com and our mobile apps. By using the app you agree to the practices described here. If you have questions, contact us at saintroseledger@gmail.com.

Saint Rose Ledger is a bookkeeping and business management application. It helps you record stock, sales, expenses, debts and reminders, and view reports and profit based on what you enter.

Saint Rose Ledger does not provide banking, loans, credit, investment advice, cryptocurrency services, money transfers, payment wallets or any other financial services. Amounts you record in the app are records only — no money is held or moved by the app. Reports are not accounting, tax or legal advice.

• Your full name, email address, phone number and password when you register with email.
• If you sign in with Google, your name, email address and profile photo as shared by Google. We never receive your Google password.
• Verification codes sent to your email to confirm your account or reset your password.

Passwords are stored only in hashed form by our authentication provider; we cannot read them.

You may add or edit your business name, owner name, phone number and preferred currency in Settings. This information is used to personalise the app, your reports and your account.

The app stores the records you choose to enter, which may include products, prices and cost prices, stock levels, product photos, sales, expenses, debts (including customer names and amounts you type), and reminders. These records belong to you. We use them only to provide the app's features to you, such as calculating profit and producing reports.

If you use the in-app Assistant, your question and a summary of your own records are processed to generate an answer. They are not used to advertise to you and are not shared with other users.

To keep the app working and secure, we may collect limited technical information, such as:

• Device type, operating system, app version and browser type.
• Error and crash reports, and basic request logs (for example time and status of a request).
• A notification token for each device where you turn on reminder notifications.

We do not collect your precise location, contacts, call logs, SMS messages or browsing history, and we do not use advertising identifiers.

Sign-in is handled by a secure authentication service. Sessions are protected by tokens that expire and are refreshed automatically. Keep your password and devices secure, and contact us immediately if you believe someone has accessed your account.

The app needs an internet connection to sign in, sync your records, process subscriptions and use the Assistant. All communication between the app and our servers is encrypted with HTTPS/TLS.

So you can keep working without a connection, the mobile app stores a copy of your records and your recent subscription status on your device. Changes made offline are queued and synchronised with our servers when you are back online. This local copy stays on your device until you sign out, delete the account, or uninstall the app.

Your account and records are stored on secure cloud infrastructure. Each account's records are isolated by database access rules so that one account cannot read another account's data. Product photos are stored in private storage and are only accessible through short-lived links issued to you.

New accounts receive a free trial. After that, a subscription is required to keep adding and editing records. We store your subscription status, plan, billing period, and payment records (such as reference, amount, currency, date and payment method type).

On the website, payments are processed by Paystack. Card, bank and USSD details are entered on Paystack's secure pages and are never seen or stored by us. Paystack's own privacy policy applies to the information you give them.

If you subscribe in the Android app, the purchase is handled by Google Play. We receive a purchase token, order ID, product and plan, and subscription state (for example active, cancelled or expired) so we can confirm your purchase with Google and unlock your account. We do not receive your card or payment account details. You can manage or cancel your subscription in the Google Play Store, and Google's privacy policy applies to your Google Play account.

We rely on trusted service providers that process data on our behalf, only to run the app:

• Supabase — database, authentication and file storage.
• Cloudflare — hosting and secure delivery of the website and servers.
• Google — optional Google sign-in and Google Play Billing.
• Paystack — website subscription payments.
• AI model providers — generating Assistant answers from the questions you ask.
• Email delivery provider — sending verification, password-reset and account emails.

We do not sell your personal information and do not share it with advertisers or data brokers.

• To create and secure your account and sign you in.
• To store, sync and display your bookkeeping records and reports.
• To send the reminders and account emails you request.
• To process and verify subscriptions and payments.
• To answer support requests and prevent fraud or abuse.
• To diagnose errors and improve reliability.
• To meet legal, accounting and tax obligations.

We use encryption in transit (HTTPS/TLS), per-account database access rules, private file storage, server-side checks for administrative actions, and keep payment and service credentials on the server only. No system is perfectly secure, but we work to protect your information and will notify you where required by law if a breach affects you.

We keep your records for as long as your account exists. If your subscription ends, your data is not deleted — the app becomes read-only until you subscribe again. Payment records may be kept longer where required for accounting, tax or legal purposes. Technical logs are kept only for a limited period.

You can permanently delete your account in the app from Settings → Delete account. You can download a copy of your records first. Deletion removes your profile, products, product photos, sales, expenses, debts, reminders, notification devices and subscription records, and cannot be undone. If you cannot sign in, email saintroseledger@gmail.com from your account's email address and we will delete your account within 30 days.

Deleting your account does not cancel a Google Play subscription automatically — please cancel it in the Google Play Store to stop future charges.

• View and edit your profile and records at any time in the app.
• Export a copy of your records.
• Turn reminder notifications on or off per device.
• Delete your account and data.
• Contact us to ask about, correct or object to how we handle your information, including rights you may have under laws such as the Nigeria Data Protection Act.

Saint Rose Ledger is intended for business owners aged 18 and above. It is not directed at children, and we do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, let you know in the app or by email.

Saint Rose Ledger — Email: saintroseledger@gmail.com. See also our Terms of Service and Help & Support.