Ledger Bunny Privacy Policy

Version: 2026-09-28

Information We Process

When you sign in with Apple, we process the user identifier and authorization credential Apple provides to create your account, keep you signed in, and revoke authorization when you delete your account. We do not obtain your Apple password.

We store ledgers, income and expense amounts, dates, categories, notes, reminders, recurring-entry settings, photos, and feedback that you create to provide bookkeeping and cloud synchronization. For Monthly Membership and Lifetime Membership, we verify the purchase credential with Apple and retain the transaction identifier and membership entitlement.

Permissions and On-device Actions

Camera access, photo selection, saving exported images, and writing to the system calendar are requested only when you use the relevant feature. You may decline or revoke them in system settings; the related feature will then be unavailable while other features remain available.

Service Providers and Security

Account and business data are transmitted over HTTPS and stored in Tencent Cloud CloudBase in the Shanghai, China region. Apple provides sign-in, in-app purchase, and purchase-verification services. We record necessary operational errors and logs to maintain the service. We do not use ledger contents for advertising or sell personal information. Free users may see ads; active paid Monthly Members and Lifetime Members do not. The advertising SDK is enabled only after advertising-service consent, Apple tracking authorization, and confirmation that the account is not ad-free.

Advertising Services

We integrate the Youlianghui SDK provided by Shenzhen Tencent Computer Systems Co., Ltd. for ad display, measurement, and fraud prevention. On iOS and iPadOS 14 or later, we request Apple App Tracking Transparency authorization before starting the advertising SDK or requesting ads. The SDK starts only after you permit tracking, consent to advertising services, and we confirm your account does not have ad-free membership. Declining or restricting tracking leaves core bookkeeping and synchronization available, but this version does not start the Youlianghui SDK or request its ads. This SDK is not enabled on earlier system versions. Even after authorization, we prohibit IDFA access and disable personalized recommendations; these restrictions do not by themselves mean the SDK is free of tracking. Device identifiers and advertising data may be used for cross-company advertising measurement only after tracking authorization. The SDK may still process device identifiers other than IDFA, device model, operating system, screen, IP address, network type, carrier, app version, ad impressions and clicks, and crash and performance information for ad delivery, measurement, and fraud prevention. We configure the SDK to disable personalized recommendations, shake interactions, and optional sensor capabilities. We do not provide ledger contents or Apple sign-in credentials to the SDK.

See the Youlianghui SDK Privacy Statement. Free and trial users may see ads only under the consent and authorization conditions described above; active paid Monthly Members and Lifetime Members do not see ads. To withdraw advertising-service consent, open Advertising Settings. Withdrawing advertising-service consent or revoking tracking authorization in system settings stops new ad requests; requests already sent cannot be recalled. Restart the app as instructed to finish disabling the local SDK.

Retention, Deletion, and Contact

We retain your data while you use the account to provide the service. You can manage transactions in the app and request account deletion in Me — Account. Deletion stops account access immediately and clears ledgers, transactions, photos, feedback, and authorization credentials; it also revokes Apple sign-in authorization. Cleanup retries if the service is temporarily unavailable.

To prevent repeat purchase claims and support restoration for the same identity, deletion retains hashed identity linkage, minimal transaction-ownership records, and deletion-task status. It does not retain original receipts or ledger contents. Deletion is not an Apple refund. Lifetime Membership is a one-time purchase and does not renew automatically. Contact us below with privacy requests.

Optional New-User Feature Trial

When offered, eligible first-time accounts may choose a zero-price 7-day Trial through Apple and confirm it in the App Store. Server verification grants 168 hours of feature access from the original Apple purchase time. Advertising remains during the trial, subject to advertising-service consent and Apple tracking authorization; effective paid Monthly Membership or Lifetime Membership removes ads as a membership benefit. The trial does not automatically charge, renew or buy membership. Your records remain when it expires. Signing in, reinstalling, restoring or deleting and re-creating the account does not restart the period.

To prevent repeat trial claims, even after account deletion we retain minimum hashed identity linkage, eligibility/claim markers, original claim and expiry times, and transaction-ownership references. These records are used to enforce one trial per verified identity, not for advertising. Original receipts and deleted ledger contents are not retained after account deletion.

Operator: 北京竹柯科技有限公司. Contact: zhoushunding@126.com.