Privacy Policy

1. Who we are

LedgerLK is built and operated by Inzeedo (PVT) Ltd, based in Sainthamaruthu / Colombo, Sri Lanka. We are the data controller for information processed through the app. Contact us at hello@inzeedo.lk or support@inzeedo.lk.

2. Data we collect

We collect only what the app needs to work:

• Google account data (Continue with Google): when you sign in with Google we receive your name, email address, profile photo and Google user ID via the openid, email and profile scopes. Your sign-in token is verified on our servers; details you type yourself are never trusted over Google's verified response. We use this data only to create and identify your account, display your profile, and let you recover access when you switch phones.
• Account information: your name, email address (Google sign-in) or phone number (phone OTP login), plus the shop name, phone number and preferences you provide during setup.
• Business records you enter: shop details, customer names and contact numbers, credit ledger entries, cash in / cash out records, due dates, receipt photos and reminder history.
• Information about your customers (data you provide): names, phone numbers and dues you record so the app can track balances and send the reminders you request. You confirm you have your customers' permission to store and message them, and you are responsible for the accuracy of this data.
• Support messages: emails you send us, kept so we can help and improve the app.
• Basic technical data: app version, Android version, device identifiers and crash logs, used only to fix bugs, prevent fraud and keep the app stable.
• Website visits: when you browse this site, our hosting and font/CDN providers necessarily receive standard request data (IP address, browser type). We set no advertising or tracking cookies ourselves.

Your customers never need the app: payment reminders reach them by WhatsApp or SMS, and we process only the contact details you provide for that purpose.

3. How we use your data

• To verify your Google sign-in and create, secure and recover your account, including syncing it when you switch phones.
• To run the app: ledgers, cash tracking, reminders, backups and multi-device sync.
• To send the payment reminders you ask us to send, to the contacts you provide.
• To provide support, fix technical issues and prevent fraud or abuse.
• To improve LedgerLK using aggregated, non-identifying statistics that cannot identify you.

We process your data on the basis of your consent (e.g. signing in, entering records), our contract to provide the app to you, our legitimate interest in operating a secure service, and legal obligations where they apply.

We do not use your Google data, business data or contacts for advertising, and we never sell your data to anyone.

4. Sharing & disclosure

We share data only with the service providers required to operate LedgerLK, who may process it solely on our instructions and under confidentiality obligations:

• Google: for authentication when you choose Continue with Google (subject to Google's own privacy policy for data it processes as controller).
• Cloud hosting, database and backup-storage providers: to store, sync and back up your records.
• SMS and WhatsApp delivery gateways: to deliver the payment reminders you send.

We never sell or rent your data, and we never share it with advertisers or data brokers. If our business is merged or acquired, your data transfers under the same protections with prior notice. We disclose information only if required by Sri Lankan law or a valid court order, and we will notify you unless legally prohibited.

5. Security

Your data is encrypted in transit (TLS) and stored on access-controlled cloud infrastructure with regular backups, which may involve processing outside Sri Lanka with appropriate safeguards. Google sign-in and phone OTP mean we never store app passwords. No system is perfectly secure, but we review and strengthen our safeguards continuously and will notify affected users of any breach as required by law.

6. Retention & deletion

We keep your account and business records while your account is active so your ledgers stay synced across devices. Support emails are kept for up to 24 months and crash logs for up to 90 days, after which they are deleted or anonymised. Data we must keep for legal or accounting reasons is retained only as long as the law requires.

You can delete your account and all associated data at any time in the app via Settings > Delete Account, or through our account-deletion page. Once confirmed, your data (including Google profile data, ledger records and receipt photos) is purged from our live systems and backups within 7 days.

7. Your rights

You have the right to access a copy of your data, take it with you (portability, including the PDF exports and monthly statements available inside the app), correct inaccurate information, restrict certain processing, withdraw consent, and delete your account and data at any time.

To exercise any right, email support@inzeedo.lk from your account email address. We respond to all requests, and complete them within 30 days. If you feel we have not handled your request properly, you may complain to the relevant data protection authority in Sri Lanka.

8. Children

LedgerLK is a business tool and is not directed at children under 16. If you believe a child has provided us personal data, contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy as the app evolves. Material changes will be announced in the app and the "Last updated" date above will change. Continued use of LedgerLK after changes take effect means you accept the updated policy.

10. Contact us

Questions about privacy, your data, or deletion? Reach us at support@inzeedo.lk or hello@inzeedo.lk. Inzeedo (PVT) Ltd, Sainthamaruthu / Colombo, Sri Lanka.