Privacy

Ledger is a personal log made by Austin Williams. This page says what we store and how to remove it. Questions: [email protected].

Account data. If you sign in with Google or X, we receive the name and email that provider shares, plus a sign-in token. If you use email and a password, we store that email and a hash of the password. We do not receive your Google or X password.

When you sign up, we note which link brought you (for example instagram) so we know where people find Ledger. We use no ad trackers.

Food, macros, and weight. The diary you type in is stored with your account: foods, calories, macros, water, weight, body measurements, and exercise.

Photos and voice. A meal photo, a nutrition-facts photo, or a voice description is sent to the server only when you ask Ledger to read it. Speech is turned into text on the phone. The recording is not sent and is not kept. The estimate is saved in your diary only if you keep it. A meal photo you keep is stored with that entry.

xAI. xAI is the AI provider. Ledger contacts xAI only over HTTPS, and only when you ask for an estimate. A plate photo sends that photo and your body weight in kilograms. Typed meal text, or the text from voice, sends that text and your body weight in kilograms. If you have not entered a weight, 82 kg is sent in its place. A nutrition-label photo sends only that photo, not your weight. xAI also receives Ledger’s instructions for how to format the estimate. The rest of your diary is not included.

The board. The board is off until you choose Join the board. If you join, other users can see your name, photo, bio, calories, and weight change. You can leave anytime, and then those details are no longer shown. Existing profiles stay off the board until they join. A listing also drops off when the profile has not been used in the last 45 days. If you report someone, the reason and any note are saved for the developer to review. If you block someone, that block is saved so they stay hidden from you until you undo it in Settings.

A coach. You can invite a coach or accountability partner with a link. They need their own free account. There is no paid coach plan. They see only what you leave on: the food diary, macros compared with your targets, your weight trend, and weekly check-ins. Meal photos are not included. Water, exercise, and body measurements are not included. A coach can comment on a day and suggest new calorie and macro targets. A suggestion changes your targets only if you accept it. You can remove a coach at any time, which removes their access, their comments, and open suggestions. The invite link is a page on this site. On Android, that link opens the Ledger app.

Outside services. Hosting is provided by Cloudflare. xAI reads a food photo, a label photo, or meal text only when you ask, as described above. Stripe handles payments on the website only. The Android app does not take payment. Google and X handle sign-in if you choose those.

Where it is stored. Your diary, profile, board choice, blocks, reports, membership, and coach links sit in our database, tied to your account. The number of AI estimates used today is stored with the account so that count can reset at midnight Eastern Time. A copy of the diary also stays in the browser on the device you use. If you subscribe on the website, Ledger stores a record that the subscription is active. Stripe stores the card.

How long we keep it. We keep the diary and profile until you delete the account. Sign-in sessions end when you sign out or when they expire. Reports already saved are kept so they can be reviewed.

Deletion. Signed in, open Settings and choose Delete account. That permanently deletes the account, the diary, the profile, the board listing, the membership, coach links, and the daily estimate count. Reports already filed are kept after the account is deleted so they can be reviewed. You can also read the steps on the delete-account page. Stripe keeps its own payment records as their policy requires.