Key Ledger privacy policy
Key Ledger is a key-custody app for shops. Signed out, it works on your device alone and nothing leaves it. Signed in, it shares one ledger with the other members of your shop through servers we run for that purpose. This page says what is collected in each case, where it is kept, who can see it, and how to delete it.
Signed out: nothing is collected
Without an account, Key Ledger has no server and no analytics, advertising or tracking code. The key sets, owners, workers and checkout history you enter are saved only on your iPhone or iPad, in the app's own storage. iOS encrypts these files while the device is locked. Deleting the app deletes them. We do not receive, store or sell any information about you, your business or the people and properties in your ledger.
Signed in: what is collected
- Your sign-in email address, used to send you a sign-in code and shown to the other members of your shop.
- Your name, if you share it through Sign in with Apple, and the worker name you give when you create or join a shop.
- Your direct phone number, given when you create or join a shop so keys can be checked out to you.
- An account identifier, which records which member recorded each checkout and return.
- The shop's records: key sets, property addresses, property owners' contact details, workers' names and phone numbers, job notes and the custody history that members enter.
All of it is used to run the app and for nothing else. It is linked to your account, never used for advertising or tracking, and never sold.
Who can see it
Every member of a shop sees the whole shop: every key set, worker, checkout and return, and every member's name and email address. Phone numbers from accounts are not shown; the worker phone numbers the shop records are, as they always were. The owner can invite, remove and promote members. Nobody outside the shop can see its records, and we do not look at them except to fix a problem you report.
Where it is kept
Shop records and accounts are stored by Supabase on servers in the United States, encrypted in transit and at rest. Sign-in codes and invitations are emailed through Resend. Supabase's authentication logs hold email addresses and the times of sign-ins for a limited period. This website, including invitation links, is served by Cloudflare. Each phone keeps the last synced copy of its shop in the app's cache so the ledger can be read offline; that copy is removed when you sign out, leave the shop or are removed from it.
Deleting your account
In the app, open Settings, then Account, then Delete account. Deletion is immediate: your account and its memberships end, and no copy stays on your devices. The shop keeps past checkouts with the name and phone it recorded at the time, so its history stays complete. The sole owner of a shop that still has other members must make someone else an owner first. Leaving a shop without deleting your account keeps your sign-in and removes the shop's copy from your device.
Backups and imports
When you export a backup, the app creates a CSV file and hands it to the iOS share sheet. It goes only where you send it, for example Files on the device. Backup files are not encrypted by the app, so keep them somewhere you control. Importing or restoring reads only the file you pick. Moving this device's ledger into your shop sends its sets, workers and history to the shop once, when you choose to, and leaves the copy on the device as it was.
Reminders
If you allow notifications, the app schedules overdue reminders on the device itself: every overdue set for an owner, the sets checked out to you for an employee. A reminder shows the set's tag and the holder's name, never an address. Nothing about reminders is sent to a server.
Calls and email
Tapping Call or Email opens your phone or mail app with the number or address filled in. Key Ledger does not see or record the call or message.
Children
Key Ledger is a business tool and is not directed at children. It knowingly collects no personal information from anyone under 13.
Changes
If this policy changes, the new version will be posted here with a new effective date before the change takes effect in the app.
Contact
Questions about privacy, or a deletion request you cannot make in the app: keyledgerapp@gmail.com