The Ledger is operated by Ruzylo Cloud, LLC. This sheet says what we hold, what we do not, and how to make us give it back or delete it.
Your entries
What you write stays on your device. Every entry — the words, the time, the weight you tagged it, the tally built from them — is held in the app's own on-device store. It is not uploaded to us, mirrored to us, or backed up to us. We do not have it, which means we cannot read it, sell it, hand it to anyone who asks, or lose it in a breach of ours.
It moves between your own devices — phone, watch, widget — through your own private iCloud, which is Apple's infrastructure under your Apple account rather than a database of ours. We have no access to it there either.
If a future feature ever needs to send something elsewhere, we will say so in the app, in plain words, before it happens, and it will be a choice you make rather than a default you discover.
What we do hold
- Your email address — only if you join the register on this website. Used to write to you about The Ledger and nothing else: the day the price is published, and the day it ships. It is never attached to anything you wrote in the app, because we do not have anything you wrote in the app.
- An authentication identifier — only if you choose Sign in with Apple. We store the opaque Apple user ID; we never receive your real Apple ID, and your email address only if you choose to share it.
- Payment details, if and when there is anything to buy — handled entirely by the app store or a payment processor. We never see or store your card number.
- Standard server logs for this website — IP address, user agent, and request paths, kept no longer than thirty days for security and debugging.
What we do not do
- We do not sell your data, ever, and we do not broker it.
- We do not run third-party advertising trackers — your household is not an ad slot.
- We do not use your entries to train any AI model.
- We do not send your tally, your entries, or any summary of them to another person on your behalf — not to a partner, a sibling, a co-parent, or anyone else.
- We do not run analytics or a crash-reporting SDK inside the app.
The one way anything leaves your phone
You export it. The Ledger writes a CSV of your own record and hands it to the iOS share sheet, and where it goes from there is entirely your decision, taken on the day, every time. There is no automatic sharing, no scheduled digest, and no recipient stored anywhere in the app.
Your rights over what we hold
Because almost nothing of yours is at our end, most of this concerns the email address on the register. Write to privacy@ruzylo.dev and we will act within thirty days.
- Access — we will tell you everything we hold against your address, which will be short.
- Deletion — we will remove you from the register entirely; every message we send also carries a one-click unsubscribe.
- Portability — anything we hold is provided in JSON or CSV.
- Your entries need none of this: they are already in your hands, exportable and deletable from inside the app without asking us.
Children
The Ledger is not intended for children under 13, or under 16 in the European Union, and we do not knowingly collect anything from them. If you believe a child has joined the register, write to us and we will remove the address.
Changes
If we make a material change we will update this sheet and the effective date at its head, and write once to anyone on the register.
Contact
privacy@ruzylo.dev — Ruzylo Cloud, LLC, Thousand Oaks, California.