This policy covers the MellowLedger app and this website’s feedback form. Your ledger is stored locally by default and is not sent to the developer. Optional iCloud backups and backups you export are described below.
Website preferences and email
On your first visit, language is suggested from the connection’s country or region: mainland China uses Simplified Chinese, Japan uses Japanese, Hong Kong/Macao/Taiwan use Traditional Chinese, and other regions use English. If unavailable, we use your browser’s region setting. VPNs can affect the suggestion. You can always switch language; only your manual choice is saved in this browser when storage is allowed. No precise location is requested and the region hint is not saved.
Please do not email ledger backups, bank passwords, or unredacted financial documents.
A quieter website. No advertising trackers.
Our short-lived delivery queue clears email content after provider acceptance or expiry. Recipient and delivery metadata are removed after 7 days during maintenance. Email delays or failures do not undo a saved message.
This website does not set advertising or analytics cookies, load tracking pixels, or track email opens and clicks. It remembers only your manual language choice in browser local storage, when permitted; you can clear it in your browser settings. Cloudflare processes connection data to deliver and protect the site; necessary security measures are separate from advertising tracking.
Feedback is stored by Cloudflare for up to 180 days, then removed during subsequent form activity or scheduled maintenance. Internal summaries go to our team via Resend. If you choose an email reply, Resend also processes a short acknowledgement and our team may reply through Google Workspace. We do not include your original message in an automatic receipt to an unverified address. Resend email records currently last 30 days; copies in mailboxes are managed separately. Contact support to request deletion.
Product updates are a separate, optional subscription. We store the email address, selected language, consent version and confirmation times in Cloudflare. An email confirmation is required before adding you to the product mailing list. Unconfirmed requests expire after 24 hours and are removed within 7 days during maintenance. Confirmed subscriptions are kept until withdrawal or 24 months without a new confirmation. Resend processes confirmed contacts for product mail, separately from feedback. Every product email includes an unsubscribe link. No ledger data is collected. We do not add feedback contacts to this list.
How data is handled
Your ledger and receipt images are stored on your iPhone. MellowLedger has no advertising or third-party analytics and does not send your ledger to the developer. Automatic iCloud backup is off on a new install. When you enable it with active Pro access, the app can save up to three complete backups to your Apple iCloud, under Apple’s iCloud terms. Backups you export are stored wherever you choose.
MellowLedger does not connect to banks, credit-card issuers, brokerages, payment services, or cryptocurrency exchanges. It does not hold, move, or manage real money. Investment features only calculate summaries from account values and principal that you choose to enter or import.
Exchange rates are entered manually by you. The app does not retrieve financial accounts, transactions, prices, or market data.
File import and Photos
MellowLedger reads PDF, image, text, or CSV content only after you select a file. Parsing, image-text recognition, duplicate detection, and transaction preparation take place on the device.
The app requests Camera access only when you choose to photograph a receipt. You may also choose specific receipt images through the iOS system photo picker; this does not give MellowLedger permission to read your entire photo library. Receipt recognition happens on device; receipt images may be included in the backups you choose to create.
The app requests permission to add a generated report image to Photos only when you choose “Save to Photos.”
Voice entry
MellowLedger requests Microphone and Speech Recognition access only after you start voice entry. When on-device recognition is supported for the app’s selected language, recognition takes place locally. If it is unavailable, the feature displays an error and does not fall back to online recognition.
During recognition, the app does not save audio or send audio or recognized text to the developer or a third party. Confirmed entries follow your ledger backup choices. Recognized text is shown in an editable preview and is written to your ledger only after you confirm it.
Website feedback
The support form is separate from the MellowLedger app and does not automatically read or upload your in-app ledger. When you submit feedback, the website stores your message type, language, subject, message, optional device details, optional reply email, submission time, and a rotating one-way abuse-prevention identifier. It does not store your raw IP address.
You may submit anonymously by leaving the reply email option off. If you provide an email, it is used only to reply about your message. Feedback records expire after 180 days and are purged during subsequent feedback activity. Please do not include financial records, account names, amounts, or receipt details.
Retention and your controls
You can edit or delete records, export your ledger, create and restore local backups, and reset the ledger from Settings → Data Management. Deleting the app removes its local container. Exported files and iCloud ledger backups are separate copies; manage them where they are stored. Apple device backups follow your Apple backup settings.
App Store purchases
Apple StoreKit and your Apple Account process the Annual subscription, eligible 14-day introductory trial, Lifetime purchase, payment, and purchase restoration. MellowLedger reads Apple-verified current entitlements on the device; Meknow Inc. does not operate a purchase account or receipt-validation server.
Purchase state, transaction receipts, and Apple Account information are not written into your ledger, receipt images, restore points, transfer backups, or iCloud ledger backups. Apple shows the actual local price and eligibility before confirmation and decides refund requests under its own policies.
Personal-finance notice
MellowLedger is a personal recordkeeping and calculation tool. It does not provide banking, brokerage, payment, lending, investment-advisory, tax, or legal services. Installment schedules are editable local estimates that include principal and optional fixed interest; they do not include every possible tax, fee, insurance charge, variable rate, or lender cost. Balances, returns, forecasts, categories, and installment estimates are for personal reference only. Use the relevant contract and financial-institution statement as the authoritative record.
Contact and policy updates
For privacy support, use the website support form and select “Product question.” You may submit anonymously or provide a reply email. Changes to the app or website privacy practices will be published on this page with an updated effective date; website updates do not require an app release.