Privacy policy
Draft. This policy is a draft written for the closed test and is not legal advice. It will be reviewed and finished before the public release, when plans and billing start. It has not yet been reviewed by a lawyer.
VioLedger is provided by Kunjahamed P, trading as OriginVio Technologies (an individual's business, not a registered company), Kulangara Patt House, Tanalur P.O., Malappuram, Kerala 676307, India ("we", "us"). This policy explains what the VioLedger Android app and this website collect, why, and the choices you have.
What we collect
- Account details: your email address, an optional phone number and its verification status, your name and profile picture if you sign in with Google, and the display name you choose.
- Your records: the accounts, transactions, notes, tags, people, groups, Teams and shared expenses you enter, and your app settings (language, theme and similar).
- Receipts: if you attach a receipt to a transaction (a feature of the Max plan), the file you attach.
- Invitations: when you invite someone, the invitation and the name you gave that person. We do not upload your address book. If you pick a contact, only the selected name, phone number or email is used. When you confirm a person or invitation, those selected details are stored with it so that invitations and identity matching can work.
- Plan, trial and usage: your plan, when your trial starts and ends, and simple counts such as how many accounts or transactions you created this month, so that plan limits can be applied.
- Purchases: payments are taken by Google Play. We receive from Google Play the confirmation of your subscription or donation (for example the product, its status, the renewal date and a purchase token), and we record a donation so that your Supporter badge can be shown. We do not receive your card or bank details.
- Support messages: if you write to us or use the enquiry form, your name, email address, the topic you chose and your message.
- Crash reports: only in builds where crash reporting is switched on (for example while testing). A report holds the kind of error, a technical trace, the app version and a random installation id. It never includes names, amounts, notes, email addresses or sign-in details.
How we use it
- To run the app: sign you in, store your records, sync them across your devices, and show shared expenses to the people involved.
- To apply your plan: check your subscription with Google Play, apply the limits of your plan, run your free trial and send trial reminders.
- To prevent repeat trials and restore a paid plan (see “After you delete your account” below).
- To send account emails such as sign-in confirmations, relevant Shared and Team activity emails according to your notification settings, and replies to your support messages.
- To find and fix problems.
We do not sell your data.
Ads (optional)
VioLedger can show ads, but only if you switch them on yourself. The switch is in More and is off by default. Before any ad is shown you will see a consent screen. Ads are non-personalised, appear only on calm screens and never on screens where you enter transactions. If you leave the switch off, no ads are shown. Ads are not part of the app yet. When they are added, the ad provider will be Google AdMob (Google LLC). With your consent it may process your device's advertising ID, approximate location and how you interact with an ad. This policy will be updated with the details before ads appear.
Who can see your data
- Your personal records are visible only to you.
- Shared records are visible to the people in that shared group or person ledger. In a Team, what each member sees depends on the roles the Team gave them.
- Service providers process data for us: Supabase (database and sign-in), Google (Google sign-in and Google Play billing), Resend (account emails), Cloudflare (this website, email routing, DNS and encrypted backup and receipt storage) and, only when crash reporting is switched on, Google Firebase Crashlytics. They process data only to provide those services to us.
Where it is stored and for how long
Your records are stored with our database provider in Mumbai, India, and on your phone so the app can work offline. Encrypted backups are kept in Cloudflare storage. We keep your data while your account exists. Support messages are kept for 12 months after we resolve them.
After you delete your account
If you delete your account, your account, your personal records and the receipt files you stored are erased. In shared groups and person ledgers, the entries stay for the other people so their balances remain correct, but your name there is replaced with “Former member” and is no longer linked to you. Backup copies are deleted automatically within 30 days.
We keep one small record after deletion, so that the same person cannot get a second free trial and so that a paid plan can be restored if you come back. It holds only a hashed (scrambled, not readable) form of your old email address and of your Google Play account, with the plan and trial dates attached. It holds none of your entries, amounts, names or receipts. We keep it for 3 years. Deleting the account does not cancel a Google Play subscription; you cancel that in Google Play (see cancellation and refunds).
Your choices
- Edit your details and settings in the app.
- Export your own data as CSV, Excel or PDF on Pro and Max. Viewing your existing records and deleting your account remain available on every plan.
- Turn ads on or off in More. They are off unless you turn them on.
- Delete your account in the app: More, then “Account and security”, then “Delete account”. See how to delete your account.
- Ask for a copy or correction of your data by writing to support@violedger.com.
This website
This website uses no cookies, no analytics and no outside scripts or fonts. If you use the enquiry form, what you type is sent to us by email so we can reply.
Security
Data is sent over encrypted connections and protected by access rules so that each person can reach only their own records. The app can lock itself and hide balances. No system is perfectly secure; protect your sign-in and your phone. Please do not send passwords or bank details to support.
Children
VioLedger is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes
If we change this policy we will update the date above and, for important changes, tell you in the app.
Contact
Email: support@violedger.com
Complaints about how we handle your data: write to the same address with the subject “Grievance”. We confirm receipt within 7 days and aim to resolve it within 30 days. Grievance officer: Kunjahamed P, Kulangara Patt House, Tanalur P.O., Malappuram, Kerala 676307, India.
Activity notifications and email
Relevant Shared and Team activity can appear in the app inbox and be delivered by email through Resend. Such messages can contain entry descriptions, amounts and participant details needed to explain the change, subject to the recipient's access. Email activity alerts are on by default and can be disabled in More. Your own ordinary My Money entries do not produce transaction activity notices.
Read and cleared in-app notifications expire after 90 days by default. You can select 1 to 364 days; unread notifications are preserved until you deal with them. Shared WhatsApp or email debt reminders require you to approve the send.
CSV migration files
CSV migration files are read on your phone. The original file, filename and device path are not uploaded by the importer. Imported entry fields and small tracking records are saved so that balances, duplicate protection and import history can work. Historical migration does not send activity notifications or invitations.