Privacy Policy

Every bookkeeping feature — invoices, transactions, CSV import, reports, PDF export — runs entirely on your machine and works with the network unplugged. Your company details, clients, invoices, transactions and reports are written to a single SQLite file in your own user profile:

• %LocalAppData%\FreeLedger\freeledger.db — your books
• %LocalAppData%\FreeLedger\Exports\ — PDFs you export
• %LocalAppData%\FreeLedger\Logs\ — a local diagnostic log, never uploaded

We cannot read any of it. There is no account to sign in to, no synchronisation, no analytics inside the application and no crash reporting service. Uninstalling asks before it touches that folder and keeps it unless you say otherwise.

There are exactly two features that use the network, both off until you turn them on: checking for updates, and emailing an invoice through your own mail server.

The application asks once, on the first launch after setup, whether it may check for updates. Until you agree it opens no connection at all, and you can change the answer in Settings at any time.

When enabled, the check sends the version you are running and the release channel you are on. It does not send an installation identifier, your company details or anything from your books, because none of that is included in the request.

The update service counts downloads per day, channel and version. Those counters hold a date, a channel, a version and a number, and there is no column for anything else — no address, no identifier. Its access log is switched off.

If you configure your own SMTP server, FreeLedger can send an invoice PDF straight from the application. The message travels from your machine to the mail server you configured. It does not pass through us, and we never see the recipient, the message or the attachment.

The mail password is encrypted with your Windows account (DPAPI) before it is stored, so copying the database file to another machine or opening it as another user does not reveal it.

The site is a static page. It sets no cookies, runs no analytics or advertising scripts, embeds no third-party fonts, videos or widgets, and has no contact form or newsletter — there is nothing here that could collect a name or an email address.

Like any web server, ours writes a request log — IP address, timestamp, requested path, referrer and user agent — which is kept for at most 14 days and used only to keep the site up and to spot abuse. It is not joined to a profile, sold, or used for advertising.

If advertising or analytics is ever added to this site, this section will say so before it goes live, and will name the provider and how to opt out.

Because your books stay on your machine, the usual data-subject requests do not need us: you already hold the only copy. You can back it up, move it, or delete it by removing the FreeLedger folder in your user profile. Settings shows you the exact path.

If you believe we hold anything about you and want it removed, write to the address below and it will be handled within 30 days.

FreeLedger is business software and is not directed at children. We knowingly collect nothing from anyone, of any age.

If this policy changes, the date at the top changes with it, and any change that widens what is collected will be described here rather than quietly applied.

Questions about privacy: privacy@freeledgerapp.com. Anything else: support@freeledgerapp.com.