Privacy Policy - PrivLedge
Effective Date: August 8, 2026 [r1.5]
PrivLedge is built privacy-first: your financial data stays on your devices — and, with PrivLedge Pro, in your own private iCloud account — under your control. We operate no server for this app, so there is nowhere for your financial data to be sent and nothing for us to receive.
What Data PrivLedge Processes
PrivLedge processes the bank statements you choose to import (PDF, CSV, or XLSX). From these it reads:
- Transaction details (date, description, amount, and running balance)
- Statement metadata (bank name, statement period, opening and closing balances, the account holder name printed on the statement, and only the last four digits of the account number — never the full number)
PrivLedge keeps a copy of each statement file you import, along with the text extracted from it, so you can view the original beside your transactions and re-run parsing later. Both are stored with your other app data and are removed when you delete that statement or the app.
If a PDF statement is password-protected, the password you enter is used only to unlock that file and is never stored. Protected statements are preserved in their original encrypted form by default. You may optionally choose, in Settings, to save them unlocked for easier viewing; even then the password itself is never stored, the files remain protected by your device encryption and the app lock, and the option turns itself off after a month of not opening the app.
PrivLedge only accesses the statement files you explicitly import. It does not scan or read any other files on your device.
On-Device Processing
All statement parsing, transaction categorisation, machine-learning training, reconciliation, and tax-report generation happen entirely on your device. Your transaction data never leaves your device except to reach your own private iCloud account, and only if you choose to enable Sync with iCloud. We operate no server for this app, so your data cannot reach us and we have nothing to receive, access, or read.
PrivLedge works fully offline. The only network connections it makes are to Apple: to your own private iCloud account when you enable Sync with iCloud, and to the App Store when you buy or restore PrivLedge Pro.
On-Device Machine Learning
PrivLedge categorises transactions using a classifier that trains locally from your own corrections. This learning happens on your device; your transactions and corrections are never uploaded for training.
Where Data Is Stored
Your data is stored locally on your device and, with PrivLedge Pro and Sync with iCloud enabled, synced to your own private iCloud account (see “iCloud & Sync” below). On iPhone and iPad the on-device copy is protected at rest by the operating system's Data Protection (encryption tied to your device passcode), and imported statement files are written with file protection so they are not exposed through file sharing. On Mac, data is protected by your system disk encryption (FileVault) when enabled.
App Lock
You can require Face ID or Touch ID (with your device passcode as a fallback) to open PrivLedge. It is off on first start — the app offers to enable it once your first statement is imported. When enabled, the lock covers the entire app, including tax reports and exports, and re-engages when the app is sent to the background (iPhone and iPad) or hidden or minimised (Mac). You can turn it on or off at any time in Settings.
iCloud & Sync
With PrivLedge Pro, you can turn on Sync with iCloud in Settings to keep your data in your own private iCloud account using Apple's CloudKit. Your data then stays in sync across your Apple devices signed in to the same iCloud account, and re-downloads when you reinstall or replace a device.
This uses a private CloudKit container that only you can access — your data is encrypted in transit and at rest on Apple's servers, under your iCloud account. We use no public or shared container, and we operate no server of our own, so your data is never sent anywhere we could receive, access, or read it.
Sync is off by default. Unless you are on PrivLedge Pro and turn it on, your data stays on the device only and is not copied to iCloud.
Sync mirrors the current state of your data, including deletions — it is not a point-in-time backup, and deleted data cannot be recovered from iCloud. Sync also follows your device's iCloud settings: if you sign out of iCloud, or turn iCloud off for PrivLedge, your data remains on the device and is no longer synced.
What PrivLedge Does NOT Collect
PrivLedge does not collect, transmit, or store any of the following:
- Usage analytics or behavioural data
- Crash reports or diagnostic logs
- Device identifiers or fingerprints
- Location data
- Advertising identifiers
- Any form of usage tracking
The app contains no analytics, advertising, or tracking SDKs, and there is no PrivLedge account to create — we never ask for your name, email address, or phone number.
Purchases
PrivLedge Pro is a one-time in-app purchase, handled entirely by Apple through the App Store. Your payment details go to Apple, never to us, and we do not receive or store them. The app checks your purchase status with the App Store on your device to unlock Pro features; no financial data from your statements is involved in that check.
Permissions
PrivLedge requests file access solely to import the statement files you select, and biometric (Face ID / Touch ID) authentication to lock the app. It does not request access to your contacts, camera, microphone, location, or notifications.
Exports and Sharing
When you export a tax report or share a statement, the file is created on your device and handed to whichever app or destination you pick through the standard system share sheet. Once it leaves PrivLedge that copy is outside our reach and is covered by the privacy policy of wherever you sent it.
Data Deletion
You remain in control of your data:
- Delete individual transactions or entire statements from within the app; deletions sync to your other devices through your private iCloud account
- Uninstalling PrivLedge removes the copy stored locally on that device. If you enabled Sync with iCloud (a PrivLedge Pro feature), your current data also lives in your private iCloud account and re-downloads when you reinstall while signed in to the same account. To remove the iCloud copy as well, delete your data within the app first, or remove PrivLedge data from iCloud in your device's iCloud settings.
Because we never hold a copy of your data, there is no deletion request to send us and nothing for us to erase on your behalf — deleting it in the app, or removing the app and its iCloud data, is the whole of it.
Children
PrivLedge is intended for adults managing their own financial records. It is not directed at children, and because it collects nothing, it knowingly gathers no information from anyone, children included.
Changes to This Policy
If this policy changes, the updated version will be posted here with a new effective date. Continuing to use PrivLedge after a change means the revised policy applies to you.
Contact
Questions about this policy or how PrivLedge handles your data? Reach us through the support page.
Company Privacy Policy
This policy describes practices specific to PrivLedge and supplements our company-wide happynikky App Privacy Policy, which applies to all our apps. Where this app-specific policy differs, it governs for PrivLedge.
Contact Us
If you have questions about this privacy policy, please contact us.