Privacy Policy
The short version
- We collect what Space Ledger needs to split costs: your account details and the expenses you and your flatmates record.
- We don't sell your data and we don't use your expenses for advertising.
- Space Ledger shows ads through Google AdMob. Personalised ads only run if you allow them.
- You can delete your account and data at any time from Profile → Delete account.
This policy explains how the Space Ledger mobile app ("Space Ledger", "we", "us") handles personal data. Space Ledger is developed and operated by Ata Kocabaş, who is the data controller for the data described here. Questions or requests: spaceledger.help@outlook.com.
1. What we collect
Account information
- Email address and, when you sign in with Google or Apple, the name and profile photo those services share with us. If you use Apple's "Hide My Email", we only see the relay address.
- Your username (for example Alex#0423), chosen by you or generated from your name.
- A profile photo if you upload one.
- Payment details if you choose to add them (free text such as an IBAN or a Papara handle), so flatmates know where to pay you back.
- Which sign-in methods are linked to your account. Passwords are handled by Firebase Authentication; we never see or store them.
Content you create
- Spaces (name, type, currency) and their members, including email addresses you invite.
- Expenses: description, amount, date, category, who paid and how it was split. Also settlements, recurring expenses, custom categories and settle-up reminders.
Device and technical data
- A push notification token and your notification language, so we can send you notifications.
- Server logs: each request to our API records the time, the endpoint, the result and, through our hosting provider, your IP address. We use these to keep the service running and secure.
Advertising data
Space Ledger shows a full-screen ad when you open the app, served by Google AdMob. AdMob may collect your device's advertising identifier (IDFA on iOS, only if you allow tracking; Advertising ID on Android), your IP address, and device and app-usage information to serve ads, measure them and prevent fraud. On iOS we ask your permission before any tracking. In the EEA, the UK and Switzerland we ask for consent first and you can change your choice at any time under Profile → Ad privacy settings. See how Google uses data from apps that use its services.
What we don't collect
We don't use analytics or tracking SDKs other than AdMob, and we don't collect your location, contacts or bank credentials. Space Ledger never moves money; settlements are records you enter yourself. The camera and photo library are only used when you choose a profile photo.
2. How we use it
- To provide Space Ledger: create your account, show your spaces, calculate balances, and let flatmates find and invite you by email or username. This is necessary to perform our agreement with you.
- To send notifications about new expenses, settlements, reminders and monthly summaries. You can turn these off in your device settings.
- To show ads that fund the app, based on your consent where the law requires it.
- To keep Space Ledger secure and working: preventing abuse and fixing problems, based on our legitimate interest in running a reliable service.
3. Who can see your data
Your flatmates. Members of a space see its expenses, settlements and balances, and the username and photo of every member. Your payment details are visible to other Space Ledger users so they can pay you back.
Service providers. We use these providers to run Space Ledger, and they process data only on our behalf:
| Provider | Purpose |
|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging) | Sign-in, database, profile photos, push notifications |
| Google Cloud Run (Europe) | Hosting our API |
| Google AdMob | Advertising (see above) |
| Google Sign-In, Sign in with Apple | Optional sign-in methods |
Some of these providers may process data outside your country, including in the United States. Where that happens, they rely on safeguards such as the EU Standard Contractual Clauses. We don't sell your personal data. We disclose it to authorities only when the law requires us to.
4. How long we keep it
We keep your data for as long as your account exists. When you delete your account (Profile → Delete account), we delete your profile, username, photo, payment details, notifications, push tokens and sign-in account. We also remove you from every space and delete spaces where you were the only member. If you owned a shared space, it passes to another member.
Expenses and settlements you were part of stay in shared spaces, because they are also your flatmates' records. They're kept without your name or photo and show as "Deleted user". Copies in our providers' backups expire on their normal schedule. Server logs are kept for a limited period.
5. Your rights
Depending on where you live (including under the EU/UK GDPR and Türkiye's KVKK), you may have the right to:
- access a copy of your data, or correct it;
- delete your data (you can do this yourself in the app);
- object to or restrict certain processing;
- receive your data in a portable format;
- withdraw consent, for example to personalised ads, at any time;
- complain to your local data protection authority.
To exercise any of these, email spaceledger.help@outlook.com. We'll respond within 30 days.
6. Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Access to your spaces is checked on our servers for every request. No system is perfectly secure, but we work to protect your data and will notify you as the law requires if a breach affects you.
7. Children
Space Ledger is not intended for children under 13 (or under 16 where local law sets a higher age). We don't knowingly collect their data. If you believe a child has given us data, contact us and we'll delete it.
8. Changes
If we change this policy, we'll update the effective date above. For significant changes, we'll also tell you in the app.