TripLedger Privacy Policy
Effective 24 October 2026
TripLedger ("the app", "we", "us") helps you track travel spending, budgets and shared costs. This policy explains what information the app handles, where it goes, and the choices you have. TripLedger is made by an independent developer, Soubhagya Mohapatra.
The short version
- You can use TripLedger without an account. Your trips then stay on your device.
- If you sign in, your trips are backed up to our cloud database so you can restore them on another device.
- If you use voice entry, the text of what you said is sent to AI services to turn it into an expense. We ask for your permission first.
- No ads, no tracking across apps, no analytics SDKs, and we never sell your data.
- You can delete your account and all of its cloud data from inside the app.
Information the app handles
1. Trip data you enter
Trip names, destinations, dates, budgets, number of travellers, member names for bill splitting, expense titles, amounts and categories, and cover photos you choose.
- Without an account: stored only on your device.
- With an account: also stored in our cloud database (Supabase) so it can be backed up and restored. Cover photos are stored in private cloud storage that only your account can access.
2. Account information (optional)
If you sign in, we receive your email address and a user ID. If you use Sign in with Apple or Google, we receive the identifier and email address that Apple or Google shares with us. (With Apple you can choose to hide your email.) We use this only to sign you in and to keep your backup linked to you. Passwords for email accounts are handled by Supabase Auth; we never see them in plain text.
3. Voice entry (optional)
When you use voice entry:
- Your iPhone converts your speech to text using Apple's speech recognition. The audio is handled by Apple under Apple's privacy policy. TripLedger does not record or keep your audio.
- The resulting text, together with your trip names, destinations, dates, category names and currency, is sent to our server so it can work out the amount, the trip and the category.
- Our server uses OpenAI and Anthropic to read the text. They process it to return a result and, under their API terms, do not use it to train their models.
- We do not store voice transcripts on our server. Our hosting provider (Vercel) may keep short-lived technical logs for security and reliability.
- The app asks for your permission before the first voice entry. If you don't agree, you can still add expenses by typing.
4. Purchases
TripLedger Pro is sold through Apple's App Store. Apple processes the payment; we never see your card details. We use RevenueCat to check whether you have an active Pro purchase. RevenueCat receives an app user ID (your account's user ID if you're signed in, otherwise a random ID) and your App Store purchase history for TripLedger.
5. Photos and camera
If you add a cover photo, the app asks for access to your photo library or camera. Only the photo you choose is used. It's stored on your device and, if you're signed in, in your private cloud backup.
Service providers
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Sign-in and cloud backup | Account email and user ID, your trip data and cover photos (signed-in users only) |
| Apple | Sign in with Apple, speech recognition, App Store purchases | As described in Apple's privacy policy |
| Sign in with Google | Your Google sign-in, if you choose it | |
| Vercel | Hosts our voice-entry server | Voice-entry text and trip/category names, in transit |
| OpenAI, Anthropic | Read voice entries | Voice-entry text and trip/category names |
| RevenueCat | Pro purchase status | App user ID and App Store purchase history |
We don't use advertising, analytics or crash-reporting SDKs, we don't track you across other apps or websites, and we don't sell or rent your information.
How long we keep data
- Data on your device stays until you delete it or uninstall the app.
- Cloud backup data stays until you delete it in the app or delete your account.
- Voice-entry text isn't stored by us after the request is processed.
Your choices and rights
- Use it offline: skip sign-in and your trips never leave your device (except voice-entry text, if you use and agree to voice entry).
- Delete data: delete trips, expenses and photos in the app at any time.
- Delete your account: go to Settings → Delete account. This permanently deletes your account, your cloud backup and your stored cover photos.
- Access or questions: email us and we'll help you access, correct or delete your information.
Security
Data is sent over encrypted connections (HTTPS). Cloud data is protected so each account can only read its own trips and photos.
Children
TripLedger isn't directed at children under 13, and we don't knowingly collect information from them.
Changes to this policy
If we change this policy, we'll update the date at the top and, for significant changes, let you know in the app.
Contact
Questions or requests: mohapatra.soubhagya@gmail.com