The marketing website
This website does not provide accounts, forms, advertising analytics, tracking cookies or behavioural profiling. Our hosting provider may process ordinary request information such as IP address, browser details and timestamps to deliver and protect the site.
The mobile application
Holdings, preferences and the latest valid spot-price snapshot are stored locally using SQLite-backed storage. Troy Ledger does not currently enable account identity, cloud portfolio upload, advertising analytics, monitoring or notifications.
Optional product analytics
The mobile app uses PostHog to understand general app usage. This can include standard app lifecycle events, generic screen names, an anonymous analytics identifier and technical details such as app version, operating system and device type. Session replay, touch autocapture and automatic error capture are disabled.
Troy Ledger does not include holding identifiers, portfolio values, notes, storage locations, photographs or other holding content in analytics events. Product analytics can be disabled at any time from Settings & privacy. PostHog and relevant network providers process the analytics request metadata needed to deliver this service.
Spot-price requests
The app may contact a configured spot-price service to retrieve current prices. Portfolio records, notes, storage locations and photographs are not included in those price requests. The price service and network providers may still receive ordinary connection metadata.
Purchases and subscriptions
Troy Ledger uses RevenueCat to provide monthly, yearly and lifetime TroyLedger Pro access. RevenueCat and the App Store or Google Play may process an anonymous purchase identifier, product and transaction information, subscription status, entitlement status and ordinary technical request information needed to provide and restore purchases. Troy Ledger does not send holdings, portfolio values, notes, storage locations or photographs with purchase requests.
Device security
MVP portfolio storage is not application-level encrypted. Device passcode protection and operating-system storage encryption are the current security boundary. Anyone with access to an unlocked device may be able to access its local portfolio.
Deleting data
Individual holdings can be deleted from their detail screen. The Settings & privacy screen also provides a confirmed action to delete all holdings from that device. Removing the application may remove its local data according to the platform's behaviour.
Contact
Questions about this privacy notice can be sent to hczdev1@gmail.com.
Draft for owner and legal review before production publication.