Last updated: July 13, 2026
Account information you provide at registration: username, email address, and optionally your name, date of birth, phone number, address, state, sport, team, filing status, and similar profile details used to personalize tax estimates.
Financial records you enter manually (income and expense transactions, categories, receipts you upload) or that are imported automatically when you choose to link a bank account.
Bank data via Plaid. If you link a financial account, Plaid Inc. provides us read-only transaction data (date, description, amount, category). Your bank login credentials go directly to Plaid — we never see or store them. Plaid's handling of your data is governed by Plaid's End User Privacy Policy.
Payment data via Stripe. Subscription payments are processed by Stripe. We store only your Stripe customer and subscription identifiers — never your card number.
Technical basics such as IP address (used for login rate limiting) and standard server logs.
We use your data solely to operate the Service: displaying your dashboard, computing tax estimates, generating reports you request, syncing linked accounts, processing subscriptions, sending account emails (password resets, verification), and keeping the Service secure. We do not sell your personal or financial data, and we do not use it for third-party advertising.
Your data is shared only: (a) with service providers necessary to run AthLedger — our hosting provider, Plaid, Stripe, and our email delivery provider — each bound to use it only to provide their service; (b) with people you choose to share with, such as an accountant you send a report link to; and (c) if required by law. Shared report links are unguessable tokens that expire and can be replaced at any time.
Data is encrypted in transit (TLS) and at rest by our database provider. Passwords are stored as salted hashes, never in plain text. Access to production systems is restricted. No system is perfectly secure — please use a strong, unique password and enable two-factor authentication in your profile.
We keep your data for as long as your account exists. You can export your transactions (CSV/PDF) at any time, and you can permanently delete your account from your profile — this immediately removes your profile, transactions, receipts, and linked-account records from our database. Backup copies age out on a rolling basis.
Depending on where you live (e.g., California, EU/UK), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. The in-app export and delete tools cover most of these; for anything else, email support@ath-ledger.com and we'll respond within 30 days.
AthLedger is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has created an account, contact us and we will delete it.
We may update this policy as the Service evolves. Material changes will be announced in the app or by email, with the "last updated" date above revised.
Privacy questions or requests: support@ath-ledger.com.