Privacy Policy
Last updated 31 October 2026
Draft pending legal review. HomiLedger is pre-launch and not yet a registered company. This page describes what we do today and may change before launch. Questions: support@homiledger.com.
This policy explains what personal information HomiLedger collects when you visit homiledger.com, join the waitlist, contact us or use the app, and what we do with it.
1. Who we are
HomiLedger is a shared household ledger for families, couples and flatmates, run from Karachi, Pakistan. We have not registered a company yet; until we do, “we” means the HomiLedger team. When we register, this page will name the company and its address.
For any privacy question or request, write to support@homiledger.com.
2. What we collect
When you join the waitlist
- Your email address. It is the only thing we ask you for.
- Which form or button you used, and an optional campaign label from the link you followed.
- A country code, if our network provider sends one. We never store a city or coordinates.
- A one-way hash of your IP address, not the address itself. We use it only to stop abuse, such as one network creating hundreds of sign-ups. It cannot be reversed without a secret key we hold.
- When you signed up, and whether and when you confirmed your email.
- Confirmation links: we store only a hash of each link. Links expire after 48 hours.
- Email delivery records: the type of message, your address, delivery status, the provider’s message id and any error code. Queued email content, which can include your personal confirmation link, is stored encrypted and removed once the email is sent.
When you visit the website
The website sets no cookies, uses no analytics or advertising trackers and loads no third-party scripts. See Cookies. Our hosting and API providers keep standard server logs (IP address, time, page requested, browser type) for security and reliability.
When you contact us
If you email support@homiledger.com we receive your address, your name if it is shown, and what you write. Our support mailbox runs on Zoho Mail.
When you use the HomiLedger app
The app is not publicly released yet. At launch it will handle:
- Account: email, password (kept only as a salted hash by our authentication provider), display name, optional profile picture, and the basic profile Google shares if you choose Sign in with Google.
- Household: the household you create or join, its members and their roles, join codes, invitations and join requests.
- Records you enter: expenses, income, savings goals and contributions, loans between household members and repayments, plus the activity history of those records.
- Files you upload: receipt photos and income proof documents, stored privately and shown to you through short-lived links.
- Reports you request (PDF or CSV), generated on demand and kept for about 24 hours.
- Technical data: IP address, device type and app version in server logs, used for security and fixes.
- Camera and photo library access, only when you choose to attach a receipt or picture.
HomiLedger is a record-keeping tool. We do not connect to your bank accounts and we do not hold or move your money.
What we do not collect today
Precise location, contacts, advertising identifiers, bank credentials or account numbers, and any audio. A voice assistant and AI insights are planned but not live. Before either launches we will update this policy and ask for any consent the law requires.
3. Why we use it
| Purpose | Example | Legal basis (EU/UK) |
|---|---|---|
| Run the waitlist | Confirmation and welcome emails, telling you when your spot opens | Your consent; steps you ask for |
| Decide early-access eligibility | Recording when you confirmed, to apply the “first 100 verified” rule | Legitimate interests (a fair, limited offer) |
| Provide the app | Accounts, households, records, reports | Contract |
| Security and abuse prevention | Hashed-IP limits, logs, bounce and complaint suppression | Legitimate interests |
| Support | Answering your emails | Legitimate interests or contract |
| Legal duties | Accounting, responding to authorities | Legal obligation |
We do not sell your personal information, we do not share it for advertising, and we do not use it to train advertising or third-party AI models.
5. International transfers
We are based in Pakistan and our providers may store data in other countries, such as the United States or the EU, so your information may be processed outside your own country. Where the law requires it we rely on safeguards such as standard contractual clauses. We will list provider regions here once they are finalised.
6. How long we keep it
| Data | Kept for |
|---|---|
| Confirmed waitlist members | Until you ask us to delete it, or until the early-access programme ends |
| Unconfirmed sign-ups | Not yet limited automatically; delete on request. We are setting a fixed period. |
| Hashed IP address (waitlist) | 30 days target, then removed |
| Email delivery records | 90 days target |
| App account and household data | While your account is active; deleted when you delete your account, except as below |
| Generated reports | About 24 hours |
Some of these automatic clean-ups are still being scheduled, so a few periods above are targets we are putting in place before launch. You can always ask us to delete your data sooner.
Shared household records. If you delete your account but the household continues, records you created may remain so the other members’ ledger stays accurate, with your identity removed or reduced where possible.
7. Security
We use HTTPS, hashed passwords and tokens, private file storage with short-lived links, row-level security in the database, rate limiting and abuse protection. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.
8. Your rights
Depending on where you live you may have the right to know what we hold, get a copy, correct it, delete it, restrict or object to some processing, withdraw consent, move your data, and not be treated worse for using these rights. Email support@homiledger.com from the address concerned. We may ask you to confirm who you are, and we aim to reply within 30 days.
- EU and UK: you may also complain to your data protection authority.
- United States: we do not sell personal information or share it for cross-context advertising. You may request access, correction and deletion, and appeal a refusal.
- Pakistan: there is currently no comprehensive data protection law in force. We apply the standards in this policy to everyone.
To delete an app account, see Delete your account.
9. Children
HomiLedger accounts are for adults. We do not knowingly collect personal information from children under 13. See Family & Children.
10. Emails
We send the emails you ask for (confirmation, welcome, your spot opening) and service messages. You can stop non-essential emails at any time by writing to support@homiledger.com.
11. Changes
We will post changes here and update the date. For material changes we will notify you by email or in the app before they take effect.
12. Contact
support@homiledger.com · Karachi, Pakistan