Who we are
Rabit Ledger (“we”, “us”) is a personal finance tracker operated by Sayef Iftekhar Mahmud Tasin, a sole proprietor trading as Rabit Ledger. We are the data controller for the personal data described here. For any privacy question, contact support@rabitledger.site.
What we collect
| What | Why |
|---|---|
| Email address and password | To create your account and sign you in. Passwords are stored hashed by our authentication provider; we can't read them. |
| Name and the contact number you give at sign-up | To address you and to help when you contact support. |
| Financial entries you type or import: accounts, balances, transactions, categories, budgets, goals, loans and similar | To provide the Service. This is the core of the app and it's yours. |
| Your preferences: base currency, number and date format, country | To show amounts and dates the way you want. The country (worked out from your connection when you first sign in) decides which plans are offered in your region. |
| Basic usage data: device and browser type, pages visited, error reports | To keep the Service working, secure and to fix problems. |
| Support messages | To answer you. |
| Subscription status (from Paddle) | To know whether your account has Pro. Card and payment details are handled by Paddle and never reach us. |
How we use it, and our legal bases
- To provide the Service you signed up for (contract): your account, your entries, your preferences and your subscription.
- To keep it secure and working (legitimate interests): usage data, error reports and fraud prevention.
- To email you about your account (contract): sign-in, receipts from Paddle, plan changes and replies to support. Optional reminder emails can be turned off in Settings.
- To meet legal obligations (legal obligation): for example, tax records kept by Paddle.
We don't use your financial entries for advertising, and we don't sell or rent your data.
Where it's stored, and who processes it
- Supabase hosts the database and sign-in. Your data is encrypted in transit and at rest.
- Paddle.com is our Merchant of Record for paid plans outside Bangladesh. Paddle collects your payment and billing details under its own privacy notice.
- Cloudflare serves the website.
- Email is sent through our email provider to deliver account emails.
- To work out your region and to fetch public exchange rates, your browser contacts api.country.is and open.er-api.com. They see your IP address, as any website does; none of your financial data is sent.
These providers may process data outside your country. Where the law requires it, transfers are covered by appropriate safeguards such as standard contractual clauses.
Cookies and local storage
We use only what the app needs: a sign-in session and a few settings stored in your browser (for example, your region and cached exchange rates). No advertising or cross-site tracking cookies. See the Cookie Policy.
Your rights
You can, at any time:
- Access and export your data: Settings → Your data → Export, which downloads everything as CSV and JSON.
- Correct it: edit any entry or your profile in the app.
- Delete your account and all its data: Settings → Your data → Delete account. Any active subscription is cancelled first.
- Object to or restrict some processing, or ask questions about it: email support@rabitledger.site.
If you're in the EU, UK or a similar jurisdiction, you also have the right to complain to your local data protection authority. We'd appreciate the chance to fix things first.
How long we keep it
- Your account data: for as long as you keep your account.
- After you delete your account: removed from the live database straight away, and from backups within 30 days.
- Support messages: up to 2 years after the conversation ends.
- Billing records: kept by Paddle for as long as tax law requires.
Children
The Service isn't meant for children under 13, and we don't knowingly collect their data.
Changes
We'll update this page when our practices change, and change the date at the top. For significant changes we'll tell you in the app or by email.
Contact
Privacy questions or requests: support@rabitledger.site. We reply within 2 business days.