Three things to know first
Your books stay on your device and work offline. No account is needed, and the app has no ads or commercial tracking.
When you enable Apple sync, iCloud Drive stores encrypted files. Apple may see metadata such as file size, timestamps, and sync frequency, but cannot read your books.
Your master password protects encrypted backups and device sync. Keep it safe, and optionally save a recovery code. If both are lost and no unlocked device is available, we cannot recover your books.
Data handling and boundaries
Simi Ledger does not host ledgers online or collect personal financial entries. Here is how each boundary works:
Website data
ledger.simi.studio only presents product info, downloads, the privacy policy, terms, and support. The website is not an online bookkeeping system and never receives or processes your ledger details. It is hosted on Cloudflare and uses Cloudflare Web Analytics to count visits and measure how fast pages load; Cloudflare states that it collects no personal data about visitors and does not track individuals across websites, and we only see aggregate numbers. The website itself sets no cookies, runs no ad scripts, and serves its own fonts. Like any website, Cloudflare may briefly log IP addresses, browser type and access times for security and operations.
In-app ledger data
Simi Ledger is built offline-first and ad-free. Books, accounts, transactions, entries, and reports stay on your device. There are no ad networks, analytics or tracking SDKs, and release builds collect no crash reports or usage data. Encrypted backup and Apple sync never upload your books to a server of ours for storage or processing — we have no such server.
Encrypted backup and Apple sync
When enabling Apple sync or creating a backup, Simi guides you to set a master password, with an optional recovery code. Data syncs inside an app-dedicated private container and only transfers end-to-end authenticated, encrypted files; Apple may see metadata such as file size, timestamps, and sync frequency, but neither Apple nor Simi can read your ledger contents and attachments. Encryption keys are derived locally from your master password using Argon2id.
Exchange-rate updates
When you update rates online on the exchange-rates page, the app asks the third-party rate service Frankfurter (api.frankfurter.app) for the latest rates. The request carries currency codes only — no books, amounts or identity — though, as with any network request, the service sees your IP address. If you keep rates by hand and never update online, no request is made.
Device permissions
Photos: read only for the one image you pick as a book cover. Face ID: verifies it is you before a full card number is copied; the system does this and we never receive biometric data. Budget, bill and sync reminders only appear in the app's own notifications list; the app sends no push notifications. You can turn these permissions off in Settings at any time; none of this data leaves your device.
Purchases and subscriptions
Pro is bought through the App Store. Apple handles payment, renewal, refunds and cancellation, and we never see your payment details. The app reads your subscription status from StoreKit on the device itself; it does not send receipts or purchase records to us, and it needs no Simi account. Subscription status plays no part in encrypting your books, and a lapsed subscription never stops you viewing, exporting or decrypting your own data.
Retention and deletion
Your books stay on your device until you delete them: delete a book you added in the app, or delete the app to remove all of its data from the device. If you used sync, the encrypted sync files live in your iCloud Drive and can be removed in Settings › Apple Account › iCloud › Manage Storage; backups you export are yours to keep or delete. Support emails are kept for up to 12 months after the issue is resolved, and we delete them sooner on request. Because we never hold your books, we cannot delete or recover data on your devices or in your iCloud for you.
Changes to this policy
If this policy changes in a meaningful way, we will update the "Last updated" date at the top and mention it in the app's release notes or on the website. Changes do not apply retroactively to earlier processing.
Contact us
For privacy requests, data deletion, download questions, or usage support, email ledger-support@simi.studio. Support requests only include what you choose to send us.