Privacy Policy
Last updated: 14 July 2026.
SimplePropertyLedger is operated by SimplePropertyLedger AU (the "seller", "we"), which is the data controller for personal data collected through the app and website.
What we collect and why
- Account data — email address, Google account identifier (if you use Google sign-in), and password hash (if you set one). We use this to authenticate you and grant access to your paid licence. Legal basis: performance of contract.
- Licence records — a link between your account and your Paddle purchase, plus refund status. Legal basis: performance of contract.
- Support correspondence — messages you send us. Legal basis: legitimate interests (helping you).
- Basic technical logs — IP address, user agent, and error diagnostics on the login and checkout paths, retained short-term. Legal basis: legitimate interests (security, abuse prevention, reliability).
What we never store
Your bookkeeping data — properties, transactions, mortgage details, receipts, reports — is stored only in your browser (IndexedDB). It never touches our servers. Clearing site data removes it, so please keep backups.
Payments
Payments are processed by our reseller Paddle.com, which acts as Merchant of Record. Paddle collects and processes payment information under its own privacy notice. We receive from Paddle only what we need to fulfil your licence (purchase email, transaction id, refund status).
Google Drive backup
If you enable Google Drive backup inside the app, encrypted backup files are written to your own Google Drive using the narrow drive.file scope, so we cannot see any other files. We never receive copies of your backups.
Who we share data with
- Paddle — Merchant of Record for payments, subscription management, and tax compliance.
- Google — for Google sign-in (if you choose it) and for the Drive backup you initiate.
- Infrastructure providers — Supabase (auth, database) and Cloudflare (hosting) as subprocessors.
- Authorities — where required by law.
Data retention
Account and licence records are kept for as long as your licence is active plus a reasonable period afterward for accounting, tax, and dispute-resolution purposes. Support correspondence is kept for up to 3 years. Technical logs are kept for up to 90 days.
Security
We use appropriate technical and organisational measures, including transport encryption (HTTPS), encryption of stored backups (AES-GCM), and access controls on the account database.
Your rights
You have the right to access, correct, delete, restrict, and port your personal data, and to object to processing. To exercise these rights, contact digitallifeadmin@gmail.com. Users in the UK/EEA also have the right to lodge a complaint with their local supervisory authority.
Cookies
We use only essential cookies required for sign-in and session management. We do not use advertising or third-party analytics cookies.