Privacy Policy

This Privacy Policy explains how Lago, also distributed as Mobile Ledger ("Lago," "we," "our," or "the app"), handles information when you use Lago on iOS, iPadOS, macOS, or Android. Lago is provided by wArtLe. It applies to the app, our support services, and the optional cloud features described below.

1. Information Lago handles

The information handled depends on the features you use and the information you choose to enter.

Financial and app content

• Transactions, including amount, date, type, merchant, notes, categories, and transfers.
• Accounts and ledgers, including names, types, balances, institution details, limited card details such as the last four digits, and optional notes.
• Budgets, recurring transactions, savings goals and allocations, currencies, and categories.
• Receipt line items, receipt or transaction images, and custom icons you choose to add.
• Achievements, notifications, profile information, activity days, and streak progress.

Account information

If you enable All Devices Sync, authentication may provide us with your name, email address, sign-in provider, and a unique account identifier. Sign in is handled through Sign in with Apple or Google Sign-In, depending on your platform and choice. We do not receive your Apple or Google password.

Technical and security information

Our cloud providers may process technical information needed to operate and protect the service, such as IP address, device and app information, authentication tokens, App Check or device-attestation results, request logs, and diagnostic information. App stores also process purchase and subscription information under their own privacy policies.

Permissions and device features

With your permission, Lago may use the camera or photo library for receipts, profile images, icons, or account artwork; the microphone and speech recognition for voice input; notifications for reminders; and device biometrics to lock the app. Biometric templates remain under the control of the operating system and are not received by Lago.

2. Your storage and sync choices

Turning sync off stops future synchronization on that device, but it does not automatically delete information already stored in a cloud service. See “Your choices and deletion” below.

3. Smart Input and AI features

On supported Apple devices, Apple Intelligence processing may be performed on-device or through Apple's Private Cloud Compute, depending on availability and your settings. Lago may also offer Google Gemini as an optional Smart Input provider. When a network-based provider is used, receipt images and/or extracted or entered text are sent to that provider for processing. Do not submit content you do not want processed by the selected provider. Availability and provider choices vary by platform and device.

4. How we use information

We use information only as reasonably necessary to:

• provide budgeting, transaction, backup, synchronization, profile, and Smart Input features;
• authenticate users and maintain sync accounts;
• process purchases and determine subscription access;
• protect the service, prevent abuse, troubleshoot failures, and provide support;
• comply with legal obligations and enforce applicable terms.

5. Service providers and disclosure

We do not sell your personal or financial information. We do not use it to track you across other companies' apps or websites for advertising. Information may be processed by service providers only to deliver features you request or operate the app, including:

• Google: Firebase Authentication, Cloud Firestore, App Check, Google Sign-In, Google Drive, and optional Gemini processing.
• Apple: Sign in with Apple, iCloud, CloudKit, Apple Intelligence and Private Cloud Compute, device services, and App Store purchases.
• Google Play: app distribution and purchases on Android.

We may also disclose information if required by law, to protect users or the service, or as part of a business transfer where permitted by law. These providers may process data in countries other than your own under their applicable terms and privacy safeguards.

6. Retention

• Local data: remains until you delete it, clear app data, or uninstall the app, subject to operating-system backups.
• All Devices Sync: remains while your sync account is active or until you delete the account in the app or complete a verified deletion request.
• iCloud and Google Drive: backups remain according to your settings and the provider's retention controls. You may need to remove those backups from your Apple or Google account separately.
• Support and security records: may be retained as reasonably necessary to answer a request, prevent abuse, resolve disputes, or meet legal obligations.

7. Your choices and deletion

You can choose local-only use, turn cloud synchronization on or off, remove individual records, and manage permissions in your device settings. Signing out or turning sync off does not by itself delete your account or previously synchronized cloud data.

To permanently delete your Lago sync account and its associated Firebase data, use the deletion option for your platform: on Android, go to Settings → Manage Backups → Cloud Sync → Delete Lago account; on supported Apple versions, go to Settings → Manage Backups → Real-Time Sync → Delete Lago Account. You will be asked to verify the Google, Apple, or linked sign-in before deletion. If the option is unavailable or you cannot access the app, visit our Account and Data Deletion page for a verified request option.

Deleting a Lago sync account does not remove data already stored locally on your devices, cancel an App Store or Google Play subscription, or delete backups in your personal iCloud or Google Drive account. Manage those items separately.

8. Security

We use reasonable administrative and technical safeguards, including encrypted network connections, authenticated access to synchronized data, Firebase security controls, and supported device security features. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

9. Children's privacy

Lago is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

10. Changes to this policy

We may update this policy as Lago changes. We will revise the date above and, when appropriate, provide additional notice in the app or on this site.

This policy applies to Lago (Mobile Ledger) on supported Apple and Android platforms. Provider services are also governed by their respective privacy policies.