Privacy Policy

Effective 3 July 2026. This policy complies with the EU GDPR.

This policy explains how Personal Ledger (acc.keyscalelab.com) handles your personal data. The data controller is FINTECHME LLC, [REGISTERED ADDRESS], Republic of Cyprus. Contact: privacy@acc.keyscalelab.com.

1. Data we process

  • Account data — email, name, and (unless you use Google sign-in) a hashed password.
  • Financial records — the accounts, transactions, transfers, debts and notes you enter, by hand or by voice.
  • Voice input — if you dictate, the audio is transcribed to text and parsed into records. Audio is processed transiently and not stored long-term.
  • Technical data — a session cookie and minimal server logs (IP, timestamp) for security.

2. Why & legal basis

  • To provide the Service (Art. 6(1)(b) — contract): storing and displaying your records.
  • Security & abuse prevention (Art. 6(1)(f) — legitimate interests): rate-limiting, logs.
  • Billing (Art. 6(1)(b) and (c)): processing paid subscriptions and tax records.

3. Who processes it (sub-processors)

  • Hosting: Hetzner Online GmbH (Germany, EU) — servers and database.
  • AI transcription & parsing: self-hosted (own GPU), no third-party AI provider — your voice/text is not sent to any third-party AI provider.
  • Payments: Stripe Payments Europe (only for paid plans; card data is handled by Stripe, never stored by us).

We never sell your data or use it for advertising.

4. Retention

We keep your data while your account is active. When you delete your account, all financial records and personal data are permanently erased immediately (billing/tax records may be retained where law requires).

5. Your rights (GDPR)

You have the right to access, rectify, erase, restrict, object to processing, and data portability. In the app:

  • Export — download all your data as JSON from Privacy settings.
  • Erasure — permanently delete your account and data from the same page.

You may also lodge a complaint with the Cyprus Data Protection Commissioner or your local supervisory authority.

6. International transfers

Data is hosted within the EU/EEA. Where a sub-processor transfers data outside the EEA, appropriate safeguards (e.g. Standard Contractual Clauses) apply.

7. Contact

Privacy requests: privacy@acc.keyscalelab.com.