Privacy policy
Classroom Ledger is operated by an independent developer based in Virginia. Effective date: October 22, 2026.
This policy covers the native Classroom Ledger app, this website, and email support.
Purchases, refunds, and receipts
Classroom Ledger stores purchase and vendor-refund details you enter, including vendor, date, amount, category, school year, reimbursement information, notes, original-purchase references and receipt files. The native consumer edition keeps these records in local app storage. Receipt photos and selected files are attachments; it does not perform OCR or automatic receipt entry.
Private iCloud synchronization
The consumer edition attempts private iCloud synchronization when it opens and iCloud is available. It sends purchases, vendor refunds, receipt originals and synchronization records to your private iCloud storage. Normal use does not require a separate Classroom Ledger account. Purchases can be added and edited offline; pending changes wait for an available connection and the same iCloud ledger.
Changing the iCloud account or losing the saved cloud ledger pauses synchronization to protect the local copy. The app does not silently move records to a different account. Apple provides iCloud under its own terms and privacy policy; private CloudKit storage counts toward your iCloud quota.
Deletion and recovery copies
Deleting a purchase or refund creates a retained deletion record to prevent another device from restoring it. Earlier receipt assets and conflict recovery copies may remain locally or in iCloud. Reviewed cleanup removes only the particular local recovery copies it identifies; it does not erase cloud receipt records, deletion history, or copies you exported. The app does not offer an action to erase all iCloud data or delete your Apple Account.
Camera, photos, and files
Camera access is used when you choose to photograph a receipt. System photo and file pickers let you select an attachment. The app does not scan your photo library. Selected original bytes are retained as attachments. You can change camera permission in your device's Settings.
Exports and sharing
PDF/CSV exports and portable backups are files you choose to create and share. Those files can contain purchase and refund details, original-purchase references and receipt originals. Copies saved outside the app are managed separately by you and the destination you choose. Deleting a purchase inside Classroom Ledger does not remove those external copies.
Advertising and analytics
This native edition does not include advertising or product analytics services. Apple’s iCloud and TestFlight services have their own service and diagnostic behavior; this policy does not promise removal of their logs or backups.
Email support
Support contact: support@classroomledger.com.
If you contact support, your email provider and our email provider process your message, email address, and any files you choose to attach. The app does not automatically send your ledger to support. Currently, only the business owner handles support messages and customer attachments. Send the minimum information needed and remove unrelated personal information from any example you provide.
Support retention: We remove customer attachments, downloaded support copies, and emails containing those attachments from active support storage within 30 days after the support case closes. We retain ordinary support correspondence and minimal case summaries for up to 12 months after closure. We may retain only the information needed for longer to meet a legal obligation, resolve a dispute, or investigate a security incident, and remove it when that need ends. Deleted items may remain temporarily in the email provider's recovery or backup systems under its retention practices. Support email is separate from the records stored in your app and iCloud. These support deadlines do not automatically delete your expense records. Deleting an app record does not delete a previously emailed attachment.
This website
The website is hosted through OpenAI Sites, which uses Cloudflare infrastructure. Serving and protecting the site involves processing web requests, which can include your IP address, browser information, the requested page, and request time. Hosting providers may keep operational and security logs under their own terms and retention practices. See OpenAI’s privacy policy and Cloudflare’s privacy policy.
Hosting infrastructure can set security cookies to protect against automated abuse. We do not add advertising or analytics scripts, contact forms, or account forms to these pages. The support-retention periods above apply to our active support storage; they do not promise deletion of hosting-provider logs or security cookies.
Policy changes
Policy changes: We will post revisions on this page, update the effective date, and describe material changes here. Review the current policy when updating the app.