LedgerAI is a product-level AI-compliance application by Quantyx. We built LedgerAI to be private by design: your compliance data is yours, it is never sold, and we use no third-party advertising or analytics trackers. This policy explains exactly what data the app handles and why.
The data controller is Quantyx ("we", "us"). For any privacy request, contact zimasilevuyo@gmail.com.
LedgerAI is local-first. The compliance information you enter — your organization & business profile, AI products, regulations, obligations, controls, evidence metadata, deadlines and activity — is stored on your device.
If you sign in (optional cloud sync, powered by Google Firebase), that same workspace is also stored privately under your account so it can sync across your devices. Each account can only read and write its own data.
If you create an account we process your email address and an authentication identifier. Sign in with Apple is supported; if you use it and choose to hide your email, we only ever receive Apple's private relay address. Authentication and abuse-prevention are provided by Firebase Authentication and Firebase App Check.
If you send a message from the in-app contact screen, the message and the contact details you provide are transmitted to our website endpoint solely to respond to you.
We use Google Firebase (Authentication, Realtime Database, App Check) to provide secure sign-in and optional cloud sync. Google processes this data on our behalf under its data-processing terms. We use no advertising SDKs and no analytics/tracking SDKs.
We process account data to provide the service (contract) and to secure it (legitimate interest). We keep your data while your account exists. You can export or permanently delete your workspace at any time from Settings → Your data in the app; deleting it removes it from the device and from cloud sync.
You have the right to access, correct, export, restrict, and erase your personal data, and to lodge a complaint with your supervisory authority (e.g. an EU DPA, or the Information Regulator in South Africa). The app provides self-service export (JSON) and full deletion; for anything else contact us at the address above and we will respond within 30 days.
LedgerAI is a professional tool not directed to children and is not intended for anyone under 16.
Data in transit is encrypted (TLS). Cloud access is restricted per account and protected by Firebase App Check. The app offers an optional biometric lock and hides its contents while backgrounded.
We will update this page and the "Last updated" date if this policy changes materially.