Privacy information

Updated 3 September 2026. UteLedger is a testing version with a publicly accessible sign-in page. Anyone with access to an email inbox can create an account; this is not restricted to invited family members. Invoice data requires sign-in and is separated by account. During testing, use fictional customer and bank details.

What the app stores

UteLedger stores your account email, business and bank payment details, customer contact details, invoices, rates, and backup copies. It uses these details to let you manage invoices, recover saved work, and send emails when you request them.

Sign-in and service providers

Supabase verifies your email and manages sign-in sessions. Your browser uses session cookies to keep you signed in. The hosted app uses Sites and Cloudflare database services. Invoice email delivery uses Resend; the recipient receives the invoice details and attachment you send. Sign-in emails use the operator’s configured email service. Service providers may process information outside Australia.

Backups and retention

The app retains up to 30 restore points per account in its database. The hosted app also keeps the latest 30 account-data copies in separate Cloudflare object storage, including business, customer, bank and invoice details. Copies are made during saves; Account & backups shows whether your latest saved data is protected and lets you retry. These copies protect against invoice database loss, but share the hosting provider. Downloaded backup files include private customer and bank details. The local development database is also backed up to the operator’s OneDrive; that local backup does not cover the hosted database.

Access, corrections, deletion and concerns

You can edit your details in the app and download your account data from Account & backups. To request deletion, help accessing your data, or raise a privacy concern, email mnfaizi72@gmail.com. Ownership must be verified before account changes. Deletion requests require review of retained backups and any applicable recordkeeping obligations; deletion is not currently automatic.

Only enter customer information you are authorised to use. Keep downloaded backups private. Never send passwords or sign-in codes to support.