Privacy-first by design
Little Ledger is designed to keep your information close, private and under your control.
By default, the information you add to Little Ledger is stored on your device, inside the app’s private sandboxed storage. If you choose iCloud Ledger Sync or accept an iCloud share, relevant records and files are also stored and synchronised through Apple’s iCloud and CloudKit services. We do not operate a separate Little Ledger cloud backend, and we do not use your family data to build advertising profiles or data products.
This local-first approach delivers practical privacy benefits:
- Your sensitive records are not routinely transmitted to a company server.
- Your family’s information is not dependent on a permanent cloud account.
- There is less exposure to large-scale server-side breaches.
- You keep direct control over what is stored, exported or shared.
- Private family information remains fast to access when you need it most.
What Little Ledger may store
Depending on how you use the app, Little Ledger may store information such as:
- Child and family profile details.
- Dates of birth or due dates.
- Health and care information, including allergies, medical conditions, blood type, clinician details and emergency contacts.
- Identification and record details, such as NHS number, passport number and nationality.
- Notes and record summaries.
- Documents you scan, import or save, including PDFs, photos and related metadata.
- Searchable text extracted from documents and images.
- Reminders, reminder details and due dates.
- Medicine records, schedules, stock levels and logs.
- Growth and measurement records.
- App settings and privacy preferences.
You choose what information to add. You can also edit or delete records inside the app.
Stored on your device
Little Ledger stores structured records locally on your device. Imported files, scanned documents, saved images and related materials are copied into the app’s private storage area within your device. When iCloud Ledger Sync is active, the app also keeps an iCloud-backed copy so approved devices and people can receive changes.
Storing family records on-device limits unnecessary data movement and reduces reliance on external systems for highly personal information.
Security features
Little Ledger includes security-focused features designed to help protect sensitive records:
- Face ID, Touch ID or device passcode protection for app access.
- Sandboxed on-device storage within the iOS app environment.
- Permission-based access to sensitive device features.
- User-controlled exports and optional iCloud synchronisation that you choose to start.
- Reduced exposure created by avoiding unnecessary server-side storage.
No digital product can promise absolute security, but Little Ledger is intentionally designed to minimise unnecessary collection, transmission and exposure of personal data.
On-device processing
Where Little Ledger processes your content, it is designed to do so on-device where possible.
When you scan or import documents, the app may extract text to make those records easier to search later. This processing supports convenience without requiring routine upload of your documents to a remote Little Ledger server.
On supported devices, Little Ledger may also use Apple Intelligence or other on-device language models to generate document summaries and follow-up suggestions. Little Ledger does not send document text to its own servers for this feature.
Optional integrations and permissions
Little Ledger only uses certain device features or Apple services if you choose to enable them. Optional features may include:
- Camera access for scanning documents or adding photos.
- Photo Library access for importing images.
- Files access for importing documents.
- Local notifications for reminders.
- Apple Reminders integration.
- Apple Calendar integration.
- iCloud ledger synchronisation and partner sharing.
If you enable Apple Reminders or Apple Calendar integration, relevant reminder information may be copied to those Apple services so the feature can work. If you do not enable those integrations, that information remains inside Little Ledger only. Permissions are optional and can be changed in your settings.
Optional iCloud synchronisation and sharing
Little Ledger does not place your ledger in iCloud unless you choose an iCloud sharing action or accept an Apple-managed share. When you start sharing, the app prepares an iCloud-backed copy of the records you chose to share.
Once iCloud synchronisation is active, Little Ledger may upload and download changes automatically. These checks can happen when the app opens, returns to the foreground or moves to the background. Synced content may include family and child records, notes, reminders, medicine information, measurements, documents, images and related metadata in the ledger or child record you chose to share.
You can share the whole ledger or an individual child record with people you select through Apple’s sharing controls. Apple stores and processes this data through iCloud and CloudKit under your Apple ID and Apple’s terms. Little Ledger does not send the synced content to a separate company-operated server.
You can manage participants or stop an Apple share from the app. A person who has already received or exported information may still control copies outside your ledger, so only share with people you trust.
Subscriptions, Apple billing and RevenueCat
Little Ledger offers subscriptions purchased and managed through Apple using your Apple ID. Little Ledger does not receive your full payment card details. Apple may process subscription, billing, renewal and refund information under Apple’s own privacy terms.
Little Ledger uses RevenueCat to validate purchases, restore subscriptions, provide Premium access, prevent purchase fraud and understand subscription performance. Apple and the app may send RevenueCat purchase information such as the subscription product, purchase and renewal dates, and cancellation or refund status. RevenueCat associates this information with a random, anonymous app user identifier because Little Ledger does not have user accounts.
Little Ledger does not send RevenueCat your name, email address, Apple ID, payment card details or any child, health, document, note, medicine, milestone or family record stored in the app. We use RevenueCat data for app functionality and subscription analytics, not advertising or cross-app tracking. RevenueCat processes this information on our behalf under its privacy policy.
For billing questions, contact billing@littleledger.net.
Exports and user control
Little Ledger allows you to export your records when you want a backup or portable copy. This gives you meaningful control over your own information rather than locking your records into a remote system.
Once you export data from the app or share it with another service, platform or person, the privacy and security of that exported copy will depend on how it is handled after export.
If you choose to export a backup or send a partner-transfer file by AirDrop or the share sheet, that copy leaves the app sandbox and its privacy then depends on how it is stored or shared afterwards.
Data minimisation and user choice
Little Ledger is built around a simple privacy principle: only use the information needed to provide the features you choose to use. We aim to support strong privacy practices through:
- Local storage by default.
- Limited and optional permissions.
- Clear user control over exports and integrations.
- No unnecessary dependence on centralised storage.
- Privacy-conscious product design for sensitive family records.
GDPR and privacy standards
Little Ledger is designed with strong privacy principles in mind, including data minimisation, user control, security and privacy by design. These values align closely with modern data protection expectations, including GDPR-oriented product thinking.
Legal compliance depends not only on app design, but also on how a product is operated, distributed, supported and documented. Nothing in this Privacy Policy should be taken as legal advice or as a standalone certification of regulatory compliance.
Children’s and family information
Little Ledger is intended for use by parents, guardians and carers managing family records. Because the app may contain sensitive information relating to children and health, privacy and controlled storage are core parts of the product’s design.
Changes to this policy
We may update this Privacy Policy from time to time to reflect product improvements, legal requirements or changes to how features operate. When we do, we will post the updated version here.
Contact
If you have a privacy question or need help with Little Ledger, email support@littleledger.net. For general messages, use contact@littleledger.net.