Privacy Policy

1. Scope

This Privacy Policy applies to The Dunn Ledger mobile application and the public pages at thebdunnsystem.com/the-dunn-ledger. The app is provided by The BDunn Brand, LLC (“we,” “us,” or “our”).

2. Information the app handles

Account and household information

When you create an account, the app processes your email address and authentication information. It also stores the household name, member display names, membership role, account and household identifiers, and related timestamps needed to provide access and synchronization.

Encrypted financial records

The app lets you enter financial information such as income, bills, debt, savings goals, account balances, transfers, monthly plans, completion history, and activity history. These record contents are encrypted on your device before they are synchronized. The cloud service receives ciphertext rather than readable financial values.

Synchronization metadata

To synchronize safely, the service stores technical metadata such as encrypted-record identifiers and types, encryption nonces and key versions, revision numbers, update timestamps, deletion timestamps, and the authorized user who submitted an update.

Information stored on your device

The app stores an encrypted local cache, an encrypted authentication session, and device-protected encryption material. A household passphrase and recovery key are not uploaded as readable values. Backup files are created, selected, imported, or shared only when you initiate those actions.

Website information

These public support pages do not use advertising, analytics, tracking pixels, cookies, account sign-in, or contact forms. If you email support, we receive the information you choose to include in that message.

3. How information is used

We use the information described above only to:

• create and authenticate your account;
• create or join a household and enforce member permissions;
• synchronize encrypted records between authorized household devices;
• support offline changes, conflict detection, backup, and recovery;
• send account confirmation or authentication messages; and
• respond when you contact support.

We do not sell personal information. We do not use app information for advertising, cross-app tracking, or third-party behavioral profiling.

4. Encryption and security

Financial record contents are encrypted on the device using AES-256-GCM before synchronization. Access to backend records is additionally restricted by authenticated household membership rules. Authentication sessions and cached ledger data are encrypted on the device, and device-only protected storage holds the keys used to unlock them.

No security system can guarantee absolute protection. You are responsible for safeguarding your account password, household passphrase, recovery key, invite codes, unlocked devices, and exported backup files. Native JSON exports contain readable data by design so that they can be recovered independently; store them securely.

5. Service providers

We use Supabase to provide account authentication, email confirmation, database hosting, encrypted-record synchronization, and account deletion services. Supabase processes the limited information necessary to provide those services on our behalf and under its own security and privacy terms.

Apple distributes the iOS app and may process App Store, purchase, device, diagnostics, or account information under Apple's own privacy policy. We do not receive your Apple Account password.

6. Retention and account deletion

Account, household, membership, and encrypted synchronization records are retained while needed to provide the app. You may permanently delete your account from Settings → Account → Delete account.

If a household owner deletes their account and another active member exists, ownership transfers to the longest-standing active member and the departing membership is removed. If no other active member exists, the household and its associated cloud records are deleted. A non-owner's account deletion removes that person's household membership. The authentication account is then permanently deleted.

Backups previously exported to your device or another destination are outside the app's cloud deletion process and must be removed separately by whoever controls those copies. Support emails may be retained as reasonably necessary to resolve the request, maintain service records, or meet legal obligations.

7. Your choices

• You choose which financial records to enter and which backup files to import or export.
• You can lock the ledger or sign out on a device.
• A household owner can rotate invite codes and change the shared passphrase.
• You can request help or ask a privacy question by email.
• You can permanently delete your account in the app.

8. Children

The Dunn Ledger is a household financial planning tool and is not directed to children under 13. We do not knowingly solicit personal information from children. If you believe a child has provided information through the app, contact us so we can investigate and take appropriate action.

9. Changes to this policy

We may update this policy when the app, service providers, or legal requirements change. The effective date at the top of this page will identify the latest version. Material changes will be communicated through an appropriate channel when required.

10. Contact

For support, privacy questions, access requests, or deletion questions, contact:

Do not include passwords, household passphrases, recovery keys, invite codes, or financial records in an email.