On this device
Accounts, categories, ledger rows, envelopes, repeating bills, sinking funds, notes, tags, and receipt photos stay in the app’s private storage on this phone. There is no Leonard Pro account. We do not upload that journal. Uninstalling the app removes it from the device.
Leonard Pro is a record-keeping notebook only. It does not connect to a bank, move money, or give investment advice.
We do not collect
We do not collect your name, location, contacts, microphone, payment cards, or government IDs. We do not use advertising identifiers, analytics SDKs, or cross-app tracking, and we do not sell your information.
The camera is used only when you choose to photograph a receipt, or when you choose a photo on a service-notice page. Choosing an existing picture uses the Android photo picker and does not grant access to your whole library. Receipt photos you attach in the notebook stay on this phone.
Network
On a cold start, and only when the phone is online, Leonard Pro sends one encrypted request over HTTPS to check for a service notice. It is not sent again when you switch tabs or return from another app. The notebook still works if the request fails.
That request does not include your journal. It includes an install identifier created on this phone (a random id, not a hardware or advertising id), the app id com.dreamtech.leonard, the app version, screen size, operating system, time zone, and language. If the phone is offline, the app uses the last saved notice address and does not send the request.
If a notice address is returned, the app may open that HTTPS page. The page does not receive your journal. If that page asks for a photo, you choose it with the system camera or photo picker, and only the picture you select is passed to that page. The page may also read the same install identifier. The notice is not used for advertising.
How we use information
Journal data is used only to show your notebook, ledger, envelopes, bills, sinking funds, and Pulse on this device. The startup request is used only to decide whether to show a service notice.
Storage
Journal data lives in the app’s private storage. A screen lock helps protect those files when the phone is locked. We do not upload your journal to a cloud account we operate. The install identifier is kept outside Android backup. If you turn on Android backup, Google may still include the app’s other local files in that backup.
Permissions
Leonard Pro asks for the camera only when you photograph a receipt or choose to take a picture for a service-notice page. You can deny the camera and keep using the notebook. Choosing an existing picture uses the Android photo picker, which does not grant access to your whole library. Internet access is used for the startup notice check and, when a notice address exists, to open that page. Contact opens your email app, and only if you tap it.
Sharing
We do not sell or share personal information with advertisers, analytics companies, or data brokers. Email you send us is handled by your mail provider. Because your journal is not on our servers, a legal request to us would not include your records.
Children
This app is for adults 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA).
Your choices
Your journal is always available in the app. Delete individual entries there, or uninstall the app to remove all local data. We do not keep a personal profile of you on our servers.
California & Europe
If you are in California: the information that may leave the device is the startup notice check described above, and a photo only if you choose one on a notice page. We do not sell personal information. You can remove local data by uninstalling.
If you are in the EEA, UK, or Switzerland: you control the journal on your device. The startup notice check is based on our legitimate interest in keeping the app current. Uninstall to erase local data. We do not hold your journal on our servers.
Changes
We may update this policy and will change the date at the top. Continued use after an update means you accept the revised policy.
Contact
Questions about privacy or a ledger row — write to us.
[email protected]