PlaceLedger Privacy Policy
PlaceLedger is designed as a local-first rental documentation app. In the current app build, move-in and move-out reports, notes, photos, generated PDFs, app preferences, and local unlock state are stored on the user's device.
Summary
PlaceLedger does not require an account and does not send report content to a PlaceLedger server in the current app build. PlaceLedger is developed by Vellumstead Labs LLC under the public developer brand Vellumstead Labs.
Information Stored On Device
PlaceLedger stores information the user enters or adds to a report, including:
- Property label and flexible address details.
- Report type, such as move-in or move-out.
- Move-in or move-out report date.
- Linked move-in baseline reference when a move-out report is created from a move-in report.
- Optional tenant name.
- Report, room, and checklist item notes.
- Checklist item condition/status.
- Photos captured with the camera or imported from the photo library.
- Photo metadata needed by the app, such as source, timestamp, dimensions, file name, file type, and local file path.
- Generated PDF exports and cached PDF files.
- App preferences, including date format and default PDF page size.
- Local lifetime unlock state in the current test build.
Report readiness checks and proof summaries are computed locally from report data. They are not sent to a PlaceLedger server in the current app build.
Camera And Photo Library Access
PlaceLedger asks for camera access so users can take documentation photos for a report. PlaceLedger asks for photo library access so users can import existing photos into a report.
Photos selected or captured in PlaceLedger are copied into app-controlled local storage on the device. PlaceLedger does not upload these photos to a PlaceLedger server in the current app build.
Location
PlaceLedger does not collect location data in the current app build. If location stamping is added later, it should be optional and this policy must be updated before release.
Sharing And Exports
Users can generate and preview PDF reports locally. Users can share generated PDF reports using the device's native share sheet. When a user shares a PDF, the destination app or service chosen by the user may process that file under its own privacy policy.
Purchases
PlaceLedger is expected to offer a lifetime unlock through Apple App Store and Google Play. Before app-store launch, real purchase and restore flows must be connected and this policy should be updated to describe the final purchase-provider behavior.
The current implementation plan is to use RevenueCat or another purchase provider for purchase validation and entitlement restoration while keeping report content local-only. Reports, photos, notes, addresses, and PDFs should not be sent to the purchase provider.
No Account Requirement
The current app build does not require users to create an account, sign in, or provide an email address.
No Analytics Or Advertising SDKs
The current app build does not include analytics, advertising, tracking, or third-party crash reporting SDKs. If any of these are added later, this policy and the app store privacy declarations must be updated before release.
Data Deletion
In the current app build, report data is stored locally on the device. Users can delete individual reports in the app; PlaceLedger also attempts to remove the deleted report's local photos and cached PDFs from app storage. Users can remove all local app data by deleting the app from their device.
Contact
PlaceLedger support is available through the support page or by email at [email protected]. This address currently receives forwarded mail during launch preparation; replies may come from a Vellumstead Labs managed mailbox until outbound domain email is finalized.