FjordbillLegal
SovereignLedger Privacy Policy
Last updated: November 12, 2026
This policy explains how the SovereignLedger Android app ("the app") handles your information. The app is published by Scandinavia consulting LLC, 30 N Gould St, Sheridan, WY 82801, USA ("we", "us"). Contact: [email protected].
In short. SovereignLedger has no account, no sign-in, no ads, no analytics of our own, and no server of our own. Your receipts, receipt photos, the text read from them, your mileage log and any tax numbers you enter are stored on your device. We do not receive them, and we do not sell or share personal information. Two Google components in the app (text recognition and Google Play billing) communicate with Google as described below.
Receipts and photos you add. When you scan a receipt with the camera or pick a photo from your gallery, the app saves a copy of the photo, the text recognized from it, and the details you confirm or type (merchant, date, amounts, sales tax, category, business-use percentage and notes). All of this is stored in the app's private storage on your device. The app turns off Android cloud backup for this data, so it is not copied to your Google backup. If you move to a new phone with Android's direct device-to-device transfer (by cable or local Wi-Fi), Android may copy the app's data to the new phone without going through the cloud. You can edit or delete any receipt in the app. Uninstalling the app or clearing its storage deletes everything; we cannot restore it.
Mileage log, remembered categories and tax numbers. If you log trips, the app stores the date, business purpose, start and end places you type, miles, odometer readings (and an odometer photo if you take one), vehicle, business/personal classification and notes. Places are only the text you enter; the app never stores a map route or GPS coordinates. If you log income, the app stores the payer, type, date, gross amount, fees and notes. Businesses, merchant rules and recurring expenses you set up are stored the same way. To speed up scanning, the app remembers the category and business-use percentage you last chose for each merchant. If you use the quarterly tax estimate, the income, W-2 wages and set-aside percentage you enter are stored on your device. All of this stays in the app's private storage and is deleted when you uninstall the app or clear its storage.
Location and Bluetooth (optional automatic trips). Automatic trip detection is off until you turn it on in the app. Before Android asks for any permission, the app explains that it collects location data to record your drives for the mileage log, even when the app is closed or not in use. When it is on, the app runs a foreground service with a visible notification and uses your phone's GPS to notice that a drive has started (when speed stays above about 15 mph for a minute) and to add up the distance until you have been stationary for several minutes. You can also start a recording when a car Bluetooth device you choose connects (the "nearby devices" permission), or start one yourself. Location fixes are used on your device to add up the distance and are then discarded: the app saves only the distance and the start and end times of the drive, never your route or coordinates. Detected drives wait for you to mark them business or personal, and none are deducted until you do. "Allow all the time" location access is needed so a drive can start while the app is closed; without it you can still start a recording yourself. No location or Bluetooth data is sent to us or to anyone else. You can turn the feature off or remove the permissions at any time in the app or in Android settings.
App lock. If you turn on the app lock, the app stores a salted PBKDF2 hash of your PIN (not the PIN itself) and its length on your device. Fingerprint or face unlock is handled by Android; the app never receives your biometric data.
Files you share or import. When you share an image or PDF to SovereignLedger, or import a CSV file from another app (for example QuickBooks Self-Employed, MileIQ, Everlance or Stride), the app reads only the file you choose, on your device, and saves the receipts, trips or income it contains to your ledger.
Fjordbill and other partner apps. If you also use Fjordbill, our invoicing app, you can send paid invoices (as income, with the payment processor and Fjordbill fees), expenses, job costs and receipt images from Fjordbill to SovereignLedger. The transfer happens on your phone between the two apps through Android; it does not go through the internet or any server of ours. SovereignLedger shows what will be imported and asks you before the first import; you can allow later imports from Fjordbill to happen automatically, and SovereignLedger checks that the sender is the genuine Fjordbill app before accepting them. SovereignLedger also checks whether Fjordbill is installed on your phone, only to show an "Open Fjordbill" or "Get Fjordbill" button. Imported records are stored like any other record in the app and can be edited or deleted.
Camera and photos. The camera is used only while the Scan screen is open and only to take receipt photos. Photos you pick are chosen through the Android photo picker, which gives the app access only to the photos you select. You can deny camera access and use the photo picker instead.
Text recognition (Google ML Kit). Receipt text is read on your device by Google's ML Kit text recognition, with the model bundled in the app. Receipt images and recognized text are not sent to us or to Google for recognition. However, ML Kit sends Google limited diagnostic and usage information, such as device model and OS version, app package name and version, a per-installation identifier that is not intended to identify you or your device, performance metrics, API settings, input and output sizes, event types and error codes. Google states this data is encrypted in transit and not shared with third parties. See Google's ML Kit data disclosure and Google's privacy policy.
Subscriptions and purchases (Google Play). SovereignLedger Pro is available as an auto-renewing subscription or a one-time lifetime purchase, bought (and for subscriptions renewed and canceled) through Google Play. Google processes the payment; we never see your card number or other payment details. To show prices and check whether you have an active subscription, the app communicates with Google Play on your device and stores only the result (Pro active or not) locally. As the seller, we receive purchase records from Google in Google Play Console (such as order ID, date, country, product and amount) and use them for accounting, tax, refunds and customer support. Google's handling of your data is governed by Google's privacy policy. You can cancel anytime in Google Play under Payments & subscriptions.
Exports and backups you create. If you export a PDF or CSV report, a mileage log, or a tax package ZIP (which includes your receipt photos), or save a backup file (receipts, photos, mileage log, income and your settings lists), the app writes it only to the location you choose with the Android file picker, such as your phone storage, an SD card or a cloud folder of your own. If you turn on automatic backups, the app writes them on a schedule to the folder you picked and deletes older automatic backups there beyond the newest seven. Backups can be encrypted with a password you choose (AES-256-GCM); for automatic encrypted backups the password is kept protected by the Android Keystore on your phone. Exports and unencrypted backups are not encrypted, so keep them somewhere only you can open. When you restore, the app reads only the backup file you pick and adds its contents to the ledger on your device. What happens to these files afterwards (for example sharing them with your accountant) is under your control.
Internet use. The app's own features work offline. Internet access is used only by the Google components described above (ML Kit diagnostics and Google Play billing). Location and Bluetooth are processed only on your device.
What we do not do. We do not collect your name, email, location, contacts or financial records (the optional trip detection uses location only on your device, as described above); we do not track you across apps or websites; we do not sell or "share" personal information as those terms are used in US state privacy laws, including the California Consumer Privacy Act; and we do not use your data for advertising.
Tax information. Deduction figures, mileage deductions, Schedule C previews and quarterly estimated-tax figures in the app are estimates calculated on your device from general IRS rules and published IRS rates. They are not tax advice and are not sent to anyone.
Children. The app is intended for adults running a business and is not directed to children under 13. We do not knowingly collect information from children.
Your choices and rights. Because your receipts stay on your device, you control them directly: view, edit, export or delete them in the app, or uninstall it. We do not hold copies to access or delete. For purchase records held by us or by Google, or any privacy question or request, contact us at [email protected]. We aim to respond within 30 days.
Security. Data is kept in the app's private storage, which other apps cannot read on a non-rooted device. Communication by the Google components uses HTTPS. Use a screen lock to protect your device.
Changes. If we change how the app handles data, we will update this page and the date above before the change takes effect, and update the app's Google Play listing where required.