House Ledger
House Ledger privacy policy
Last updated 8 September 2026.
House Ledger is the service record for a house: what is in it, how old, under what warranty, and who last touched it. This policy explains what is kept.
Documents you photograph are sent to Anthropic to be read
This is the part you are least likely to assume, so it is here rather than at the bottom. When you photograph a warranty, an invoice or a manual, the image is sent to a large language model run by Anthropic, which reads it and returns the dates and figures. The whole document goes, including a contractor's details or your own address if they appear on it.
Nothing is sent unless you photograph something.
What is stored
- Your email address, and whether your subscription is active.
- Your home, and the systems in it with their ages and warranty dates.
- Every service event: what was done, when, by whom, and what it cost.
- Documents you photograph and the structured records read from them.
- Tasks and a record of reminders sent, so the same one is not sent twice.
A note on contractors
If you record who serviced something, you are storing a business contact in your own record. We do not contact them, do not build any profile of them, and do not sell or share contractor details with anyone.
What is not stored
No password, because there is not one. Signing in is by a code sent to your email address. No property valuation, no mortgage or insurance policy details, and no payment card details.
Who can see it
You, and nobody else using the app. Every table checks the signed in account against the owner of the row before returning anything. There is no agent view and no sharing feature. We do not sell any of it and we do not send it to advertisers.
Who else is involved
- Anthropic receives documents you photograph, as above.
- Supabase hosts the database and sends sign in codes.
- Resend delivers reminder emails, and receives your email address and the contents of that reminder.
- RevenueCat sits between the app and the app store and tracks whether your subscription is active. It receives the purchase events and an identifier for your account.
- Apple handles the payment itself. Card details go to Apple and never to us.
Deleting it
Deleting your account removes your profile, the home, every system, service event and document, immediately and unrecoverably. The record is meant to hand over cleanly when you sell, so export it before you delete rather than after.
Contact
House Ledger is published by Jeffrey L Carrier.