Privacy policy

Last updated 17 October 2026.

This policy covers the Home Ledger (घर खाता) app for iPhone and Android and this website. It says what personal data we store, why, who else handles it, how long we keep it and what you can do about it. We process personal data under India's Digital Personal Data Protection Act, 2023, and we have written this in plain English so that you can read it.

Who is responsible

Ambiful Solutions Private Limited, House No. 1145, Sector 9, Faridabad, Haryana 121006, India, decides how your data is used (the "data fiduciary" in the Act's words). For any question, request or complaint about your data, write to our Grievance Officer at contact@ambiful.com. We acknowledge a complaint within 24 hours and aim to resolve it within 15 days.

What we store

• Your email address, to sign you in and to reach you about your account. You sign in with a one-time code by email, or with your Google or Apple account. Then Google or Apple confirms who you are and gives us your email address; Google also sends the name and profile picture link on your Google account, which are kept with your sign-in record but not used or shown by the app. We never get your Google or Apple password, contacts or anything else from those accounts. If you choose Apple's "Hide my email", we get a private address that Apple forwards to you.
• Your mobile number, only if you choose to sign in with it or add it in More: we text you a one-time sign-in code. The people in your home see it in their list of members, as they see each other's email addresses.
• Your household: its name, and who is in it (owner or member) and since when.
• Your helpers (for example a cook, maid or driver), as you enter them: name, their work, phone number and UPI ID if you add them, pay terms (monthly or daily, the amount and when it changed, working days, paid leave, how absences are counted), and start and last working day. If you fill in their profile: their home address, native place, and an emergency contact (name, relation and phone number). Everyone in your household can see the profile.
• Their attendance and pay: the days you mark (absent, half day, holiday, extra day) with any note you add, advances and bonuses with their amounts and dates, and each settled month: what was earned and paid, the date, how it was paid and any UPI reference you type.
• A helper's photo and ID documents, only if you add them, and only after you record in the app that the helper agreed: a photo of their face, and images or PDFs of documents such as a masked Aadhaar (first 8 digits hidden), driving licence, voter ID, PAN card or police verification certificate, with what kind of document it is and when it was added. We store the image, never an ID number as data, and the app asks for Aadhaar only in masked form. Photos are re-saved on your phone before upload, which removes hidden details such as where the photo was taken. Images and PDFs only, up to 5 MB each.
• A helper's police verification, if you track it: your state, whether you applied or it is verified, the dates, and the reference number the police gave you. Home Ledger never applies to the police or contacts them; you apply yourself on your state police's official service. The helper details sheet the app makes for that is created on your phone and goes only where you share it.
• Your daily deliveries (milk, newspaper, ironing and so on): the vendor's name, phone number and UPI ID if you add them, the usual quantity and days, prices and when they changed, the days you change or skip, and each settled month's bill and payment.
• Your household expenses, if you add them: the amount, what it was for (groceries, bills, medical…), the date, how it was paid and any note you type, and who in the household added it. Everyone in your household can see them.
• Join codes, if you invite someone to your household: we store only a scrambled form (a hash) of the code, never the code itself, plus who made it, when it expires and who used it. When someone tries a code, we note the time, to stop people guessing.

About your helpers and vendors. Most of what Home Ledger holds is about other people: the people who work for your home. Add only what you need to keep your accounts with them, and let them know you keep this record. Home Ledger never contacts them, and they cannot see it. When you send a helper or vendor their statement, you send it yourself from your own WhatsApp. Ask a helper before keeping their photo or ID documents; the app records the date you confirmed they agreed.

Collected automatically

• Sign-in and server records: when the app talks to our database, our provider records the time, your IP address and the app making the request. We use these only to keep the service running and secure, for example to stop someone guessing sign-in codes.
• Which phone you use: once a day while you are signed in, the app tells us the kind of phone (for example Android or iPhone, and the model), its system version, the app's version, and the country your phone's region is set to. Not your IP address for this, not your location and no identifier for the phone. We use it, counted across everyone, to know which phones and countries to support and test; it is never shown to anyone outside Ambiful's team, and it is deleted with your account.
• App updates: when the app starts, it asks Expo, our update service, whether newer app code is ready. The request carries the app's version, the kind of phone and its system version and, like any internet request, your IP address. It contains nothing from your household and is not linked to your account.
• We use no advertising identifiers, no third-party analytics or tracking tools and no crash-reporting service. This website sets no cookies.
• We do not track you across other companies' apps or websites.

Why we use it

Only to give you the service you asked for: to work out each month's pay and bills, keep your records, let the people in your household share them, send your sign-in codes, and know which phones and countries to support. You give it to us by entering it, and we rely on that consent. You can withdraw it at any time by deleting the item in the app or deleting your account; this does not affect what we did before. We never use your data for advertising, and never to decide anything about you or the people who work for you.

Where it lives and who can see it

• Your data is stored with Supabase in Mumbai, India (ap-south-1).
• Everything in a household is visible to the people in that household, and to nobody else. The database itself checks every request against the household of the person signed in.
• A helper's ID documents are visible only to the household's owner, not to its other members. A helper's photo is visible to everyone in the household. Files sit in private storage in Mumbai with no public address; the app opens them through links issued for the person signed in, which expire within 10 minutes.
• Paying through UPI and sending a statement on WhatsApp open those apps on your phone with the details filled in. We do not see the payment or the message, and nothing comes back to us apart from what you then mark in Home Ledger.

Services that handle some of it for us

• Supabase hosts the database and the sign-in, in Mumbai.
• MSG91 (Walkover Web Solutions, India) texts the sign-in code to your mobile number, if you sign in with one. The SMS contains the code and nothing else about you.
• Resend sends the sign-in code to your email address. The email contains the code and nothing else about you.
• Google and Apple, only if you sign in with them: they confirm your identity and give us your email address (Google also your name and profile picture link). When you delete your account, we also ask Apple to end Home Ledger's access to your Apple sign-in.
• Vercel serves this website. It does not receive anything from the app.
• Expo (650 Industries) delivers updates to the app's own code. It receives the update check described above, nothing else.

Outside India

Your household's records stay in Mumbai. Resend may process your email address outside India, mainly in the United States, to deliver the sign-in code, under its own security and privacy commitments. Expo handles the app's update checks in the United States.

On your phone

• The app keeps a copy of your household's records on the phone so that it works without a connection, and your sign-in in the phone's secure storage. Signing out removes both.
• The evening reminder, if you turn it on, is scheduled on the phone itself. No push service is involved and we keep no notification token.
• Payslip PDFs are made on the phone and go only where you share them.
• The app opens your camera, photos or files only when you choose to add a helper's photo or document, and uses only what you pick.
• We do not read your contacts or your location.

How long we keep it

• Your records: for as long as you use Home Ledger. Deleting something in the app deletes it straight away.
• A helper's photo and ID documents: deleted automatically 90 days after the last working day you set for them, or earlier when you delete them. When a helper, household or account is deleted, their files are removed from storage within a day.
• After you delete your account: nothing that is only yours. A household you shared with others stays with them (see deleting your account). Our database provider's routine backups, which may still hold deleted data, are overwritten within 30 days.
• Sign-in and server records: only as long as our providers need them for security and fault-finding.

Your rights

• See your data: everything we hold is on the app's screens; ask us and we will send you a copy.
• Correct it: edit helpers, vendors, marks and payments in the app. A settled month is locked; the household's owner can reopen it to correct it. Or ask us.
• Delete it: delete a helper, a delivery or your whole account in the app, or ask us.
• Nominate someone to exercise these rights for you if you die or cannot do so yourself: tell us who by email.
• Complain: write to contact@ambiful.com and we will reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Write from the email address on your account, so that we know the request is yours. A helper or vendor who wants their details corrected or removed can write to us too; we will pass the request to the household or act on it ourselves.

Keeping it safe

Everything travels over encrypted connections (HTTPS). Household isolation is enforced by the database, not just the app; only the people who run the service can reach the database directly, and only to keep it working. No system is perfectly safe: if a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

Children

Home Ledger is meant for adults who run a household. It is not meant for anyone under 18.

What we do not do

• We do not sell or share your data with anyone, including advertisers, agencies or employers of domestic workers.
• We do not take or hold your money: payments go directly from your UPI app to the person you pay.
• We never store an Aadhaar number or any other ID number as data, and we never check or share anyone's documents.

Changes to this policy

When we change what we store or how we use it, we update this page and the date at the top. For a change that matters, we also email you before it applies to data you have already given us.