PlaceLedger Privacy Policy
PlaceLedger is designed as a local-first rental documentation app. In the current MVP build, move-in and move-out reports, notes, photos, generated PDFs, app preferences, and local unlock state are stored on the user's device.
Summary
PlaceLedger does not require an account and does not send report content to a PlaceLedger server in the current MVP build. PlaceLedger is developed by Vellumstead Labs LLC under the public developer brand Vellumstead Labs.
Information Stored On Device
PlaceLedger stores information the user enters or adds to a report, including:
- Property label and flexible address details.
- Report type, such as move-in or move-out.
- Move-in or move-out report date.
- Linked move-in baseline reference when a move-out report is created from a move-in report.
- Optional tenant name.
- Report, room, and checklist item notes.
- Checklist item condition/status.
- Photos captured with the camera or imported from the photo library.
- Photo metadata needed by the app, such as source, timestamp, dimensions, file name, file type, and local file path.
- Generated PDF exports and cached PDF files.
- App preferences, including date format and default PDF page size.
- Local lifetime unlock state while real store purchases are not yet connected.
Report readiness checks and proof summaries are computed locally from report data. They are not sent to a PlaceLedger server in the current MVP build.
Camera And Photo Library Access
PlaceLedger asks for camera access so users can take documentation photos for a report. PlaceLedger asks for photo library access so users can import existing photos into a report.
Photos selected or captured in PlaceLedger are copied into app-controlled local storage on the device. PlaceLedger does not upload these photos to a PlaceLedger server in the current MVP build.
Location
PlaceLedger does not collect location data in the current MVP build. If location stamping is added later, it should be optional and this policy must be updated before release.
Sharing And Exports
Users can generate and preview PDF reports locally. Users can share generated PDF reports using the device's native share sheet. When a user shares a PDF, the destination app or service chosen by the user may process that file under its own privacy policy.
Purchases
PlaceLedger is intended to offer a lifetime unlock. The current MVP build uses local test unlock state. Before launch, real App Store and Google Play purchase and restore flows must be connected. Store purchase processing may involve Apple or Google, and this policy should be updated to describe the final purchase flow before submission.
Current integration recommendation: use RevenueCat for purchase validation and entitlement restoration while keeping report content local-only. If RevenueCat is added, update this policy to describe that purchase/entitlement information is processed by the purchase provider, and confirm that reports, photos, notes, addresses, and PDFs are not sent to RevenueCat.
No Account Requirement
The current MVP build does not require users to create an account, sign in, or provide an email address.
No Analytics Or Advertising SDKs
The current MVP build does not include analytics, advertising, tracking, or third-party crash reporting SDKs. If any of these are added later, this policy and the app store privacy declarations must be updated before release.
Data Deletion
In the current MVP build, report data is stored locally on the device. Users can delete individual reports in the app; PlaceLedger also attempts to remove the deleted report's local photos and cached PDFs from app storage. Users can remove all local app data by deleting the app from their device.
Contact
During launch preparation, PlaceLedger support is available through the support page. Current receive-only support email is support@vellumsteadlabs.com.