Privacy Policy

Last updated October 24, 2026. This policy describes how Ledger (“we”) collects and uses information in the Ledger athlete app, its Apple Watch app, and the coach portal.

Information we collect

We collect information you provide and information created when you use Ledger:

• Account. Name, email address, and sign-in tokens from email/password, Sign in with Apple, or Google.
• Invitations. If a coach invites you to train with them, or we invite you to coach on Ledger, the name and email address they entered, any note they added, and when the invite was sent and answered. We use them to email you the invite link, which stops working after 14 days, and to show the sender whether you accepted.
• Training data. Check-ins (sleep, soreness, joint flags), routines, collections, session logs, loads, and readiness values we compute from that input.
• Diet data, only if you use Diet. Your setup answers: bodyweight, height, age (stored as a year of birth), sex, Diet Goal, and an optional note. Your daily Targets for protein and Water, and for carbohydrate and fat if you set them, including earlier Targets so past days keep the Targets that applied then. Your Food Tracker: each Food Entry as you typed or photographed it, when you ate and in which time zone, the Estimate for it, the Food Items you confirmed with their portions and nutrient amounts, and the Water you log. A record that Diet was declined, if your setup note mentions an eating disorder, even when you did not finish setup.
• Messages. Chat with your AI coach and, if you have one, your human coach.
• Device. Push notification token, app version, and basic device identifiers needed to deliver notifications and keep you signed in.

Ledger is not a medical device and does not collect clinical health records. Workout logs are fitness data you choose to enter, and Food Tracker entries are nutrition data you choose to enter.

Diet and AI estimates

Diet is optional. It stays off until you set it up, and your training in Ledger never depends on food data. You can turn Diet off at any time. Your nutrition data is then hidden but kept, and it is there again when you turn Diet back on.

Ledger uses a third-party AI model provider to estimate nutrients and propose Targets. We send your request to OpenRouter, which passes it to the AI model that produces the result:

• For each Food Entry, the provider receives the text you typed, with the local date, time, and time zone you logged it, or the photo you took, and returns an Estimate of the Food Items in it. You review every Estimate, and only Food Items you confirm count toward your Targets. Nutrient amounts are estimates, not measurements.
• When you ask for Targets, the provider receives your setup answers, including your note, and a count of your recent training sessions, and returns proposed Targets with a short explanation. You can change any Target before you accept it. Ledger and the provider also check your note for medical conditions and signs of an eating disorder. If either appears, Ledger does not propose Targets.
• Your AI coach runs on the same provider. When Diet is on, your AI coach can see today's Targets, totals, and confirmed Food Items, so you can ask it what to eat next.

We remove location and other metadata (EXIF) from every food photo. The app strips it before upload, and our server re-encodes each photo so that no metadata survives.

If you log food without a connection, the entry waits on your device until the app can send it for an Estimate.

Apple Watch and Apple Health

The Ledger app for Apple Watch is optional. It shows your rest countdown, controls the audio playing on your iPhone, and shows today's step count. Your iPhone sends it only what that needs: the current rest countdown with the name of the next set, and when your live session started. The watch app sends nothing back to your iPhone or to us.

• Workouts. While a session is live in Ledger on your iPhone, the watch app starts a workout on your Apple Watch, so the rest countdown stays on screen each time you raise your wrist. Apple Watch lets an app start a workout only with permission to write workouts to Apple Health, so the watch app asks for that permission. The watch app does not save that workout to Apple Health. As in any workout, your Apple Watch measures your heart rate more often while it runs; Ledger does not read those measurements.
• What the iPhone app writes to Apple Health. With your permission, Ledger on your iPhone saves each workout you finish (a strength training workout with its start and end time) and each Food Entry you confirm in Diet (its calories, protein, carbohydrates and fat, at the time you ate) to Apple Health. When you edit or delete a Food Entry, Ledger updates or removes its copy in Apple Health. Once data is in Apple Health, other apps you allow to read it, such as WHOOP, can use it under their own privacy policies. You can turn this off in the Health app, and delete the copies there.
• Steps. With your permission, the watch app reads today's step count from Apple Health on your Apple Watch to show it in the app and on your watch face. It reads no other Apple Health data. The step count stays on your watch.

The step count Ledger reads from Apple Health never leaves your watch, and Ledger reads nothing else from Apple Health. No Apple Health data is used for advertising or marketing, sold, or shared with anyone.

How we use information

We use this information to operate the product: authenticate you, assemble sessions, show progress, send notifications and emails, and improve reliability. If you set up Diet, we also use it to estimate the nutrients in what you log, propose Targets, and show your day against your Targets. We do not sell personal information. We do not use your data for third-party advertising. We do not track you across other companies’ apps or websites for advertising.

Sharing

We share information only as needed to run Ledger:

• Hosting and infrastructure providers that store the app database and deliver the API.
• Apple and Google, when you choose those sign-in methods.
• Push delivery (Expo / Apple Push Notification service) for coach messages you are meant to receive.
• Email delivery (Resend) for the emails Ledger sends you.
• Exercise reference media may be loaded from ExerciseDB / AscendAPI. Those requests can include the movement you looked up; they are not used to build an advertising profile.
• OpenRouter and the AI model it routes each request to, which power your AI coach, AI workout creation, and Diet. They receive what you send to Ledger's AI features, with the account and training details the AI needs to answer, such as your name, check-ins, and training plan; any PDF you attach, which may be read by a document-parsing service; and the Diet information described above, including today's nutrition summary when your AI coach answers you while Diet is on.
• A human coach you connect with can see the training data needed to coach you. A human coach cannot see your Diet or Food Tracker data in Ledger. Your AI coach can send your human coach a notification, and that message could mention nutrition details your AI coach can see.
• We disclose information if required by law.

Retention and deletion

We keep account and training data while your account is active. We keep Diet data while your account is active, including while Diet is turned off.

Deleting a Food Entry. When you delete a single Food Entry, we hide it from you but keep it, still linked to your account. You can undo the deletion right after you make it.

Deleting all nutrition data. When you delete your nutrition data, we permanently remove the link between that data and you, and we destroy your food photos, the words you typed, and your setup note. We keep the rest, such as the foods, amounts, and nutrients you logged, in de-identified form, and we may use it to improve Ledger, for example to make food estimates more accurate. We don’t try to re-identify it, and we don’t sell it.

If Diet was declined because your setup note mentioned an eating disorder, the record of that decline holds the reason and the dates, never the text of your note. We remove its link to you and keep it in the same way.

Deleting your nutrition data does not delete your conversations with your AI coach.

Deleting your account. When you delete your account, we delete your name, email address, password, and sign-in details, revoke Sign in with Apple, and destroy content that can identify you, such as your Coach chat conversations, coach messages, attachments, food photos, and the words you typed. We keep structured training and nutrition facts, such as sets, weights, foods, and nutrients, in de-identified form, with the link to you permanently removed. See Delete your account.

Backups made before we remove or unlink data may still hold it, including photos and original text, for up to 7 days.

Your choices

You can decline optional check-in fields, leave Diet off or turn it off, turn off transactional email in your Profile, disable notifications in your device settings, and sign out at any time. You can decline the Apple Health permissions or turn them off later in your iPhone or Apple Watch settings; Ledger, the rest countdown and its alert keep working without them. In the app, you can delete a Food Entry and undo that, or delete all your nutrition data at once. You can delete your account in the app from Profile, or as described on Delete your account. To access or correct your data, email support@ledgerfit.app.

Children

Ledger is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes

If we change this policy in a material way, we will update the date above and post the new policy at this URL.