LedgerAI Privacy Policy
Updated 5 November 2026
LedgerAI is a compliance-records app made by QUANTYX (PTY) LTD. This policy describes the iOS and macOS apps (the same code and sign-in) as they are built and shipped. The web app is covered in its own section below.
Who is responsible
QUANTYX (PTY) LTD, registration number 2025/964679/07, registered office 3 Bradford Rd, Germiston, Gauteng, 2007 ("Quantyx"), is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) for the personal information described on this page. Information Officer: Vuyo Nkadimeng, director. Contact: vuyo@quantyx.co.za.
Why we may process it: we process personal information to answer your messages, run our apps for you, meet legal duties and run our business (the lawful grounds that apply are to be confirmed by our attorney). Supplying information to us is voluntary, but without some of it a feature or reply cannot work.
The short version
LedgerAI requires you to sign in. Your workspace records are synced to a cloud database so that they follow you across your own devices. They therefore leave your device and are stored in the United States. They are not end-to-end encrypted: Google encrypts them at rest, and Quantyx, as the owner of the database project, can technically read them. We use them only to run the app for you.
Your account
You sign in with Sign in with Apple, a passkey or Microsoft. We receive your email address and name from the sign-in method you use. Sign-in is handled by Google Identity Platform (Firebase Authentication). To confirm that requests come from the genuine app, Firebase App Check sends a technical proof from your device to Apple and Google that the app is genuine and unmodified.
Your workspace records
LedgerAI syncs your organisation profile, products, evidence records, controls, decisions, the data you list, vendors and app state to Firebase Realtime Database in us-central1 (Iowa, United States), under your user ID, so your own devices stay in step. The iOS app does not upload evidence files. On the web app (ledgerai.quantyx.co.za), evidence files you upload are stored in Google Cloud Storage under evidence/<your user ID>/ in us-east1 (South Carolina, United States).
iCloud (optional)
If you choose to, you can make a one-time copy of your workspace to your own private iCloud database (CloudKit) from Settings on iPhone or iPad. The copy includes your workspace data (organisation profile, products, controls and evidence records, activity, risk history and settings) and the entries of your audit log. It is off unless you start it, it is made once when you tap the button, and it is not updated afterwards: the copy stays as it was until you make another. It is stored under your own Apple Account and is not shared with other LedgerAI users. LedgerAI has no in-app button to remove the copy, and deleting your LedgerAI account does not delete it; you can delete it in your device's iCloud storage settings (Apple Account, iCloud, Manage Account Storage, LedgerAI). iCloud private storage is designed so that Quantyx cannot read it.
Team sharing
Team sharing is a preview. A CloudKit share link can be created, but there is no accept code, so it does not currently share data between people.
Other services the app calls
- ledgerai.quantyx.co.za, run by Quantyx on Vercel: passkey sign-in, the organisation audit feature, the breach register and the contact form. These calls carry the information needed for that feature and your IP address.
- Slack, only if you add a Slack webhook URL for integrations or scheduled audit reports. You choose what is sent and where.
On your device
Document scanning, reading text from evidence (Apple Vision and PDFKit), the camera, Face ID or Touch ID, and on-device assistance using Apple Intelligence all run on your device. Biometric data never reaches us.
Web app (ledgerai.quantyx.co.za)
You need an account to use it. Your workspace records are stored with Google (Firebase) in the United States: the database in Iowa (us-central1) and evidence files you upload in South Carolina (us-east1), under your user ID, readable by you and, technically, by Quantyx as project owner. They are not end-to-end encrypted. The site runs on Vercel, which also measures page performance anonymously (Vercel Speed Insights). If you use the contact form we receive your name, email and message. If you add a Slack webhook, messages you trigger are sent to Slack through our server. Deleting your account in Settings removes your workspace records, uploaded files and sign-in.
Web sign-in methods are email and password, Google, Apple and Microsoft, through Firebase Authentication (we never see passwords). Evidence files are limited to 20 MB and the storage rules make them readable only by their owner. The browser keeps preferences, first-run flags and drafts in local storage.
Transfers outside South Africa
POPIA section 72 lets information leave South Africa only if the recipient must protect it to a similar standard or you agree. Here is what leaves your device:
| Recipient | What it receives | Where |
|---|---|---|
| Google (Identity Platform, Realtime Database, Cloud Storage, App Check) | Account identifiers, your workspace records, evidence files (web app only) and the app-genuineness proof | United States (Iowa, us-central1; web app only: South Carolina, us-east1) |
| Apple (iCloud / CloudKit, optional) | Optional one-time copy of your workspace and audit-log entries to your private iCloud (CloudKit) database, made only if you tap Copy to iCloud on iPhone or iPad; not updated afterwards; stays under your Apple Account until you delete it in iCloud storage settings. | United States and other Apple regions |
| Microsoft (only if you sign in with Microsoft) | Sign-in details Microsoft provides | Microsoft's data centres, which may include outside South Africa |
| Apple (Sign in with Apple, App Check) | Sign-in details, the app-genuineness proof | United States and other Apple regions |
| Vercel (ledgerai.quantyx.co.za) | Requests to the endpoints above, including IP address | Vercel (a US company; servers in several regions) |
| Slack (only if you configure it) | Content you choose to send | Slack Technologies, LLC (United States) for US and Canada workspaces, Slack Technologies Limited (Ireland) for others; Slack states it may transfer data to the United States |
How long we keep it
While your account exists. In Settings, Delete account removes your workspace records first and then your sign-in, when you confirm deletion. The web app also removes uploaded evidence files and offers a JSON export. Support emails: 24 months (proposed, pending attorney confirmation).
Third-party information
Your records may name other people, such as vendors, employees or data subjects. You are responsible for having the right to record them, and for your own POPIA duties for that information. Quantyx provides the tool; you decide what goes in it.
Children
LedgerAI is a business tool, has no age check, and is not designed for children.
Your rights and complaints
Under POPIA you may ask whether we hold personal information about you, ask for a copy, ask us to correct or delete it, and object to how we use it. Email vuyo@quantyx.co.za and we will respond. If you are not satisfied, you may complain to the Information Regulator (South Africa). Complain through the Regulator's complaints page at inforegulator.org.za/complaints. PAIA complaints go on Form 5 to PAIAComplaints@inforegulator.org.za.
If we learn of a breach of your personal information we will notify the Information Regulator and you as POPIA section 22 requires. Report a suspected incident to vuyo@quantyx.co.za.
Contact
Questions about privacy in LedgerAI: vuyo@quantyx.co.za.
Published by QUANTYX (PTY) LTD, reg. 2025/964679/07. Read the Quantyx privacy notice and the PAIA page. Support · quantyx.co.za