Privacy

Last updated August 2026

Ledger keeps your training data on your device. No account, no analytics, no server holding your workouts. This page spells out exactly what that means.

Where your data lives

Everything you record — workouts, programs, body measurements, progress photos, and check-ins — is stored only in your browser's storage (IndexedDB and localStorage) on your device. There is no account and no copy of your data anywhere else. We could not read your training history if we wanted to; it never reaches us.

What we don't do

No analytics. No tracking of any kind. No advertising cookies, no fingerprinting, no third-party scripts watching what you do. The app never asks you to sign in or create an account.

When the app touches the network

Ledger runs in a browser, so a few narrow things involve the internet. This is the complete list.

App files. Your browser fetches the app itself — code, styles, the exercise library — from our hosting CDN (Cloudflare Pages), the way it fetches any website. Once cached, the app runs offline.

Form Check's high-accuracy model. The standard pose model ships with the app. If you switch to the high-accuracy model, your browser downloads that one model file from Google's CDN. The request brings the model down to you; your video is never part of it.

Pro license checks. When you claim or validate a Pro key, your browser talks to our license endpoint, which confirms the purchase with Paddle, the merchant of record. The request carries the transaction or key — never your training data. Keys are signed and checked on your device, so a lifetime key never needs the network again; a subscription key quietly renews itself through the same endpoint before it expires.

Error reports you choose to share. If the app hits an error, it can show you a report. Nothing is sent automatically; a report only goes anywhere if you copy or share it yourself.

Program links you choose to create. When you share a program, its structure — exercises, sets, and reps — is packed into the link itself. Your weights, your logs, and anything personal are never included.

That is the whole list. Nothing else leaves your device.

Photos and video

Progress photos never leave your device. Form Check analyzes video on your device, in your browser — videos are never uploaded.

Backups

Backups are files you export yourself. You choose when to create one and where it goes, and it is yours to keep or delete.

Payments

Pro purchases are processed by Paddle as the merchant of record. Ledger never sees your card details. On your device, the only trace of a purchase is the license key you entered. Refunds are unconditional inside 30 days — the policy lives on the refunds page.

Deleting your data

Clear the app's site data in your browser settings, or uninstall the app — that removes everything, because there is no server copy to chase down. Any backup files you exported are under your control; delete those too if you want a clean slate.

Changes

If this policy changes, the current version lives at this address with the date above updated.