Last updated 18 August 2026
Privacy & Terms
What Ticket Ledger stores, why it stores it, and the terms you agree to by using it. Written to be read rather than skipped.
1. Who is responsible
The operator of this service and decides how the data described here is handled. Write to support@ticket-app.space about anything on this page.
2. What is stored
Only what the app needs to do its job. There is no profile beyond this.
Your account
| What | Why |
|---|---|
| Email address | It identifies the account and is how a password reset or a support reply reaches you. |
| Password | Never stored. Only an Argon2id hash is kept, which cannot be turned back into the password. |
| Display name, optional | Shown on your own screens and on exports. |
| Session records | One row per signed-in device, so you can see them and end any of them. |
Your ledger
The records you enter: vehicles, drivers, fines with their dates, amounts, grounds and evidence notes, documents and their expiry dates, payments, renewals, and your settings. These sync so the same ledger opens on another device.
Security records
Sign-ins, failed sign-ins, password changes and account deletions are written to a security log. Your IP address and browser identifier are not stored in readable form there — they are hashed with a secret key held by the server, so the log cannot be turned back into a list of places you have been.
3. What is never collected
- Photographs. Pictures of notices, documents and evidence stay on your device. Only the file name reaches the server.
- Location. The app never asks for it and never reads it. A place written on a fine is text you typed.
- Contacts, calendar, health, or anything else on your phone.
- Analytics and trackers. There is no advertising identifier, no third-party analytics kit, no crash reporter that ships your data elsewhere.
- Payment details. The app records that you paid something. It never takes a card number and cannot make a payment.
4. Who else sees it
Nobody. Your records are not sold, rented, shared for advertising, or used to train anything. The only parties involved are you and the hosting provider that runs this server, which stores the database on the operator's behalf and does not use it.
Data is disclosed to an authority only where the law requires it — and the app holds what you typed about your own fines, not evidence gathered about you.
5. How it is protected
- Everything travels over HTTPS. The app refuses plain connections to any address that is not on your own machine.
- Passwords are hashed with Argon2id at 64 MiB and four passes.
- Sign-in tokens are stored only as a hash, so a stolen copy of the database cannot be replayed. On your phone they are kept in the iOS Keychain, marked so they are never copied into a backup or to another device.
- Session tokens rotate. If one is ever reused — which means a copy is in someone else's hands — that whole session is ended immediately and the event is recorded.
- Every query is bound to your account. Another account's record is not merely refused, it is invisible.
- Sign-in attempts are rate limited, and repeated failures lock an account for a while.
No system is beyond reach. If a breach ever affects your records, you will be told without delay, at the address on this account.
6. How long it is kept
| What | How long |
|---|---|
| Your ledger and account | Until you delete them. There is no automatic expiry. |
| Expired sign-in tokens | Removed within seven days. |
| Security log | One year, then deleted. |
| Throttling counters | Hours. |
7. What you can do
- See everything
- Settings → Export Data gives you every fine, payment and document as CSV, a PDF summary, or a full JSON backup. No request needed and no waiting.
- Correct anything
- Every record is editable in the app.
- Delete your account
- Account → Delete Account, confirmed with your password. It removes every vehicle, fine, document, payment and session from the server, and clears the copy on your device. It is immediate and cannot be undone.
- Use it without an account
- Not currently. Signing in is what lets the ledger open on more than one device. If you sign out, this device keeps nothing.
- Object, restrict, or complain
- Write to us at support@ticket-app.space. If you are in the EU or UK you may also complain to your national data protection authority.
8. Notifications
Reminders about a discount ending, an appeal window closing or a document expiring are made on your phone, by your phone. They are not push messages: no server is told what your deadlines are in order to send them. They are off until you switch them on.
9. Children
The app is for people who own or drive a vehicle and is not directed at children under 16. Accounts are not knowingly created for them.
10. Terms of use
What the service is
A tool for keeping track of dates and amounts you enter about your own vehicles. It stores and arranges them. That is all it claims to do.
What it is not
It is not legal advice. It does not connect to any official register, does not pay fines, does not submit appeals, and cannot tell you whether an appeal will succeed. Deadlines differ by country and by type of notice, which is why you set them yourself. Always check the notice itself and the dates printed on it. Decisions you take remain yours, and so are their consequences.
Your side of it
- Give a real email address and keep your password to yourself.
- Enter records that are yours to enter.
- Do not try to reach another account's data, break the service, or automate abuse of it. Rate limits are there for a reason.
Availability and warranty
The service is provided as it is, without warranty of any kind. It may be unavailable for maintenance or for reasons outside anyone's control. Your records are kept on your device as well, so an outage does not take your ledger with it — but keep your own backup of anything you cannot lose (Settings → Export Data).
To the extent the law allows, the operator is not liable for a fine that went unpaid, a discount that lapsed, a deadline that passed, or any other loss arising from use of the app. It counts dates you typed; it cannot know your local rules.
Ending it
You may delete your account at any moment, from inside the app. An account may be suspended if it is used to attack the service or others using it.
Changes
These terms and this policy may change. The date at the top says when they last did. A change that materially affects what is stored or who can see it will be announced in the app before it takes effect.
Governing law
These terms are governed by the law of the place where the operator is established, without affecting any consumer rights you hold where you live.