Privacy policy

Your book is kept on your phone

Every lendee, loan, payment, note and file you add is stored on your phone. There's no account to create and nothing to sign in to. Lendey has no server and doesn't sync your book anywhere, so the developer of Lendey never receives it.

A copy leaves your phone only when you make one: moving your apps to a new phone, or a file or picture you share. Both have a section below.

Lendey doesn't use the internet

Lendey for Android doesn't ask Android for internet access, so it can't send anything over a network.

Nothing is tracked

Lendey contains no analytics, no advertising and no third-party code of any kind. Nobody counts what you tap, and no profile of you is built. If you've chosen to share usage and diagnostics on your phone, Google may pass along a crash report through Google Play. Those describe the code that stopped, not your book.

The people in your book

Lendey is for keeping records about the people you lend to. Depending on what you fill in, that can include their full name, mobile number, email, occupation and employer, their ID type and number, photos of their ID, and their loans and payments. It's stored the same way as the rest of your book, on your phone, and Lendey never sends it anywhere.

You decide what to record about them. Ask for what you need, keep it safe, and handle it as the privacy law where you lend requires.

Photos, files and the camera

Lendey has no camera permission. When you tap Take photo on a lendee's ID, your phone's camera app takes the picture and hands Lendey only that photo. Photos and files you add come through Android's pickers, which give Lendey only the items you choose, never your gallery or your storage. What you add is copied into Lendey.

Your PIN and fingerprint

When you set a PIN, Lendey stores a one-way scrambled form of it on your phone, never the PIN itself. With biometric unlock turned on, Android runs the check and Lendey receives a single yes or no. Your fingerprint or face data stays with Android, and Lendey never sees it.

Reminders are scheduled on your phone

The daily collection reminder is built and scheduled on your phone, and set again after your phone restarts. Lendey asks to show notifications when you turn the reminder on. There's no push server: nothing you receive from Lendey was sent from somewhere else.

Calls and texts go through your phone's own apps

Tapping Call beside a lendee hands their number to your phone app. Tapping Message opens your messaging app with a text to them already written from your message template: you send it there yourself, or not at all. Lendey doesn't see or record the call or the text.

What you share goes wherever you send it

Exporting a report writes a file, and sharing a receipt makes a picture. Each is handed to Android's share sheet, as is a note's file when you open it in another app. After that it's an ordinary file: where it goes, and who can read it, is up to you.

Backups and moving to a new phone

Android's cloud backup is turned off for Lendey, so your book isn't saved to your Google Account. When you set up a new phone and copy your apps and data across, Android brings your book, its files and your lock settings with it, so the book arrives on the new phone locked under the same PIN.

Deleting your data

Settings → Erase everything deletes your book from your phone. There is no undo. Uninstalling Lendey removes its data too.

If this ever changes

Lendey's privacy comes from how the app is built, and there's no server to change its mind later. If this policy changes, the new text is published here and the date below moves with it.