What Lejer keeps, and what it doesn't do.
Lejer stores the bills a household shares so everyone can see what they owe. This page says what that involves, in plain words.
What we collect
Your account.
Your email address, which is how you sign in, and the name you give your household.
Your household's records.
Its members, its bill types, each bill's amounts and dates, who paid what and when, and the settings you choose.
Statements and documents.
The PDFs attached to bills and any documents a household uploads, stored privately for that household.
The waitlist.
If you joined the list before launch: your email address, when you joined, and a hash of your IP address (to clear out spam). It's used for one note when Lejer opens.
Email delivery logs.
For every email we send: what kind it was, whether it went out, when, and a hash of the address. Never the message itself.
Who processes it
Three companies run the pieces for us: Vercel hosts the app and stores the uploaded files, Neon runs the database, and Resend delivers the email. Each handles data only to provide that service.
What we don't do
No ads, and we never sell or share your data. Lejer never holds or moves money: it records that a payment happened, and nothing more.
Cookies are for signing in only: one keeps you signed in, one remembers which household you opened last. There is no tracking.
The operator
To run the service, the operator has an admin screen that shows household metadata and counts: names, settings, how many members and bills, when things last happened, whether email is going out, and each member's name and email address. It shows no bill amounts or statements. From it the operator can delete an account or a household outright, which is how abuse or a request sent to the contact address gets handled.
The operator also has technical access to the database and file storage for maintenance, and looks at a household's bills or statements only to fix a problem that household reports.
The operator may email account holders about the service itself: a change to how it works, something that needs doing, or that it's open. Those emails carry an unsubscribe link, and you can turn them off any time under Account (“Updates about Lejer”). Sign-in codes and notices about your own household aren't affected. Nothing promotional is sent.
Deleting your data
A household deletes itself from its Settings page: its admins agree to it, there is a week to change your mind, and then every bill, payment, statement and document is gone. To leave a household without deleting it, use “Leave” on the same page.
Contact
Questions about any of this go to hello@uselejer.com.
Lejer is a trade name of Aaron Perkel LLC.