Gun Ledger - Privacy Policy
Effective date: October 21, 2026 | App version: 1.2 and later | Developer: Liberty Apps
WHO WE ARE
Gun Ledger ("the app") is an Android app published on Google Play by Liberty Apps, Kansas, USA. If you have a question about this policy, email libertygunsales@gmail.com.
THE SHORT VERSION
The app does not collect, send, sell or share any of your information. Everything you put into it stays on your phone. The app has no internet permission, so it cannot connect to the internet, to our computers or to any cloud service. We, the developer, never receive or see your records. The only outside contact is the optional one-time unlock, which is bought through the Google Play Store app on your phone. Google Play handles the payment; the app never sees your card or bank details.
WHAT THE APP KEEPS ON YOUR PHONE
To work as a record book, the app saves the following only on your phone, in the app's private storage that other apps cannot open:
- Firearm records you type in: for example make, model, serial number, type, caliber or gauge, barrel length, finish, importer, accessories, modifications, notes, and a history of changes.
- Acquisition and disposition details you choose to enter: dates, names and addresses of the people or dealers involved, dealer FFL numbers, an optional ID or driver's license note, and prices.
- NFA details you choose to enter: item type, ATF form, tax stamp or control number, approval date, and who the item is registered to.
- Photos you add from the camera or gallery. The app makes its own resized copy and removes the location (GPS) data from it. The original picture in your gallery is not changed.
- Optional owner details you type in Settings (your name, address, phone, email). They are used only to print on your own PDF reports.
- Your settings: color theme, font, lock settings, and disguise settings.
- Whether the one-time unlock has been bought (a simple yes / no / pending note), so the app works offline.
- Safety copies: the app automatically keeps up to 30 earlier versions of your book, plus a copy made just before any restore, so a mistake can be undone.
Since version 1.3.2 all of this is stored encrypted on your device (AES-256-GCM). The encryption key is created and kept by your phone's Android Keystore, in its security hardware where the phone has it. It never leaves the phone, it is not in backups, and we never have it.
ENCRYPTION ON YOUR PHONE (VERSION 1.3.2 AND LATER)
Your records, photos, automatic safety copies and custom disguise name and picture are encrypted in the app's private storage. When you update from an older version, the app encrypts the existing book the first time it opens, checks the encrypted copy, and only then removes the unencrypted one.
Optional Passphrase lock. If you turn it on, the book also needs a passphrase that only you know, so it can't be opened in the app even by someone who has your unlocked phone. The passphrase is never stored; the app keeps only a key made from it (PBKDF2-SHA256 with a random salt). The app locks again when you leave it or after the time you choose, and then forgets the key. If you forget the passphrase, your data cannot be recovered, by you or by us. Make a backup first.
Encryption protects your data on the device. It can't protect what you choose to share (for example a PDF you email), and while the app is open and unlocked anyone holding the phone can see what's on the screen. Temporary copies made for sharing a PDF or making a backup are kept in the app's private storage only briefly and are overwritten and deleted afterwards.
WHAT WE COLLECT
Nothing. There is no account and no sign-in. The app contains no advertising, no analytics, no crash reporting and no tracking. The only third-party code is Google's Play Billing Library, used for the one-time unlock, with its usage-logging part left out. It does not read your contacts, location, call log, messages or other apps. It does not use the Android advertising ID.
PHONE PERMISSIONS
- Fingerprint / face unlock (USE_BIOMETRIC): used only if you turn it on. Android checks your fingerprint or face; the app only gets a yes or no answer and never receives your fingerprint or face data.
- No camera permission. When you take a photo, the app asks your phone's own camera app to take it and hand the picture straight back.
- No storage or photo-library permission. Pictures are chosen with Android's photo picker, and backup files are saved and opened with Android's file picker, so the app only sees the files you pick.
- No internet permission. The app's screens are built into the app itself, and it blocks every attempt to load anything from the internet.
- Google Play billing (com.android.vending.BILLING): lets the app ask the Google Play Store app on your phone to sell or restore the one-time unlock. It does not let the app use the internet.
PURCHASES (ONE-TIME UNLOCK)
The app is free for up to 3 guns. A one-time in-app purchase unlocks unlimited guns and disguise mode. Google Play handles the whole payment. You pay with the payment method in your Google Play account, and the app never sees your card or bank details. The app only learns from Google Play whether your account owns the unlock, and remembers that on your phone. We, the developer, do not receive your purchase details from the app. Google gives developers the order records it needs to process payments, refunds and taxes in Play Console (for example an order number, the date, the country and the amount), under Google's own privacy policy. We use them only for refunds, taxes and support, and never link them to your records, which we never see.
WHEN INFORMATION LEAVES YOUR PHONE
Only when you choose to send it, and only to the place you pick:
- PDF reports (stolen-gun report, transfer record, whole book). When you tap Share, Android's share menu opens and you choose the app or person (for example email, text, a printer, or Files). The app keeps a short-lived temporary copy in its private storage and clears it automatically later.
- Backup files. When you make a backup, you choose where the file is saved (for example your phone's Downloads folder, a USB stick, your computer, or a cloud storage service you use).
Once you send a PDF or save a backup somewhere, what happens to it there is controlled by you and by the service you chose, under that service's own privacy policy.
BACKUPS
The app's backup is one password-protected file that holds your whole book (including owner details) and your photos. It is encrypted with AES-256-GCM using a key made from the password you choose (PBKDF2-SHA256). Without that password nobody, including us, can read it, and we cannot recover a forgotten backup password. Your PIN, fingerprint setting, disguise setting and custom disguise picture are not included in backups.
The app turns off Android's automatic Google cloud backup and phone-to-phone copy for its data, so your records are not uploaded to Google by the app. If you want a copy off the phone, use the app's own encrypted backup.
PIN LOCK
If you set a PIN, the app stores only a salted, one-way scrambled form of it (a hash), never the PIN itself. After several wrong tries the app makes you wait longer before trying again. Since version 1.3.2 the app blocks screenshots and blanks its preview in the recent-apps list on every screen. We cannot recover a forgotten PIN.
DISGUISE MODE (OPTIONAL)
The app has an optional disguise mode, described in its Google Play listing. If you turn it on, the app's icon and name on your phone change to one of three built-in looks (Gem Drop Garden, Work Files or OBD Check) or to a name and picture you choose, and a PIN is required each time the app opens. If you use your own picture, the app crops it and stores it only in its private storage, encrypted; your phone's home screen keeps its own copy of the shortcut picture, as it does for any shortcut. Turning the disguise on or off does not send anything anywhere and does not change your records. You can turn it off at any time in Settings › App appearance.
HOW LONG INFORMATION IS KEPT, AND HOW TO DELETE IT
- Your records stay on your phone until you delete them or uninstall the app.
- In the app you can move a record to the Trash and then choose Delete forever, which also deletes its photos. A record deleted forever can still be inside the automatic safety copies until newer saves replace them (the app keeps the 30 most recent).
- Uninstalling the app erases everything it stored on your phone, including safety copies and the encryption key.
- Backup files and PDFs you saved or sent somewhere else stay there until you delete them.
- Because we never receive your information, we have nothing to look up, hand over or delete for you. You are always in full control of it.
CHILDREN
The app is meant for adults 18 and over. It is not directed at children, and we do not knowingly collect information from anyone, including children.
GOOGLE PLAY
The app is downloaded through Google Play. Google handles your Play Store account, the in-app purchase and payment, refunds and downloads under Google's own privacy policy (policies.google.com/privacy). We do not receive any of your records from Google.
NO SALES OF FIREARMS
The app is a personal record book. It does not sell, buy, list, advertise or arrange the transfer of firearms, ammunition or accessories, and it cannot contact anyone.
CHANGES TO THIS POLICY
If we change this policy, we will post the new version at this same web address and update the date at the top. If the app ever starts collecting any information, this policy and the app's Google Play listing will be updated before that version is released.
CONTACT
Liberty Apps, Kansas, USA. Email: libertygunsales@gmail.com