Your ledger is stored on your iPhone. iCloud sync is on by default and keeps a copy in your own iCloud account, which we cannot read.
Everything you enter — balances, income, bills, debts, savings goals, and similar records — is stored on your iPhone. We do not keep a copy of your ledger on any server we operate.
iCloud sync is turned on by default so your numbers survive a lost phone and follow you to a new one. Sync stores your data in the private database of your own iCloud account, under Apple’s terms, security model, and privacy practices. We have no access to it.
You can turn sync off at any time in Settings. Turning it off stops future syncing; whatever is already in your iCloud stays there until you remove it through your Apple account. If you delete the app while sync is off, your numbers are deleted with it.