Last updated: September 23, 2026
IOLTAlign ("the app") is published by Baker Ventures LLC ("we," "us"). This policy explains what the app does with your information — and, just as importantly for a trust-accounting tool, what it does with your clients'.
We never receive your data. There is no account, no sign-in, and no server of ours for the app to talk to. Every trust account, client ledger, transaction, and reconciliation you enter is written to a database on your own device and stays there. The app makes no network requests of any kind.
This app holds client trust ledger data: client names, matter names, the dates and amounts of money you hold in trust for each of them, and what you did with it. That is among the most sensitive information a law practice keeps. It is very likely confidential client information under your jurisdiction's equivalent of ABA Model Rule 1.6, and some of it may be privileged. A leak is not a privacy inconvenience — it is a professional-responsibility problem.
The app is built around that fact: it takes no copy. Nothing is uploaded, synced, backed up to us, or shared with any vendor, so there is no server of ours to breach, no employee of ours who can read your ledgers, no subpoena that can be served on us for them, and no analytics vendor who has ever seen a client name.
The trade is that the security of this data is on you and on your device. Use a device passcode/biometrics and full-device encryption, keep the OS updated, and be deliberate about where your device's own backups go (an iCloud or Google device backup may include this app's data — that is your operating system's backup, governed by Apple's or Google's terms, not something this app initiates or controls). See section 5.
The app transmits nothing to us or to anyone else. The following is stored locally on your device in a SQLite database (iolta-recon.db) inside the app's own sandbox:
| What is stored | Where it comes from | Every use it is put to | | --- | --- | --- | | Trust accounts — display name, jurisdiction, created date | You type them | Grouping ledgers and transactions; labelling reconciliations | | Client ledgers — client name, matter name | You type them | Showing per-client balances; the client-ledger total in a three-way reconciliation; appearing in a report you choose to export | | Transactions — date, type (deposit, disbursement, transfer, fee), description, amount, cleared/outstanding flag | You type them | Computing register and client-ledger balances; the reconciliation; the no-overdraw check that refuses to let one client's funds cover another's; appearing in a report you choose to export | | Bank statement figures — period end date, ending balance | You type them | The bank side of the three-way reconciliation | | Reconciliation history — the balances, whether they tied, the number of findings, and the frozen report text, with a timestamp | Generated when you run a reconciliation | Letting you reopen what was actually reported for a past period rather than a number recomputed today | | App settings — whether the monthly reminder is on, which day it fires, the OS identifier of that scheduled notification, and a local flag used only to exercise the locked/unlocked export states in development builds | Set by you | Scheduling and cancelling the reminder; deciding whether the export button shows locked or unlocked |
That is the complete list. There is no hidden second category.
What the app does not collect at all: no account credentials; no name, email address, phone number, or postal address for you; no bar number; no payment or financial information about you; no bank login, and no connection to any bank — you type statement figures in, the app never links to an institution; no location; no contacts, photos, camera, microphone, or calendar access; no advertising or device identifier; no crash reports; no usage or diagnostic telemetry. Beyond notifications (below), the app requests no operating-system permissions.
No tracking. The app does not track you across apps or websites, contains no advertising SDK, and builds no profile. There is nothing about you or your clients for us to sell or share, and we do not.
No AI or language model is used anywhere in the app. Nothing you type — no client name, no matter, no amount — is sent to a model provider.
If you turn on the monthly reconciliation reminder, the app asks for notification permission and schedules one repeating local notification on your device. It is local-only: nothing is sent to a push server, the app registers for no remote push, and the remote-push entitlement is explicitly stripped from the build. The reminder text is fixed and generic — "Monthly trust reconciliation / … check that bank, book, and client ledgers still tie out" — and never contains a client name, a matter, or an amount, because a lock screen is not a private place for client information. Turning the reminder off in Settings cancels it. The reminder is entirely optional; the app works fully without granting notification permission.
There are none. The app contains no analytics SDK, no crash-reporting SDK, no advertising SDK, no attribution SDK, and no backend of ours. It makes no network requests — it functions identically in airplane mode. No third party receives your data from this app, and consequently no third party processes, stores, or discloses it on our behalf.
Two clarifications, since a reader may reasonably wonder:
Retention. Your data stays on your device for as long as you keep it there. We hold nothing, so there is no retention period on our side, no backup of yours we keep, and no record we could produce about you or your clients if compelled.
A caution specific to this app. Trust-accounting records are normally subject to a jurisdictional retention requirement (commonly five to seven years after the representation ends — check your own rule). This app stores records only on one device. It is not a records-retention system, and deleting data here does not satisfy, and may conflict with, your duty to preserve trust records. Keep your authoritative records the way your jurisdiction requires — exported reports, your accounting system, or paper — independently of this app.
Deletion. Uninstalling the app removes its entire local database from the device: every trust account, ledger, transaction, bank statement figure, and saved reconciliation. There is no account to close afterwards and no server copy to request the deletion of, because none was ever created. This version of the app does not provide an in-app "delete this account/ledger" action — deleting individual records is a planned feature, and until it ships, uninstalling is the way to remove data from the device. Any report you already exported and shared is outside the app's control; delete it wherever you sent it.
Withdrawing consent. Because the app collects, transmits, and shares no personal data, there is no data-processing consent to grant or revoke, no tracking prompt to decline, and no marketing list to leave. The one permission the app can ask for is notifications, which you can decline outright, turn off in the app's Settings screen, or revoke at any time in your device's system settings.
Rights of access, correction, portability, and erasure (GDPR, CCPA/CPRA and similar laws). The data is on your device and you can read it in the app at any time. This version has no way to edit or delete an entry once it is recorded, so correcting a mistake means recording an offsetting transaction, and removing data means uninstalling. We cannot do any of it for you because we never receive it. For your clients' information, you — not us — are the controller, not a processor relationship with us.
IOLTAlign is a professional tool for attorneys and law-firm staff. It is not directed at children and collects no personal data from anyone of any age.
The app tracks transactions and reconciles balances. It is not legal or accounting advice, it never tells you your trust account is compliant with any jurisdiction's rule, and using it creates no professional relationship. See the Terms of Use.
If the app ever changes what it stores, contacts, or shares, this page and the in-app privacy screen will be updated in the same release that makes the change, and the date above will change with it.
Questions about this policy, or about privacy in the app: rsb.baker+ioltalign@gmail.com
Baker Ventures LLC