Private beta

The private app for a keyholder and the husband she keeps. Check-ins, the deck, nights on the calendar, a signed agreement, and a chat that is only ever the two of you. One app, two phones, nothing anywhere else.

You are on the list

Welcome to the Beta Testing Program.

A few phones, before anyone else.

Ledger is in private beta. It is not in the app stores, and it is not going to be: both stores turn away apps with adult content, however private the use. So it reaches its testers the way developers hand builds to their own: installed straight from this page, signed like any store app, and updated over the air. You are one of a very small number of people with it on their phone.

What being a tester means

  1. You install it from here, not from a store. On Android that is one download. On iPhone that is one tap in Safari.
  2. It updates itself. Most changes arrive quietly the next time you open the app. Now and then a bigger change needs a fresh install from this page, and the app will tell you.
  3. Things will change under you. Screens move, wording gets better, features appear. That is the beta. Nothing you have logged is ever lost by an update.
  4. If something is wrong, use the report feature. More > Report a problem, or the Beta card in Settings. It goes to the people who make Ledger and nobody else.
  5. It stays between the two of you. Only ever. Being a tester adds nobody else: a couple is exactly two phones. Everything personal you write or send, the messages, the pictures, the notes, the agreement, is locked with strong encryption on the phone before it leaves, using a key made from a private phrase that only your two phones hold. The server keeps scrambled data it cannot read. The people who make Ledger cannot read it either, and neither could anyone who ever got hold of it. Only your two phones can turn it back into words and pictures. Nobody else, ever.

What it does

Everything a keyholder needs.

Nothing she has to invent.

Ledger records the dynamic the two of you already have and gives it structure, memory, and a little theatre. It never enforces; it remembers, reminds, and makes the next move easy.

Mila

Your own intimacy and lifestyle advisor, in the app, at any hour. Trained in the latest sex therapies and current on modern marriage, lifestyles, and kinks. She knows the record, remembers you, speaks in her own voice, can set things up for you, and reaches out on her own. Meet her.

The record

Daily check-ins, every lock and unlock, streaks and longest runs, and milestones the two of you cross together. Honest by design: nothing is ever deleted.

The deck

Fifty-two cards and a joker across four suits: her pleasure, service, denial, and receptive play. She decides when one is drawn, and she outranks every card.

Nights & the calendar

Plan a pegging night, a date, a training night, or eleven other kinds. A standing schedule for plug nights, service, and inspections. It all lands on one calendar.

Chat, and the keys

Messages, pictures, GIFs, and links, encrypted on the phone that sends them. Share memes straight in from any app. One tap jingles the keys on his phone wherever he is.

Guides & quizzes

Practical guides for both sides, scripts she reads aloud and runs from her phone, and quizzes that end in a verdict. Written for the two of you, not for a crowd.

The agreement

A living contract in sections, each signed in cursive by the one it binds. Every version kept. A proposal from either side; a signature from the other makes it current.

Alerts & the widget

Discreet notifications on the other phone for check-ins, requests, tasks, and messages. A home-screen tile with the day count and one quiet line, and never a name.

Rituals, roulette, reviews

Morning and good-night rituals, a wheel of outcomes she can edit and overrule, a weekly review with one line from each of you, and a photo check-in only she can ask for.

Meet Mila

A sex therapist in your pocket.

Warm, direct, and never shocked.

Mila is Ledger’s Modern Intimacy & Lifestyle Advisor: a sex-positive, kink-literate counsellor who lives inside the app and belongs to you and your partner. Trained in the latest sex therapies in use today, and up to date on modern marriage theory, the lifestyles people actually live, and every kink you might bring her: keyholding, denial, pegging, service, and the rest of a marriage. Ask her anything, at any hour, and she answers like a friend of yours who just so happens to be a therapist.

Mila

Mila

35 different reactions to help you gauge her thoughts on the conversation

What she does

  • Answers, properly. How to raise something without it landing as criticism. How to pace a change. What a feeling means. A date night for Friday that she leads, under a hundred dollars. What he should cook tonight.
  • Knows the record. Every question carries the day count, the last release, the week’s theme, the nights on the calendar, the rules, and the quizzes you chose to share. She talks about your marriage, not marriages in general.
  • Remembers you. A private room for each of you, where she keeps a short note about you that never leaves your phone, and a joint room where she speaks to both of you at once.
  • Speaks. Tap Hear it and she reads her reply aloud, in her own voice, sentence by sentence as she writes. Tap Talk and she listens.
  • Acts. Ask her to set the week, plan a night, write a rule, assign a task, place a wager, send a command. It appears as a card; nothing happens until you tap Do it.
  • Reaches out. Turn it on and she plans a thought or two a day, about the two of you, at times she picks. A discreet notice on the phone; the words wait in her room.
  • Writes on Sundays. A short note to you both about the week: what went well, one thing to try, one question to answer together.

What she believes

That a locked husband and a wife who holds the key is one of the healthiest shapes a modern marriage can take. She is not neutral about it, and she says so.

What she is not

A doctor, or a substitute for talking to each other. If something sounds like a health problem or one of you not consenting, she says so and points you to a professional.

A look inside

Easy to navigate, loaded with tools.

Everything you need to keep him locked, teased, and obedient.

Locked
Day 12
Locked is normal · since Sep 1
Today, from her
When you feel the cage, feel me. That is what it is for.
✓ Check inNot yet today
✉ Make a requestCleaning, travel, more
♠ Draw a cardShe decides what it means
⚷ Log an unlockThe honest path
♥ HomeDeckCalendarMore

His home

K
Keyholder
Just the two of you. Encrypted on both phones.
Kneel when I get home. Do not touch the cage today.8:12 AM
Yes ma’am.8:13 AM · seen
Good. I have plans for you.8:15 AM
12:40 PM
📷🖼Message KeyholderSend

The chat

She drew
Queen of Hearts
The Queen: she chooses how she wants to be spoiled.
A card from the deck
Home♠ DeckCalendarMore

The deck

How it works

Two phones, paired once.

Private forever.

There is no account to browse and no one to find. One of you starts; the other joins with a code; the two of you agree a phrase that becomes the key to everything.

1

Install on both phones

One button for Android, one for iPhone, both below.

2

Sign in with an email code

No password to remember. A six-digit code arrives by email and you are in.

3

One starts, one joins

The first phone picks a role and shows a short code. The second enters it. That pairs you, and only you.

4

Agree the private phrase

Typed on both phones, never sent anywhere. It scrambles every message, note, and picture before it leaves the phone.

Privacy

Built so no one else can read it.

Not even us.

  • Your private phrase never leaves your phones. Everything personal is scrambled with it before upload and unscrambled only on the phone that opens it.
  • Messages, pictures, notes, the agreement, and the daily lines are stored as ciphertext. The server holds only timestamps, lock states, and card ids, which run the calendar and reminders.
  • Quiz answers are readable only by the one who wrote them. The other phone only ever sees what you both said yes to.
  • A picture reaches a phone’s photo library only when someone taps Download on it. Nothing saves itself.
  • No analytics, no crash reporting, no tracking, no ads. Ever.
  • Either of you can pause everything for a health reason with no permission needed. Both of you together can wipe the whole thing.
The private phrase screen

One phrase. Two phones. No one else.

Install

Get Ledger on your phones.

Distributed privately, kept up to date on its own.

Ledger is not listed on the App Store or Google Play, and that is a choice, not a shortcut. Both stores prohibit applications with adult sexual content, however private, consensual, and tastefully made. Rather than strip the app of what it is for, we distribute it directly: the same signed builds, delivered by the same infrastructure that ships the store versions of other apps, with updates that arrive on their own. Nothing about it is less finished. It is simply yours, installed by you.

Android

About two minutes. Any Android phone from the last several years.

Install on Android
  1. Open this page on the Android phone and tap the button. The app file downloads straight away.
  2. Open it from the download notification.
  3. If the phone asks, allow installs from your browser, then tap Install again.
  4. Open Ledger and tap Start on this phone. Enter the invite code from the message that brought you here, tap Join, then type the private phrase your partner tells you.
  5. Already have it? Installing over an older copy keeps everything in it.

iPhone

Not from the App Store. Apple does not allow apps with sexual content in its store, so Ledger reaches an iPhone the way developers hand builds to their testers: the app is signed for its testers' phones and installed straight from this page. It is the same kind of app, delivered privately to its testers. Nothing about it shows up anywhere else.

About three minutes. Open this page in Safari on the iPhone.

Install on iPhone
  1. Open this page in Safari on the iPhone. The button only works in Safari.
  2. Tap Install on iPhone, then Install when the iPhone asks. Ledger appears on your home screen and fills in over a minute or so.
  3. Open Ledger and tap Start on this phone.
  4. Enter the invite code from the message that brought you here, and tap Join. That pairs your phone with your partner's, and with nobody else's.
  5. Type the private phrase your partner tells you, exactly as they typed it. Then say yes to notifications, so the two of you can reach each other.

Questions

Asked before you ask.

Why is it not on the App Store or Google Play?

Both stores prohibit apps with adult sexual content, regardless of how private or consensual the use is. Ledger would have to become a different, emptier app to be listed. Instead it is delivered privately: on Android you install the app file directly, and on iPhone the app is signed for its testers' phones and installed from this page, the route developers use for their own testers. It is built and signed the same way store apps are and updates itself over the air. It is not listed anywhere, which also suits an app meant for exactly two people.

What does Mila see, and where does it go?

Each question goes to her with the record and her memory of you, over an encrypted connection, and comes back as her answer. Her memory of you lives on your phone and nowhere else; her memory of the two of you lives in the joint room, encrypted like the chat. What one of you tells her alone is never repeated to the other unless that person chooses to share it. Her answers come from a large language model; nothing is kept there.

Does it need a computer, a home network, or anything running?

No. Once installed, it runs on its own from anywhere with a signal. Updates arrive on their own the next time you open it.

Can anyone else join or see us?

No. A couple is exactly two people, paired by a code, and everything personal is scrambled with a phrase that exists only on your phones.

What if one of us gets a new phone?

Install again, sign in with the same email, and type the same phrase. Everything is where you left it.

Does he ever get to approve his own unlock?

No. There is no button for it anywhere, and the server refuses it too. Requests go to her; she decides. Health pauses are the one thing either of you can do alone, from any screen.

Can we take a break, or delete it all?

Either of you can pause everything for health at any time. Deleting everything takes both of you confirming, and then it is gone from the server for good.