Private beta
The private app for a keyholder and the husband she keeps. Check-ins, the deck, nights on the calendar, a signed agreement, and a chat that is only ever the two of you. One app, two phones, nothing anywhere else.
You are on the list
A few phones, before anyone else.
Ledger is in private beta. It is not in the app stores, and it is not going to be: both stores turn away apps with adult content, however private the use. So it reaches its testers the way developers hand builds to their own: installed straight from this page, signed like any store app, and updated over the air. You are one of a very small number of people with it on their phone.
What it does
Nothing she has to invent.
Ledger records the dynamic the two of you already have and gives it structure, memory, and a little theatre. It never enforces; it remembers, reminds, and makes the next move easy.

Your own intimacy and lifestyle advisor, in the app, at any hour. Trained in the latest sex therapies and current on modern marriage, lifestyles, and kinks. She knows the record, remembers you, speaks in her own voice, can set things up for you, and reaches out on her own. Meet her.
Daily check-ins, every lock and unlock, streaks and longest runs, and milestones the two of you cross together. Honest by design: nothing is ever deleted.
Fifty-two cards and a joker across four suits: her pleasure, service, denial, and receptive play. She decides when one is drawn, and she outranks every card.
Plan a pegging night, a date, a training night, or eleven other kinds. A standing schedule for plug nights, service, and inspections. It all lands on one calendar.
Messages, pictures, GIFs, and links, encrypted on the phone that sends them. Share memes straight in from any app. One tap jingles the keys on his phone wherever he is.
Practical guides for both sides, scripts she reads aloud and runs from her phone, and quizzes that end in a verdict. Written for the two of you, not for a crowd.
A living contract in sections, each signed in cursive by the one it binds. Every version kept. A proposal from either side; a signature from the other makes it current.
Discreet notifications on the other phone for check-ins, requests, tasks, and messages. A home-screen tile with the day count and one quiet line, and never a name.
Morning and good-night rituals, a wheel of outcomes she can edit and overrule, a weekly review with one line from each of you, and a photo check-in only she can ask for.
Meet Mila
Warm, direct, and never shocked.
Mila is Ledger’s Modern Intimacy & Lifestyle Advisor: a sex-positive, kink-literate counsellor who lives inside the app and belongs to you and your partner. Trained in the latest sex therapies in use today, and up to date on modern marriage theory, the lifestyles people actually live, and every kink you might bring her: keyholding, denial, pegging, service, and the rest of a marriage. Ask her anything, at any hour, and she answers like a friend of yours who just so happens to be a therapist.
Mila


35 different reactions to help you gauge her thoughts on the conversation
That a locked husband and a wife who holds the key is one of the healthiest shapes a modern marriage can take. She is not neutral about it, and she says so.
A doctor, or a substitute for talking to each other. If something sounds like a health problem or one of you not consenting, she says so and points you to a professional.
A look inside
Everything you need to keep him locked, teased, and obedient.
His home
12:40 PMThe chat
The deck
How it works
Private forever.
There is no account to browse and no one to find. One of you starts; the other joins with a code; the two of you agree a phrase that becomes the key to everything.
One button for Android, one for iPhone, both below.
No password to remember. A six-digit code arrives by email and you are in.
The first phone picks a role and shows a short code. The second enters it. That pairs you, and only you.
Typed on both phones, never sent anywhere. It scrambles every message, note, and picture before it leaves the phone.
Privacy
Not even us.

One phrase. Two phones. No one else.
Install
Distributed privately, kept up to date on its own.
Ledger is not listed on the App Store or Google Play, and that is a choice, not a shortcut. Both stores prohibit applications with adult sexual content, however private, consensual, and tastefully made. Rather than strip the app of what it is for, we distribute it directly: the same signed builds, delivered by the same infrastructure that ships the store versions of other apps, with updates that arrive on their own. Nothing about it is less finished. It is simply yours, installed by you.
About two minutes. Any Android phone from the last several years.
Install on AndroidNot from the App Store. Apple does not allow apps with sexual content in its store, so Ledger reaches an iPhone the way developers hand builds to their testers: the app is signed for its testers' phones and installed straight from this page. It is the same kind of app, delivered privately to its testers. Nothing about it shows up anywhere else.
About three minutes. Open this page in Safari on the iPhone.
Install on iPhone
Questions
Both stores prohibit apps with adult sexual content, regardless of how private or consensual the use is. Ledger would have to become a different, emptier app to be listed. Instead it is delivered privately: on Android you install the app file directly, and on iPhone the app is signed for its testers' phones and installed from this page, the route developers use for their own testers. It is built and signed the same way store apps are and updates itself over the air. It is not listed anywhere, which also suits an app meant for exactly two people.
Each question goes to her with the record and her memory of you, over an encrypted connection, and comes back as her answer. Her memory of you lives on your phone and nowhere else; her memory of the two of you lives in the joint room, encrypted like the chat. What one of you tells her alone is never repeated to the other unless that person chooses to share it. Her answers come from a large language model; nothing is kept there.
No. Once installed, it runs on its own from anywhere with a signal. Updates arrive on their own the next time you open it.
No. A couple is exactly two people, paired by a code, and everything personal is scrambled with a phrase that exists only on your phones.
Install again, sign in with the same email, and type the same phrase. Everything is where you left it.
No. There is no button for it anywhere, and the server refuses it too. Requests go to her; she decides. Health pauses are the one thing either of you can do alone, from any screen.
Either of you can pause everything for health at any time. Deleting everything takes both of you confirming, and then it is gone from the server for good.