Ledgers and invitations

Every user owns exactly one ledger. You can also join ledgers other people own, as editor or viewer. Ownership is permanent. You cannot hand your ledger to someone else.

Switch the active ledger from the header. In-app pages then read and write that ledger. MCP credentials do not follow the header switch. Each key or OAuth grant is stuck to the ledger chosen when you created it.

Members vs travelers

Members log in. People are traveler records. Inviting someone does not create a traveler, and adding a traveler does not give them a login. See People and travelers.

Roles

• Owner. Full control, including billing and invitations. There is one owner, and it is the account that created the ledger.
• Editor. Can edit journeys and, on Pro, stays, expenses, and people.
• Viewer. Read only, including on a Pro ledger.

Invitations

Invites are Pro. Free ledgers support only the owner (1 member). Pro ledgers support up to 4 members including the owner. Open invitations count toward that cap until they expire or are cancelled.

1. Owner opens Settings and invites an email as editor or viewer.
2. The invitee opens the email link, which goes to Settings with an inviteToken.
3. They must be signed in with that same email. The link expires after 7 days.

Cancel an unused invite from Settings. After you join, switch to that ledger in the header.

If the invite fails, see Login and invitation problems.