Ledgers and invitations

Every user owns exactly one ledger. You can also join ledgers other people own, as editor or viewer. Ownership is permanent. You cannot hand your ledger to someone else.

Switch the active ledger from the header. In-app pages then read and write that ledger. MCP credentials do not follow the header switch. Each key or OAuth grant is stuck to the ledger chosen when you created it.

Members vs travelers

Members log in. People are traveler records. Inviting someone does not create a traveler, and adding a traveler does not give them a login. See People and travelers.

Roles

• Owner. Full control, including billing and invitations. There is one owner, and it is the account that created the ledger.
• Editor. Can edit journeys, stays, expenses, and people while the ledger has trial or lifetime access.
• Viewer. Read only, including during trial and with lifetime access.

Invitations

Trial and lifetime ledgers support up to 4 members including the owner. Open invitations count toward that cap until they expire or are cancelled. After trial expiry, membership changes are unavailable; all existing members retain read access. Each ledger has its own trial: joining or adding members never restarts it and never changes access to another ledger.

1. Owner opens Settings and invites an email as editor or viewer.
2. The invitee opens the email link, which goes to Settings with an inviteToken.
3. They must be signed in with that same email. The link expires after 7 days.

Cancel an unused invite from Settings. After you join, switch to that ledger in the header.

If the invite fails, see Login and invitation problems.