Ledger —A private-banking app that treats wealth like a calm room, not a casino floor..
Problem, approach, outcome.
A private-banking app that felt like a spreadsheet at rest and a casino when engaged — trust leaked out of the surface.
One number at display size, biometric confirmation instead of modal chains, and a dark serif system reserved for value.
Session length shortened, but engagement quality — completed intents per open — rose sharply.
Wealth apps have two default settings. They either look like spreadsheets — dense, punishing, priced for accountants — or like casinos, gamifying the exact behavior a private-banking customer is paying not to feel. Ledger is a study in the third option: an app where the person opening it at 9pm on a Tuesday feels the same way they feel walking into a private-banking lounge. Quiet. Considered. In control.
The design starts from a single decision: one glance is worth more than one hundred features. The home surface answers one question — where do I stand today — with serif numerals set at display size, breathing space around them, and the smallest possible amount of chrome. Movement is limited to what changes; color is limited to what needs attention. Everything else recedes.
Biometrics carry the flows that would otherwise demand friction. Approvals, transfers, statements: Face ID unlocks intent, the interface confirms it, the transaction completes. No modal chains, no fake progress bars, no "are you sure" dialogs stacked on "are you really sure." Trust is designed into the surface, not requested from the user with legal language.
The dark theme is not a preference toggle. It is the product. Wealth software that ships in the same off-white as everything else on the App Store cheapens the money it holds. Ledger's palette — near-black surfaces, ivory serif, a single restrained accent — signals what the app takes seriously: your attention, your assets, and your evening.
One number, not a dashboard.
The home screen answers one question at display size. Every other number is a tap away — and only a tap.
Biometric as the primary verb.
Face ID replaces the modal chain. Consent is a look; execution is a tap; a single haptic confirms.
Serif for value, sans for chrome.
Numerals in a display serif signal seriousness. Everything supporting them stays in a quiet sans.