Privacy Policy
Effective October 11, 2026
This policy covers the Penny budgeting app and website, operated by the Penny team. Contact pennyappteam@gmail.com with privacy questions or requests.
Information in the app
Penny processes the information you enter to calculate and save your budget: your name, age range, onboarding answers, available money, income timing, bills, envelope names and balances, spending entries, and savings goals. Unfinished onboarding drafts are saved locally on your device so you can resume setup. The local draft is removed after your plan saves successfully. When you save progress, your account profile and budget are stored in our cloud database provided by Convex, so you can sign in again and access your plan. Penny does not connect to bank accounts, hold money, or request bank passwords.
Sign in with Apple and guest access
You can explore setup as a guest. Guests can purchase or restore a subscription before creating an account. After subscription access is confirmed, you can save your plan with Sign in with Apple or email and password. Apple provides an app-specific identifier and may provide your name and email, including a private relay email if you choose Hide My Email. We store this account information with Convex. Apple authorization tokens are processed on our server to support sign-in and revoke access when you delete your account. Penny does not receive your Apple password.
Email accounts store your email address and a password hash through Convex Auth. Authentication session tokens are stored in secure storage on your device. We use a Penny account identifier with RevenueCat to associate subscription access with your account. Guest sessions use generated identifiers.
Purchases and subscriptions
Apple handles iOS payments; Penny does not receive your full payment card details. We use RevenueCat to validate purchases, restore access, and determine subscription status. This involves purchase history, product and transaction identifiers, an automatically generated app user identifier, and technical information such as app version, platform, locale, and currency. Subscription reporting also helps us understand how our paid plans perform.
See Apple’s privacy policy and RevenueCat’s privacy policy for their practices.
App analytics
We use PostHog to understand onboarding completion and how features are used. Events include screens visited, setup steps completed, envelope counts and types, transaction types, reminder settings, and subscription actions. PostHog receives a generated device or session identifier, a Penny account identifier after sign-in, app and operating system information, and the network IP address used to send events. Events may be stored on your device for retry when offline.
We exclude names, email addresses, passwords, survey answers, envelope names, balances, income, transaction amounts, and notes from these analytics events. Session recording and automatic location enrichment are disabled. Deleting your Penny account resets the analytics identity on your device; historical analytics events are not automatically deleted from PostHog. Contact us to request their deletion. See PostHog’s privacy policy.
Reminders
If you enable daily or bill reminders, Penny asks permission to schedule notifications on your device. Reminder preferences are saved with your budget. You can disable reminders in Penny or notification permissions in iOS Settings.
Email, support, and the website
If you join the early-access list, we use your email for Penny launch and early-access updates. The list is collected through Google Forms. When you contact support, we receive your email address and the information you include. Please do not send bank credentials or payment card details.
Vercel hosts our website. Hosting and communications providers may process IP addresses and request information needed to deliver, secure, and troubleshoot their services. The website does not add advertising cookies. We do not sell personal information or use app data for cross-app advertising tracking.
Sharing and international processing
We share information with providers as needed for the functions described above. We may disclose information when legally required or to address fraud, security incidents, or legal claims. Providers may process information outside your country, where privacy laws can differ.
Retention and deletion
We retain saved account information and budgets while your account exists. In Penny, open Settings → Delete account. From the subscription screen, open Account & support → Delete account. This permanently removes your Penny account, saved budgets, envelopes, spending history, and authentication sessions from the active database, and clears drafts and scheduled reminders on the device performing deletion. Apple sign-in access is revoked for Apple accounts. Provider backups and operational logs may remain until their normal retention periods expire.
Deleting your account or the app does not cancel an Apple subscription. Cancel separately in iOS Settings → your name → Subscriptions. Apple and RevenueCat may retain purchase records for subscription restoration, fraud prevention, and legal obligations. Support correspondence is retained as needed to resolve requests and meet legal obligations. Waitlist information is retained until you ask to leave or it is no longer needed.
Request access, correction, or deletion at pennyappteam@gmail.com. We may need to verify your identity before acting. If you cannot sign in to delete an account, contact us for help. See our support page for account and subscription instructions.
Your choices and rights
You can stop waitlist emails by contacting us. Depending on where you live, you may have rights to obtain a copy of your information, object to or restrict processing, withdraw consent, or complain to a privacy regulator. Contact us to exercise applicable rights.
Children and security
Penny is not directed to children under 13. If you believe a child has provided personal information to us, contact us so we can address it. We use reasonable safeguards for information we handle, but no system is completely secure.
Policy updates
We will update this page when our practices change and provide additional notice where required. The effective date above identifies the current version.