Privacy Policy
Effective date: 2026-03-01 Last updated: 2026-03-01
PennyAI (“we”, “us”, or “our”) operates the Penny mobile application (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
By using Penny, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Who We Are
PennyAI is an AI-powered personal finance tracking application. We act as the Data Controller (under GDPR and UK GDPR) and the Data Fiduciary (under India’s Digital Personal Data Protection Act, 2023) for personal data collected through the Service.
Contact: support@savepenny.ai
2. Data We Collect
2.1 Account and Identity Data
- Full name and email address (collected at sign-up via Apple ID, Google, or email OTP)
- User ID (generated by our authentication system)
- Device token (for push notifications)
2.2 Financial Data
- Transactions: Purchase amounts, merchant names, categories, dates, account references, and import confidence. You can enter these manually or import them from Plaid, a connected Gmail or Outlook mailbox, copied bank-alert text, receipt photos, or bank statement files.
- Capture inputs: When you choose a capture feature, Penny may process receipt images, statement files, copied SMS text, or relevant mailbox message fields such as sender, subject, body, date, and provider message ID. Penny cannot and does not read the iOS Messages database. Receipt images and raw message or statement content are processed to extract transaction fields; extracted fields and limited source metadata may be retained for review and deduplication.
- Income and expenses: Declared income, housing costs, debt balances, monthly fixed/variable expenses entered during financial profile setup
- Budgets and goals: Monthly budget limits per category, savings goals and target amounts
- Subscriptions: Detected recurring charges from your transaction history
2.3 AI Conversation Data
- Messages you send to Penny (our AI assistant)
- AI responses generated for you
- Extracted memory facts derived from conversations (e.g., “User has a car loan”)
2.4 Behavioral and Inferred Data
- Spending patterns detected by our AI engine (e.g., overspending categories, impulse purchase timing)
- Money personality quiz results
- Financial vector profile linked to your account, summarizing your financial habits
- Daily roast content generated for your account
2.5 Community Content
- Posts you submit to the community feed
- Votes you cast on community posts
2.6 Usage and Diagnostics Data
- App feature interactions (screens visited, buttons tapped, features used)
- App performance metrics
- Crash reports and error logs, which may include your user ID or email when you are signed in
2.7 Device and Technical Data
- Device model and operating system version
- App version
- IP address (collected by infrastructure providers)
- Push notification token
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide the core service (transaction tracking, budgets, goals) | Financial data, account data | Contract performance |
| AI-powered spending insights and personalization | Financial data, AI conversations, behavioral patterns | Consent (can be withdrawn) |
| Daily roasts and Penny chat | AI conversation data, financial data | Consent |
| Community features | Community posts, votes | Contract performance |
| Push notifications and alerts | Device token, financial data | Consent |
| Security and fraud prevention | Account data, usage data | Legitimate interest |
| Service improvement and analytics | Usage, account identifier, device, and performance data | Consent where enabled; otherwise legitimate interests for strictly necessary diagnostics |
| Legal compliance | All data types as required | Legal obligation |
We do not sell your personal data to third parties. We do not use your data for advertising.
4. Third-Party Processors
We share data with the following processors who act under our instructions:
| Processor | Purpose | Data Shared | Location |
|---|---|---|---|
| Anthropic | Claude AI powers chat, capture extraction, insights, and optional personalized guidance | Transaction and financial summaries, prompts and conversations, and capture content needed for the feature you invoke | United States |
| OpenAI | Supplementary AI chat and insight processing | Transaction summaries, financial profile data, prompts, and conversations | United States |
| Plaid Technologies | Bank account connection and transaction sync | Bank credentials (handled by Plaid directly), transaction data | United States |
| Supabase | Database, authentication, and edge function infrastructure | All data stored in the app | Primary: India (ap-south-1) |
| Apple | Sign In with Apple, push notifications (APNs), in-app purchases | Authentication tokens, device token | United States |
| Sign-in and optional read-only Gmail receipt capture | OAuth tokens, email identity, and relevant mailbox content when you connect Gmail | United States | |
| Microsoft | Optional read-only Outlook receipt capture | OAuth tokens, email identity, and relevant mailbox content when you connect Outlook | United States |
| PostHog | Optional product analytics | User ID and feature interaction data when analytics consent is enabled | United States / European Union |
| Sentry | Crash and performance diagnostics | User ID, email, device details, crash traces, and diagnostic context when crash reporting is enabled | United States / European Union |
| Resend | Transactional email delivery (OTP codes, notifications) and inbound parsing of receipts you forward to your personal @import.savepenny.ai address | Email address; for forwarded receipts, the forwarded email content you send to import.savepenny.ai | United States |
| Voyage AI | Generates embeddings of your consented financial context to power retrieval-augmented search and memory, when that feature is available and enabled for your account | Financial context you have consented to share for that feature; embeddings are private to your account and are deleted when you delete your account or withdraw consent | United States |
| ElevenLabs | Converts Penny’s replies to speech, when voice replies are available and enabled for your account | The text of the reply being spoken; no account identifiers are sent | United States |
All processors are contractually bound to process your data only for the purposes described above, under appropriate data protection agreements (GDPR Standard Contractual Clauses where applicable).
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data and financial transactions | Retained while your account is active |
| Pending capture items and source metadata | Retained while awaiting review, then deleted or minimized under our automated data-lifecycle rules |
| Stored Gmail or Outlook access credentials | Encrypted and retained only while that connection remains active; removed when you disconnect it or delete your account |
| Raw receipt, copied SMS, email, and statement content | Processed only to provide the requested capture feature; Penny retains extracted transaction fields and limited source metadata rather than a reusable copy unless the interface explicitly tells you otherwise |
| Chat messages and AI conversation logs | Retained for 6 months in active storage, then archived for 12 months, then deleted |
| AI-extracted memory facts | Retained while account is active; subject to memory decay after 90 days of inactivity |
| Behavioral patterns and roasts | Retained for 12 months, then deleted |
| Community posts | Retained indefinitely unless you delete them |
| Usage and diagnostic data | Retained for 90 days |
| After account deletion | All personal data is permanently deleted within 30 days of account closure. Anonymized aggregate data may be retained for statistical purposes. |
6. Your Rights
Depending on your location, you have the following rights regarding your personal data:
All Users
- Access: Request a copy of the personal data we hold about you
- Correction: Request we correct inaccurate data
- Deletion: Request deletion of your account and all associated data (available in Settings > Privacy & Data > Delete Account)
- Data Export: Download a machine-readable copy of your data (available in Settings > Privacy & Data > Export My Data)
- Opt-out of AI Processing: Disable AI processing of your financial data in Settings > Privacy & Data > AI Processing
GDPR / UK GDPR (EU and UK users)
In addition to the above, you have rights under Articles 15-22 of the GDPR: - Restriction of processing (Article 18) - Data portability (Article 20) - Object to processing based on legitimate interests (Article 21) - Withdraw consent at any time without affecting prior processing
To exercise these rights, contact us at support@savepenny.ai. We will respond within 30 days (GDPR) or as required by applicable law. You also have the right to lodge a complaint with your local supervisory authority.
India DPDP Act (Indian users)
Under the Digital Personal Data Protection Act, 2023: - You have the right to access, correct, and erase your personal data - You have the right to nominate a person to exercise your rights on your behalf - You have the right to withdraw consent for data processing - You have the right to raise a grievance with us or the Data Protection Board of India
PennyAI acts as the Data Fiduciary for Indian users. We process your data based on your explicit consent provided at onboarding.
California (CCPA/CPRA)
California residents have the right to know what personal information is collected, the right to delete, and the right to opt out of sale (we do not sell personal data). Contact us at support@savepenny.ai to exercise these rights.
7. Security
We take the security of your financial data seriously:
- Encryption in transit: Service traffic is transmitted over HTTPS/TLS
- Encryption at rest: Sensitive data (including OAuth tokens and financial credentials) is encrypted using AES-256-GCM
- Authentication: User operations require valid authentication. Provider webhooks use provider signatures or dedicated secrets instead of a user JWT.
- Row-Level Security: Database access is enforced at the row level — users can only access their own data
- Plaid: Your online-banking username and password are handled by Plaid and are not sent to Penny. Plaid access tokens returned after consent are encrypted on Penny’s server so scheduled sync and disconnect can work.
Despite these measures, no method of electronic storage or transmission is 100% secure. We will notify you of any breach affecting your data as required by applicable law (within 72 hours under GDPR).
8. Children’s Privacy
Penny is intended for users aged 18 and older. We do not knowingly collect personal data from users under 18. If you believe a minor has provided us with personal data, please contact us at support@savepenny.ai and we will delete the information promptly.
9. Cross-Border Data Transfers
Your data may be transferred to and processed in countries outside your country of residence:
- India (ap-south-1): Primary Supabase infrastructure (database, edge functions)
- United States / European Union: Anthropic, OpenAI, Plaid, Apple, Google, Microsoft, PostHog, Sentry, Resend, Voyage AI, and ElevenLabs, depending on their configured processing region
- European Union / United States: Supabase Auth infrastructure
For transfers from the EU/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission. For transfers from India, we comply with applicable cross-border data transfer requirements under the DPDP Act.
10. UK-Specific Disclosures
For users in the United Kingdom, this policy constitutes our processing notice under the UK GDPR. Our lawful bases for processing are as set out in Section 3. The financial information we analyze is for informational and educational purposes only and does not constitute regulated financial advice under the Financial Services and Markets Act 2000 (FSMA). Penny is not authorised or regulated by the Financial Conduct Authority (FCA).
11. AI-Specific Disclosures
Penny uses AI to analyze your financial data. Important disclosures:
- AI-generated content (insights, roasts, recommendations) is for informational and entertainment purposes only and does not constitute financial advice
- With AI Processing enabled, your financial data, prompts, conversations, and capture content needed for an AI feature may be sent to Anthropic, OpenAI, Voyage AI, or ElevenLabs for processing under our provider agreements, depending on the feature you use
- You can opt out of AI processing at any time in Settings > Privacy & Data > AI Processing. Opting out disables personalized insights and chat but does not affect core tracking features
12. Cookies and Tracking
The Penny mobile app does not use advertising cookies and does not track you across third-party apps or websites. It uses local device storage for session, preference, safety, and pending-analytics state. With analytics consent, product interaction data is sent to PostHog and our backend; you can disable this in Settings.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notification at least 14 days before the change takes effect. The “Last updated” date at the top of this policy will reflect the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
14. Contact Us
For privacy questions, data requests, or to exercise your rights:
Email: support@savepenny.ai Response time: Within 30 days (GDPR-mandated response window)
For users in India, you may also raise a grievance through the in-app feedback mechanism in Settings > Help & Support.