PennyPlanPennyPlan — Privacy Policy
This policy explains what information PennyPlan (“the App”, “we”) processes, why, who it is shared with and what control you have. Read it together with our Terms of Use.
1. Who we are
PennyPlan is published by Peptech. Contact: pennyplan.support@gmail.com.
2. Summary
- Your budget data stays on your device. Budgets, transactions, funds, notes, tags and receipt photos are stored only in the App's local database on your iPhone. We have no account system and no server copy of your finances.
- No bank connections. The App never asks for bank credentials and does not connect to financial institutions.
- Anonymous product analytics. To understand which features are used and whether the App works, the App sends anonymous usage events (for example “transaction added”, “paywall shown”) with a random device-generated identifier. They never contain amounts, merchant names, notes, tags or photos.
- Purchases are handled by Apple. We receive purchase status from Apple to unlock Pro; we never see your payment details.
- No advertising SDKs, no selling of data.
3. Information we process
3.1 Stored only on your device
Budget months, groups and lines, transactions (amount, date, merchant, note, tags, receipt photo), sinking funds, recurring rules, app settings (currency, language, appearance, reminders). This data is in the App's sandbox and in your iCloud/iTunes device backups if you have backups enabled. We cannot access it.
3.2 Anonymous analytics (sent to our server)
A random identifier generated on the device (stored in the Keychain), app version, iOS version, device model, language, time zone, country (derived from the request by our hosting provider — the IP address itself is not stored), session start/end, and product events such as onboarding steps, screens visited, paywall views, purchases (product id and price tier, not payment details), feature usage counts. You can turn analytics off in Settings → Privacy → “Share anonymous usage data” at any time.
3.3 Purchase information
When you buy Pro, Apple processes the payment. The App sends us the transaction identifier, product id, purchase date and environment together with the anonymous identifier so that we can measure trials, renewals and refunds. Apple also sends us App Store Server Notifications about renewal, cancellation, refund and billing status. We never receive your name, Apple ID, card or address.
3.4 Support e-mail
If you write to us, we keep the correspondence to answer you and to improve the App.
4. Why we use it and legal basis
- Providing the App and Pro features — performance of a contract (Terms of Use).
- Product analytics, crash and error diagnostics — our legitimate interest in improving a working, useful product; you can opt out in Settings.
- Measuring subscriptions, refunds and fraud prevention — legitimate interest and legal obligations (accounting).
- Support — your request.
5. Service providers
- Apple — App Store distribution, in-app purchases, App Store Server Notifications (Apple's privacy policy applies).
- Cloudflare — hosts this website and the analytics API; determines country from the request.
- Supabase — database for anonymous analytics and purchase status (EU region).
We do not sell or rent personal data, and we do not share it with advertisers.
6. Tracking and your choice
The App does not track you across other companies' apps or websites and does not use the advertising identifier (IDFA). Therefore it does not show the App Tracking Transparency prompt. Analytics can be disabled in Settings.
7. How long we keep data
Anonymous analytics events are kept for 18 months and then deleted. Purchase records are kept while the subscription is active and for the period required by tax and accounting law. Support e-mails are kept for up to 24 months.
8. International transfers
Our servers are in the European Union (Supabase) and on Cloudflare's global network. Where data leaves the EU/UK, we rely on standard contractual clauses and the providers' certified safeguards.
9. Security
Traffic is encrypted (TLS). The analytics database is not reachable from the public internet except through our API, which only accepts the App's requests. On the device you can enable Face ID / Touch ID lock in Settings → Privacy.
10. Your rights
Depending on where you live you may have the right to access, correct, delete or restrict processing of your personal data, to object, and to data portability, and to lodge a complaint with your supervisory authority. Because analytics is anonymous, we may not be able to link it to you; where possible we will act on your request within 30 days.
11. Deleting your data
Everything on the device: Settings → Data → “Erase all data”, or delete the App. Analytics: Settings → Privacy → turn off “Share anonymous usage data”; to have previously sent events deleted, e-mail us the anonymous identifier shown in Settings → About.
12. Children
The App is not directed to children under 13 (or the age of consent in your country) and we do not knowingly collect data from them.
13. Notice to US residents
We do not “sell” or “share” personal information as defined by the CCPA/CPRA, and we do not use sensitive personal information for inferences. California residents may exercise their rights by e-mail.
14. Changes
We will post updates on this page and change the date above. Material changes will be announced in the App.