Privacy Policy

Last Updated: April 3, 2026

1. Introduction

Penny ("we," "our," or "us") is a portfolio tracking and financial intelligence mobile application. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("the App").

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not use the App.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name
• Authentication provider (Google, Apple, or email)
• Profile photo URL (if provided by your sign-in provider)

2.2 Financial Data

You may enter portfolio holdings, investment data, and financial information into the App. This data is stored locally on your device by default using on-device storage. Optional cloud sync to Firebase Cloud Firestore is available but off by default — you must opt in. We do not share, sell, or provide access to your financial data to any third parties.

2.3 Documents and Files

If you use our document scanning or statement parsing features, documents are processed on-device or via secure API calls. We do not permanently store your uploaded documents on our servers.

2.4 AI Chat Data

When you use the "Ask Penny" AI assistant feature, your questions and AI responses are processed to provide financial insights. Your AI coach only receives anonymized data — portfolio percentages and asset names, never dollar amounts, share counts, or account balances. Chat data is not stored permanently and is not used to train AI models.

2.5 Usage Data

We automatically collect anonymous usage data including:

• App feature usage and interactions
• Crash reports and error logs
• Device type, operating system, and app version
• General usage patterns and session duration

This data is collected in aggregate and cannot be used to personally identify you.

2.6 Subscription Data

If you purchase a premium subscription, payment processing is handled entirely by Google Play or Apple App Store. We do not collect, store, or have access to your payment card details or billing information. We only receive confirmation of your subscription status through RevenueCat.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Authenticate your identity and manage your account
• Optionally sync your portfolio data across your devices (if you enable cloud sync)
• Process and manage your subscription status
• Provide AI-powered financial insights and analysis
• Send important notifications about your account or the App
• Diagnose technical issues and improve app performance
• Comply with legal obligations

4. Data Storage and Security

• All network communications use secure HTTPS/TLS encryption
• Your financial data is stored locally on your device by default — only you can access it
• Optional cloud sync uses Firebase Cloud Firestore with authenticated access controls
• We use Firebase Authentication for secure sign-in
• We regularly review our security practices to protect your information

5. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

Service	Purpose	Data Shared
Firebase (Google)	Authentication and data storage	Email, display name, portfolio data
RevenueCat	Subscription management	Anonymous user ID, subscription status
Anthropic Claude AI	AI assistant features	Anonymized queries (percentages and asset names only, never balances)
Financial Data APIs	Stock/crypto price data	Asset symbols only (no personal data)
Google Play / Apple App Store	App distribution and payments	Per their respective privacy policies

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may disclose your information only in the following situations:

• With your consent: When you explicitly agree to share information
• Service providers: To third-party services listed above, solely to provide App functionality
• Legal requirements: If required by law, court order, or governmental regulation
• Safety: To protect the rights, safety, or property of our users or the public

7. Your Rights and Choices

You have the right to:

• Access your personal data stored in the App
• Delete your account and all associated data
• Export your portfolio data
• Correct inaccurate personal information
• Opt out of non-essential data collection

To exercise any of these rights, contact us through our support page or use the account management features within the App.

8. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete all your personal information and portfolio data within 30 days, except where we are required by law to retain certain records.

Anonymous, aggregated usage data may be retained indefinitely as it cannot be linked back to you.

9. Children's Privacy

The App is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Firebase and other third-party services may store data in data centers worldwide. By using the App, you consent to the transfer of your information to these locations.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell your data)
• Right to equal service and price (we do not discriminate)

12. European Privacy Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have additional rights including:

• Right to access, rectify, or erase your personal data
• Right to restrict or object to data processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

13. Advertising

We do not display third-party advertisements in the App. We do not use advertising IDs or track you for advertising purposes.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the App and updating the "Last Updated" date at the top. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Submit a request on our support page