Privacy Policy

Information we process

• Account details: your name, email address, password (stored only as a one-way hash), optional profile photo, and payday settings.
• Google sign-in: if you choose it, Google provides your name, email address, Google account identifier, and profile image.
• Financial records you enter: accounts and account numbers, opening balances, transactions, receipts you attach, budgets, bills, scheduled transactions, savings goals, and contributions.
• Subscription and payment details: the plan you choose, payment reference numbers, and the payment receipts you upload for review.
• Support conversations: messages and images you send to Penn support.
• Technical information: session and security data, and web push subscription details if you turn on reminders.

Penn does not connect to your bank and never receives your banking passwords. Balances are calculated only from the records you enter.

Why we process it

We use this information to create and secure your account, provide Penn's budgeting and money-management features, calculate and display your records, send the reminders you turn on, manage subscriptions and review payments, respond to support requests, provide the exports and backups you request, prevent misuse, and comply with legal obligations. Our basis is your consent, the performance of our service to you, and our legitimate interest in keeping Penn secure.

Access and sharing

Authorized Penn administrators may access limited account, subscription, payment, and support information when needed to operate the service, such as reviewing a payment receipt or answering a support request. We share information with service providers that host or deliver Penn (for example, hosting, email delivery, and browser push services) only as needed to run the service. Google processes sign-in data under its own privacy terms. We may disclose information when required by law. Penn does not sell your personal or financial information and does not use it for advertising.

Retention and protection

Your information is kept while your account is active and only as long afterward as reasonably necessary for legal, security, backup, and dispute-resolution purposes. Penn uses access controls, authentication, and other reasonable safeguards, but no electronic system can guarantee absolute security. If a personal data breach occurs that requires notice, we will notify you and the National Privacy Commission as the law requires.

Your privacy rights

Subject to law, you may be informed about how your data is processed, request access to or correction of your information, object to or withdraw consent from processing, request erasure or blocking, obtain a copy of your data, claim damages, and lodge a complaint with the National Privacy Commission. You can download a backup of your data from Settings at any time. Withdrawing consent to required processing may mean Penn can no longer provide your account.

Cookies and device storage

Penn uses only the cookies and on-device storage it needs to work. See the Cookie Policy for the full list.

Children

Penn is intended for people 18 years of age or older, or those using it with a parent or guardian's consent. We do not knowingly collect information from children without that consent.

Changes and contact

We may update this policy as Penn changes. We will post the new version here with a new effective date and, for significant changes, let you know in the app. To exercise your rights or ask a question, contact us through Penn support on the welcome page or in the app. Support chat requires signing in.