Privacy policy
Last updated November 2, 2026 · penny.com
Penny helps you organize transaction records, categories, and repayments. This policy describes the data handling implemented in the current application.
Information you provide
When you create an account, you provide your name, username, email address, and password. When you add financial records, you may provide transaction dates, descriptions, amounts, account labels, categories, and reimbursement details.
Where records are stored
Account information and financial records are currently stored in your browser on the device you use. Passwords are stored as salted password verifiers, not plain text. Financial records in browser storage are not encrypted. Anyone with access to the browser profile may be able to inspect them.
Your sign-in session uses browser session storage. Signing out ends that session but does not delete records stored on the device. Records do not currently synchronize across devices.
Statement files
CSV, XLS, and XLSX files are read in your browser. Transaction rows you approve are saved to your account’s browser storage. Saving an import for review also keeps the mapped rows, filename, source row numbers, and original date and amount values locally, including rows you exclude. Optional purchase and deletion notes are stored with the records. Deleted transactions remain locally recoverable unless you confirm Delete forever or clear browser data. The original file is not uploaded to a statement-conversion service.
Merchant identification
When the local Gemini helper is configured, confirming a statement import sends representative raw transaction descriptions and suggested merchant names to Google Gemini to identify businesses. Descriptions may themselves contain personal details. Separate purchase amounts, dates, account fields, and account-holder names are not sent. The original statement file stays in your browser. Merchant mappings are saved locally; the helper stores resolved names, hashed group keys, and a monthly usage counter on your computer. Its API key is kept outside browser code. Google processes submitted descriptions under your selected Gemini API service terms.
Google and Apple options
The current provider-account flows are simulations. They do not contact Google or Apple or request a provider password. Information you enter in those flows is stored with the other account information in your browser.
Analytics and third parties
The application does not currently include advertising, analytics tracking scripts, or a finance chatbot. Libraries, logos, and photos used by the interface are served with the site. Opening external help links takes you to third-party websites with their own privacy practices. The server serving the site may receive standard HTTP request information.
Retention and deletion
Records stay in browser storage until removed or your browser clears them. Clearing site data removes the app’s accounts and financial records from that browser. Signing out is not a deletion request. Because these records are device-local, support cannot recover them from a cloud account.
Contact
For privacy questions, contact support@penny.com. Do not email passwords, full account numbers, or unredacted statements.