We never sell your data, show ads in your financial information, or share your personal details with third parties for marketing purposes. Your financial data is encrypted and belongs to you.
Last updated: 7/26/2025
1. Information We Collect
Account Information
- Name and email address when you create an account
- Password (encrypted and never stored in plain text)
- Payment information (processed securely through Stripe)
Financial Data
- Budget entries and transactions you manually enter
- Financial goals and progress tracking
- Categories and tags you create
- App preferences and settings
Usage Information
- How you interact with our app (anonymized analytics)
- Device information and browser type
- IP address and general location (for security)
2. How We Use Your Information
- Provide the Service: Display your financial data and enable budgeting features
- Account Management: Create and maintain your account, process payments
- Security: Protect against fraud and unauthorized access
- Communication: Send important updates about your account or our service
- Improvement: Analyze usage patterns to improve our app (anonymized data only)
3. Data Security
Bank-Level Security
- All data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Infrastructure hosted on secure, SOC 2 compliant servers
- Regular security audits and vulnerability assessments
- Multi-factor authentication available for all accounts
4. Data Sharing
We DO NOT share your data with:
- Advertisers or marketing companies
- Data brokers or analytics companies
- Social media platforms
- Any third party for commercial purposes
We only share data when:
- You direct us to: When exporting your data or connecting integrations you choose
- Legal requirement: Court orders or regulatory compliance (we'll notify you unless prohibited)
- Service providers: Trusted partners who help us operate (payment processing, hosting) under strict agreements
5. Your Rights and Controls
- Access: View all data we have about you
- Export: Download your data in standard formats
- Delete: Request deletion of your account and all associated data
- Correct: Update or correct any inaccurate information
- Opt-out: Unsubscribe from marketing emails (account notifications still apply)
6. Data Retention
- Active accounts: Data retained while your account is active
- Closed accounts: Most data deleted within 30 days
- Legal requirements: Some data may be retained longer for compliance
- Backups: May take up to 90 days to completely remove from backups
7. Cookies and Tracking
We use minimal cookies and tracking:
- Essential cookies: Required for login and app functionality
- Analytics: Anonymous usage statistics to improve the app
- No advertising cookies: We don't track you for ads
8. International Data Transfers
Your data is primarily stored in secure data centers in the United States. If you're outside the US, your data may be transferred internationally. We ensure appropriate safeguards are in place for all transfers.
9. Changes to This Policy
We may update this privacy policy from time to time. We'll notify you of any material changes via email and update the "Last updated" date above. Continued use of the service constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this privacy policy or how we handle your data:
Email: contact@pennypath.io
Response time: We aim to respond within 48 hours