Privacy Policy

What the app stores, and where

Everything you enter — accounts, transactions, categories, budgets, the people in your ledger and your reminders — is written to a database inside the app's private storage on your device. On both platforms that storage is readable only by Pennywise.

Your preferences (theme, currency, reminder times, and whether Drive backup is connected) sit alongside it in the same private storage.

Technically: a SQLite database named pennywise.db and a preferences file named pennywise.preferences_pb, both inside the app's own sandbox.

What we collect about you

Nothing. The app contains no analytics library, no advertising SDK, no crash-reporting service and no tracking of any kind. We do not know how many people use Pennywise, which screens they open, or anything they have recorded in it.

There is no account to identify you by, and no server for information to be sent to.

When data leaves your device

Only in ways you start yourself. There are exactly three:

• Google Drive backup — off unless you turn it on. Section 4 covers it in full.
• A backup file — tapping Backup data hands a .pennywise file to your device's file picker, and you choose where it goes.
• A PDF statement — exported the same way, to a location you pick.

Those are ordinary files on your device, or wherever you send them. We never see them.

Google Drive backup

This is switched off until you connect an account, and it can be disconnected at any time.

When you connect, the app asks Google for a single permission — drive.appdata. That grants access to one hidden folder Google keeps for Pennywise inside your own Drive. It does not give the app access to your documents, your photos or anything else in your Drive, and it cannot be used to.

What is written there is the same file you would get from Backup data. It goes from your device to your Google account directly — it does not pass through us, and we hold no copy.

Because that folder lives in your Google account, Google's own privacy policy governs how they store it. You can inspect or delete it whenever you like, at drive.google.com → Settings → Manage apps → Pennywise.

Disconnecting inside the app clears the connection on your device and asks Google to revoke the permission. You can also revoke it yourself at myaccount.google.com/permissions.

Permissions the app asks for, and why

• Notifications — to show the reminders you set. Decline and the rest of the app works normally; only reminders stop appearing.
• Internet and network state — used solely to reach Google Drive when backup is switched on. With backup off, the app makes no network requests at all.
• Run after restart (Android) — so reminders you have already scheduled survive the phone being switched off and on. Alarms do not otherwise outlive a reboot.

The app asks for no access to contacts, location, camera, microphone, SMS, call logs or your photo library.

Children

Pennywise is a personal record-keeping tool intended for general use. It collects nothing from anyone, children included, and has no account system through which an age could be known or a profile built.

Deleting your data

All of it is under your control, because all of it is either on your device or in your own Google account:

• On the device — uninstalling Pennywise removes the database and preferences with it. On Android you can also use Settings → Apps → Pennywise → Clear data.
• In your Drive — drive.google.com → Settings → Manage apps → Pennywise → Delete hidden app data.
• Files you exported — delete them wherever you saved them.

There is nothing for us to delete, because we never held anything. That also means we cannot recover your data for you — see clause 3 of the Terms of Use.

Changes to this policy

If the app ever begins handling information differently, this page will be updated and the date at the top will change. Continuing to use Pennywise after that means accepting the updated policy.