Who we are
Pennydance is made by CortexZip LLC (“we”, “us”). This policy covers the Pennydance app for Android and iOS and the website at pennydance.com. Questions go to support@pennydance.com.
Data that stays on your phone
Everything you log in Pennydance is stored in the app's private storage on your device: purchases, prices, stores, categories, notes, subscriptions, item photos and your settings. We have no server that holds this data, and no way to read it.
- App Lock uses your phone's fingerprint, face or screen-lock check. The biometric data never reaches the app; your phone just tells Pennydance “yes” or “no”.
- Renewal reminders are scheduled on your phone as local notifications. No server sends them.
- Install ID. The app creates a random ID when it's installed. It isn't linked to your name, email, phone number or advertising ID. It's used only for the fair-use limits described below, and it's replaced if you reinstall.
When data leaves your phone
Premium AI features (only when you tap ✨)
AI quick-add and receipt scan run only when you tap for them, never in the background. When you do, the app sends the note you typed or the receipt photo you took, together with the install ID, to our relay server (a Cloudflare Worker). The relay passes the request to Google's Gemini API, which reads it and returns a structured entry to your phone.
- Our relay stores no content. It keeps only usage counters (how many AI requests, and their cost) keyed by a one-way hash of your install ID, so it can enforce the fair-use allowance. The counters expire automatically.
- Google processes the request as our service provider under its paid Gemini API terms. Under those terms Google does not use it to train its models, but may keep it for a limited time to detect abuse and meet legal obligations.
- A receipt photo can show things like the store's address or the last digits of a card. Crop it first if you'd rather not send them.
The AI usage meter in Settings asks the relay for your current counters, using the same install ID.
Problem reports
If you send a report from Settings, the app sends your message and the email address you enter, plus, only if you leave it switched on, basic device details: app version, operating system, device model and plan. The relay emails the report to our support inbox and keeps a short-lived counter (a one-way hash of your install ID, deleted after 48 hours) to limit spam. We use the report only to answer you and fix the problem, keep it only as long as that takes, and delete it sooner if you ask.
Voice typing
Voice quick-add uses your phone's built-in speech recognition (Google on Android, Apple on iOS). Depending on your phone and settings, that service may process the audio on its own servers under its own privacy policy. Pennydance receives only the resulting text, and we never receive audio.
Your phone's backup
If you have your phone's backup turned on, the operating system may include Pennydance's ledger and settings in your Google or iCloud backup. On Android, item photos are left out of that backup. These backups live in your own account, under Google's or Apple's terms, and we can't access them.
CSV export
When you export to CSV, the file goes wherever you choose to save or share it. It isn't encrypted, and once it leaves the app it's under your control.
Purchases
Plans are bought through Google Play or the App Store. They handle payment, and we never see your card details. The app receives confirmation of what you've bought so it can unlock the right features.
What we don't do
- No ads, and no advertising or ad-measurement SDK in the app.
- No analytics, crash-reporting or tracking SDK in the app.
- No bank connections. Pennydance never asks for a bank login.
- No selling or sharing of personal information, as those terms are used in U.S. state privacy laws.
- No accounts, so there's no profile of you on our side.
This website
pennydance.com sets no cookies and runs no analytics. Every font, script and image is served from our own domain. The site is hosted on Cloudflare, which, like any web host, processes your IP address and basic request details to deliver the page and protect it from attacks.
Deleting your data
- Your ledger: delete the app, or clear its storage in your phone's settings. Because we don't have a copy, that removes it completely, except for any copy in your own phone backup.
- AI usage counters: they expire on their own, and a reinstall starts a new install ID.
- Problem reports: email support@pennydance.com and we'll delete yours.
Your rights
Depending on where you live (for example California, other U.S. states, the EU or the UK), you may have the right to access, correct or delete personal information we hold, and to object to or limit how it's used. Because your ledger never reaches us, the only personal information we might hold is a problem report you sent. Email support@pennydance.com and we'll respond within 30 days. We won't treat you differently for asking.
Security
Network requests from the app use HTTPS. Your ledger is protected by your phone's own security, and you can add App Lock on top. No system is perfectly secure, so keep your phone's screen lock on.
Children
Pennydance isn't directed to children under 13, and we don't knowingly collect personal information from them.
Changes
If we change what data leaves your phone, we'll update this page and the date at the top before the change ships. A significant change will also be noted in the app.
Contact
CortexZip LLC · support@pennydance.com