Privacy policy

Effective September 24, 2026. Pennykin is operated by Zagir Nurgaliev. Contact: zagamaza2025@gmail.com.

Free, local budgeting

Your local families, categories, budgets, currencies and expenses stay on your device unless you choose to enable synchronization. You can use free budgeting without signing in. We do not use advertising, cross-app tracking or third-party analytics.

Accounts and family sync

When you connect Apple or Google, we receive the provider's account identifier and the name and email address it supplies. We use these to authenticate you and maintain your Pennykin account. Provider credentials and session tokens are handled as authentication data; we do not receive your Apple or Google password.

When you enable family sync, the selected family's settings, categories, budget amounts, expenses, descriptions, dates, currency information and membership are stored on our server. Members you invite can access that family's shared budget and see member display names. Other local families are not uploaded automatically.

Subscriptions and service operation

Apple processes payments. We receive subscription identifiers, product and expiry information and verification results to determine access to Plus. We do not receive payment-card details. Apple and Google process information under their own privacy policies when you use their services.

Our hosting provider processes server data on our behalf. Technical requests necessarily include an IP address. We use limited operational logs for reliability and security; application logs exclude budget contents, sign-in tokens and request bodies. We do not sell your personal information.

Your choices and deletion

When Plus ends, synchronization stops and local copies remain usable. This does not automatically delete cloud data. You can delete your account in the app's account settings after confirming your identity, or contact us for help.

Deleting an account removes its server profile and the shared families it owns. Other members lose access to those cloud families. Local copies on devices remain until their users delete them. Entries already shared in families owned by someone else remain part of those families' history. Where operational backups exist, copies may remain until backup rotation; they are access-restricted and are not used for ordinary service access.

Contact us to request access, correction or deletion of personal information, or to ask about applicable privacy rights. Do not email passwords, sign-in codes or payment details.