Privacy Policy

This page explains what Penny Wise stores about you, why, who else handles it, and how to remove it.

What we store

• Account: your name and email address, and either a hashed password or the public key of each passkey you add. Passwords are never stored in readable form, and your fingerprint, face or PIN never leaves your device.
• Your records: the transactions, categories and accounts you create, with the amounts, dates, merchants and notes you enter.
• Sessions: a record of each signed-in browser so you can be signed out remotely.
• Security log: sign-in, sign-out and account events with the time and the IP address they came from.
• Quick add drafts: the text of an expense you described and the draft built from it. Drafts expire shortly after you stop using them.

AI features

When you use Quick add, the text you typed is sent to Google's Gemini API to extract the amount, date, category and other details. If you use voice, your recording is sent to Gemini to be turned into text. The recording is held in memory only and is not saved or logged by Penny Wise. Nothing is saved to your transactions until you review and confirm it. If you do not use these features, nothing is sent.

Email

Sign-up and password-reset links are sent through an email delivery service. Your email address and the message pass through that service.

Cookies and browser storage

Penny Wise sets one session cookie to keep you signed in (HttpOnly, same-site) and uses a token to protect forms. Your browser also stores your theme and sidebar choices. There are no advertising or analytics cookies or trackers.

Sharing

We do not sell your data or share it for advertising. It is handled only by the services needed to run Penny Wise: the host and database provider, the AI provider named above and the email delivery service.

How long we keep it

Your account and records are kept until you delete your account. Expired sessions and old drafts are cleared automatically.

Your choices

You can manage passkeys on the Account page, sign out of every device, and permanently delete your account and data. See Data deletion.