Privacy Policy
Last updated November 3, 2026
Pennyjay helps you understand your money, so it handles some of your most personal information. This policy explains what we collect, why, who we share it with, and how you stay in control. In short: we use your data to run Pennyjay for you, we never see your bank password, and we don’t sell your information or use it for ads.
1. Who we are
Pennyjay is offered by Vishal Rao (“Pennyjay”, “we”, “us”), based in Massachusetts, United States. This policy covers the Pennyjay apps for iPhone and Android, the web app at app.pennyjay.com, the website at pennyjay.com, and the waitlist. Questions or requests: hello@pennyjay.com.
Pennyjay is available to adults (18+) in the United States.
2. What we collect
Your account
- Your email address, and the sign-in identifier from Apple or Google if you sign in with them. If you use an email and password, we store only a salted hash of the password, never the password itself.
- If you sign in with Google, Google shares your email address, name and profile photo with us. We use your email address to create your account and sign you in; your name and photo are kept with your sign-in record and are not shown in the app. We use Google data only to run your Pennyjay account, never for ads, and we don’t sell it or share it except with the providers below that run Pennyjay.
- The name you type for yourself, your household’s name and time zone, and your app settings.
Accounts you connect
When you connect a bank, card, loan or investment account, we receive it through a connection provider (Plaid, Teller or SimpleFIN) or, for Apple Card, Apple Cash and Apple Savings, through Apple’s FinanceKit on your iPhone. We receive:
- Account details: institution, account name and type, the last four digits of the account number, balances, and for credit and loan accounts the credit limit, interest rate and minimum payment.
- Transactions: date, amount, the description on your statement, merchant, the provider’s category and whether it’s pending. We request up to two years of history.
- Investment holdings, if you connect an investment account: security symbol, quantity, price and cost basis.
We never see or store your bank username or password. You sign in to your bank on the provider’s own screen. Pennyjay has read-only access and cannot move money.
Things you add
- Manual accounts (such as a home or car), CSV files you import, categories, rules, budgets, goals, notes, tags and split transactions.
- Receipt photos and PDFs you attach. Photos are resized on your phone before upload, which removes location data stored in them.
- Questions you ask Ask Jay, if you turn it on (see Ask Jay).
- Household invites, including an invitee’s email address if you choose to add one.
- Sync problem reports you send from the app: your note and your email address, plus that connection’s status, recent sync attempts and error codes, and its accounts’ types. Never balances or transactions. We use them only to fix the problem and reply to you.
Subscriptions
When you subscribe through the App Store or Google Play, we receive the plan, status, trial and renewal dates, and the store’s transaction identifier so we can confirm your purchase. Apple and Google handle payment; we never receive your card details.
Device and diagnostic data
- A push notification token and your device’s name, so alerts reach the right phone.
- Crash and performance reports. Before they leave your phone we remove amounts, email addresses, access tokens and other sensitive values.
- Usage data: when you open the app, which screens you visit, and whether you saw the subscription screen or opened an alert. It never includes amounts, merchants or account names. It’s stored with your account on our own servers, isn’t sent to analytics companies, and is kept for 13 months. Turn it off anytime in Settings → Share usage data.
We don’t collect your location, contacts or advertising identifier, and we don’t track you across other apps or websites.
The website and waitlist
- If you join the waitlist: your email address, the phone you said you use (if you picked one), which form you used, the page you came from, and your browser’s user agent.
- Your IP address is used briefly to limit repeated sign-ups. It isn’t stored with your email.
- Our website host keeps standard server logs and runs a bot check on form submissions.
The website has no advertising or analytics trackers.
3. How we use it
- To run Pennyjay: sync your accounts, categorize transactions, find recurring bills and paydays, calculate safe to spend, show budgets, goals, reports and net worth, and send the alerts you’ve turned on.
- To let your household share what you choose to share.
- To confirm subscriptions and unlock Pennyjay for your household.
- To keep Pennyjay secure: prevent abuse, limit repeated requests and investigate problems.
- To fix bugs and improve reliability, using crash and performance reports.
- To answer you when you contact us, and to email waitlist members when the app is available.
We don’t sell your information, share it for advertising, or use it to show you ads. We use your financial information only to provide Pennyjay to you.
4. Ask Jay (AI assistant)
Ask Jay is off until you agree to it in the app. When you use it, we send your question and the information needed to answer it to Anthropic, which provides the AI model. That can include your name, account names, categories and tags, and relevant transactions (date, merchant, amount, category, account and notes), balances, budgets, bills, goals and net worth. Only information you can see in the app is used.
- We keep Ask Jay conversations for 90 days, then delete them.
- Anthropic’s commercial terms don’t permit it to train its models on this data.
- You can turn Ask Jay off anytime in Settings → Security. Saved conversations are then deleted on the 90-day schedule; email us to delete them sooner.
Ask Jay can make mistakes. It reads your data but can’t change it unless you approve a suggested change.
6. Notifications and widgets
Alerts, home-screen widgets and the Android Quick Settings tile show information on your screen, including amounts, merchant names and account names. Turning on Hide amounts masks dollar amounts in the app, widgets and notifications; merchant and account names can still appear. On iPhone, lock-screen widgets hide amounts while your phone is locked.
7. How long we keep it
| Information | Kept for |
|---|---|
| Your transactions, accounts, budgets, goals and settings | As long as you keep your account |
| Raw transaction data from your bank | 180 days |
| Archived provider responses (for fixing sync problems) | 90 days |
| Ask Jay conversations | 90 days |
| Alerts | 90 days |
| Push tokens | 120 days after last use |
| Activity history (which settings changed, not the values) | 24 months |
| Usage data (which screens you open) | 13 months |
| Sync problem reports | 24 months |
| Ended subscriptions | 2 years after they end |
| Database backups | 30 days |
| Waitlist sign-ups | Until we’ve told you the app is available, or until you ask us to remove you |
8. Your choices and deleting your data
- Export: download your transactions and balances as CSV, or a full backup, in Settings.
- Correct: edit transactions, categories, accounts and your name in the app.
- Disconnect a bank: we revoke our access at the provider and delete the access token. The account’s history stays as a closed account until you delete it.
- Turn off Ask Jay, notifications or amounts on screen in Settings.
- Leave a household, or as its owner, remove a member.
Deleting your account
Delete your account in the app: Settings → Security → Delete account. Deletion happens immediately. If you’re the only member, we revoke every bank connection and delete your household’s data and receipts. If others share your household, we delete your private accounts with their transactions and receipts, and your sign-in; shared data stays with the household, and ownership passes to another member if you were the owner.
Some copies take longer to disappear: database backups for up to 30 days, and archived provider responses for up to 90 days. Deleting your account doesn’t cancel an App Store or Google Play subscription; cancel it in your store settings.
You can also email hello@pennyjay.com to access, correct or delete your information, or to leave the waitlist. We respond within 30 days.
No longer have the app? See how to delete your account.
9. How we protect it
- Bank access tokens are encrypted (AES-256-GCM) with a key only our servers hold.
- Every database table enforces access rules, so each person reaches only their own household’s data, and private accounts only their owner.
- Data is encrypted in transit, and our host encrypts stored data.
- On your phone, cached data is encrypted with a key kept in the iPhone Keychain or Android Keystore, and Face ID or fingerprint lock is on by default.
- Backups are encrypted.
No system is perfectly secure. If a breach affects your information, we’ll notify you as the law requires.
10. Where your data is stored
Our database, files, server functions and backups are hosted by Supabase in the United States (northern Virginia). The website and web app are hosted by Vercel, and the other providers listed above also process data in the United States. Your information is stored and processed in the United States.
11. Your state privacy rights
Depending on where you live (including California, Colorado, Connecticut, Virginia and other states with privacy laws), you may have the right to know what personal information we have about you, get a copy, correct it, delete it, and opt out of its sale, sharing for targeted advertising, or profiling.
- We don’t sell personal information or share it for targeted advertising, and we don’t profile you for decisions with legal or similar effects.
- We use financial account information, which some laws treat as sensitive, only to provide Pennyjay.
- To make a request, email hello@pennyjay.com. We verify it’s you by confirming the request from the email on your account. An authorized agent can make a request with your written permission.
- We won’t treat you differently for using these rights. If we deny a request, you can appeal by replying to our response.
12. Children
Pennyjay is for adults 18 and older. We don’t knowingly collect information from anyone under 18; if we learn we have, we’ll delete it.
13. Changes to this policy
If we make important changes, we’ll tell you in the app or by email before they take effect. The date at the top shows when this policy last changed.
14. Contact
Vishal Rao, doing business as Pennyjay, Massachusetts, United States. Email hello@pennyjay.com.