Security
Your money data, kept close
Handing an app your bank accounts takes trust. Here’s exactly what Pennyjay can and can’t do, in plain words.
We never see your bank password
You sign in to your bank on the connection provider’s own screen (Plaid, Teller or SimpleFIN). Pennyjay never sees or stores your bank username or password.
Read-only. We can’t move money
Pennyjay’s access to your accounts is read-only. It can’t make payments, transfer money or change anything at your bank.
We don’t sell your data
We don’t sell your information, share it for advertising, or show you ads. You pay for Pennyjay, so you aren’t the product.
Locked on your phone
Face ID or fingerprint lock is on by default, and data cached on your phone is encrypted with a key kept in the iPhone Keychain or Android Keystore.
The details
- Bank access tokens are encrypted with AES-256-GCM, using a key only our servers hold.
- Every database table enforces access rules, so each person reaches only their own household’s data, and private accounts only their owner.
- Data is encrypted in transit, stored data is encrypted by our host, and backups are encrypted.
- If you use an email and password, we store only a salted hash of the password, never the password itself. Sign in with Apple and Google are also available.
- Hide amounts masks dollar amounts in the app, widgets and notifications. Lock-screen widgets on iPhone hide amounts while your phone is locked.
- The website has no advertising or analytics trackers, and the app doesn’t collect your location, contacts or advertising identifier.
No system is perfectly secure. If a breach affects your information, we’ll notify you as the law requires. The full story is in our Privacy Policy. Found a security issue? Email hello@pennyjay.com.
Questions
Is it safe to connect my bank to Pennyjay?
Pennyjay connects through established providers (Plaid, Teller or SimpleFIN) with read-only access. You sign in on the provider’s screen, so Pennyjay never sees your bank password, and it can’t move money.
Can Pennyjay move money or make payments?
No. Access is read-only. Pennyjay shows you what to pay and when; you pay as you do today.
Do I have to connect a bank at all?
No. You can add accounts manually or import a CSV instead.
Does Pennyjay sell my data?
No. We don’t sell your information, share it for advertising, or use it to show you ads.
How do I disconnect a bank or delete my data?
Disconnecting a bank revokes our access at the provider and deletes the access token. Deleting your account (Settings → Security → Delete account) happens immediately.
Be first in the nest
Leave your email and we’ll tell you when Pennyjay is ready to download.