Pennli ("the App", "we", "us", "our") respects your privacy. This Privacy Policy explains what information is collected and processed when you use Pennli, how that information is used, and the choices available to you.
Pennli does not require you to provide a name, email address, phone number, or create a user account in order to use the App.
1. Information We Collect
Your budget data. Everything you enter into Pennli — envelopes, income sources, transactions, goals, notes, and settings — is stored locally on your device only. This data is never transmitted to us or to any third party, and we have no server that holds it, no access to it, and no way to read, restore, or recover it.
Onboarding analytics. We use Google Analytics for Firebase, but only to understand where people stop during onboarding. The only events we send are a small set of named, numbered steps (for example, "onboarding step 3 viewed") as you move through the setup flow. We do not track screens, taps, or usage anywhere else in the App, and automatic screen-view collection is switched off at the platform level on both iOS and Android. These events are tied to an anonymous app-instance identifier, never to you personally.
Crash and diagnostic information. We use Firebase Crashlytics to learn when the App crashes or errors, so we can fix it. If the App crashes, this may include a crash log, app version, operating system, device model, and an anonymous installation identifier. Crashlytics does not run on development builds.
Purchase information. Pennli offers optional auto-renewing subscriptions and a one-time lifetime purchase. Payments are processed by the Apple App Store or Google Play. We use RevenueCat to verify and manage these purchases and to check whether paid access is active. This involves an anonymous app user identifier, a product identifier, and transaction status. We do not receive or store your card details.
2. How We Use Information
We use the information described above to:
- operate the App entirely from data stored on your device;
- verify and manage subscriptions and purchases;
- see where people drop off during onboarding, so we can improve it;
- diagnose crashes and technical problems;
- protect the security and integrity of the App and prevent abuse.
We do not sell your data. We do not use your data for third-party advertising or cross-app tracking. We do not build a profile of how you use the App beyond onboarding.
3. Third-Party Services
We use a limited number of third-party services to operate the App:
- Google Firebase — crash reporting (Crashlytics) and the narrow onboarding analytics described above (Analytics);
- Apple App Store and Google Play — app distribution and in-app purchase processing;
- RevenueCat — purchase management and subscription verification.
These providers may process limited technical, transactional, or usage information as necessary to provide their services. Your budget data is never sent to any of them.
4. Data Retention and Deletion
Your budget data lives only on your device, for as long as you keep the App installed. Pennli's own delete-all-data feature and simply uninstalling the App both remove it completely and immediately — there is nothing on our end to delete, because we never had a copy.
Onboarding analytics and crash diagnostics are retained according to our configured Firebase retention settings. Purchase-related records may be retained where reasonably necessary for transaction verification, fraud prevention, accounting, or legal compliance.
You may contact us at [email protected] with a privacy-related question. Because Pennli does not collect identifying account information such as your name or email address, we may not always be able to match such a request to data generated by a specific anonymous App installation.
5. Security
We use reasonable technical and organizational safeguards to protect the limited information processed through Pennli, including encrypted network connections and the security controls provided by our service providers. However, no method of electronic transmission or storage can be guaranteed to be completely secure.
6. International Data Processing
Our service providers may process information in countries other than the country in which you live. Where required by applicable law, appropriate safeguards are used for international transfers of personal data.
7. Your Privacy Rights
Depending on where you live, applicable law may give you rights regarding your personal data, which can include access, correction, deletion, restriction, objection, or withdrawal of consent where processing is based on consent.
To make a privacy-related request, contact us at [email protected].
8. Changes to This Privacy Policy
We may update this Privacy Policy when Pennli changes or when legal or platform requirements change. The "Last updated" date at the top of this page indicates when this Privacy Policy was most recently revised.
9. Contact
If you have questions about this Privacy Policy, please contact: