Privacy Policy
Effective October 8, 2026
PennyWay (“the app”) is an expense tracker for iPhone made by Abdulaziz Sobirjonov (“we”, “us”). This policy explains what information the app handles, why, and the choices you have.
- Without an account, everything stays on your iPhone.
- With an account, your data is stored on our servers so it syncs and stays safe.
- No ads, no advertising tracking, no selling of your data.
- You can export your data and delete your account in the app at any time.
1. Using the app without an account
You can use PennyWay without signing in. Your expenses, income, wallets, categories, budgets, notes and attached files are stored only on your device. We don’t receive them. They are removed if you delete the app or use Settings → Delete all data.
2. Information we collect when you sign in
Signing in with Apple or Google lets your data sync between your devices and be restored on a new phone. Then we collect:
- Account details — your name and email address as provided by Apple or Google (with Apple you can choose to hide your email), the sign-in method, and an account identifier.
- Your records — the expenses, income, transfers, wallets, Spaces, categories, budgets and notes you enter, with their amounts, currencies and dates.
- Attachments — photos and PDF files you choose to attach to an expense.
- Preferences — your time zone and app language, used to show dates and to sync correctly.
- Subscription status — whether your subscription is active and when it renews or ends. It is managed by RevenueCat (see below) and linked to your account identifier.
We use this information only to provide the app: to sync and back up your data, to show your subscription status, and to answer your support requests.
3. Information we don’t collect
- We don’t use advertising or analytics SDKs and don’t track you across other apps or websites.
- We never see your payment card details — payments are handled by Apple.
- Face ID or your passcode, used for the optional app lock, are checked by iOS. We never receive them.
- Reminders and limit alerts are local notifications created on your device.
4. Services we rely on
We share information with these providers only as needed to run the app:
- Apple — Sign in with Apple and App Store payments.
- Google — Google Sign-In, and Firebase (by Google) for authentication and for storing your attachments.
- RevenueCat — manages subscriptions. It receives your account identifier, your purchase history and basic device information.
- Hosting provider — runs our servers and database, where your synced records are stored.
- Open Exchange Rates — provides daily currency exchange rates to our server. No personal information is sent to it.
Each provider processes data under its own privacy policy. We don’t sell your information or share it for advertising.
5. Keeping and deleting your data
We keep your data while your account exists. You can delete your account at any time in Settings → Delete Account: this permanently deletes your records, attachments and account from our servers and from Firebase, and clears the app on your device. Your Apple subscription is not cancelled automatically — cancel it in your Apple ID settings.
You can download a copy of your records at any time with Settings → Export to CSV.
6. Security
Data is sent between the app and our servers over encrypted connections (HTTPS), and access to your data requires your signed-in account. No system is perfectly secure, but we work to protect your information and limit who can access it.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Most of this you can do directly in the app; for anything else, email us and we’ll respond within 30 days.
8. International transfers
Our providers may process your data in countries other than yours, including the United States. Where required, such transfers rely on appropriate safeguards offered by those providers.
9. Children
PennyWay is not directed at children under 13 (or the minimum age in your country), and we don’t knowingly collect their personal information. If you believe a child has given us personal data, contact us and we’ll delete it.
10. Changes to this policy
If we change this policy, we’ll update the date above and, for significant changes, let you know in the app.
11. Contact
Questions or requests: [email protected]