Privacy Policy
Effective September 28, 2026
Pennykin is a budgeting app developed by Zagir Nurgaliev (“we”). This policy explains what data the app and its service handle and why.
Free use: your budget stays on your device
Without an account, Pennykin stores your families, categories, budgets, expenses, top-ups and currency rates only on your device. We do not receive this data.
Account
An account is optional and is needed only for Pennykin Plus. You sign in with Apple or Google through Google Firebase Authentication. We receive your account identifier, your name and your email address as provided by Apple or Google. With Sign in with Apple you can hide your email; we then receive a private relay address.
Pennykin Plus purchases
Payments are processed by Apple. We do not receive your payment details. To confirm your subscription we receive transaction information from Apple (product, transaction identifiers, status and expiry date) and link it to your account.
Family sync
When you turn on sync for a family, that family’s budget is uploaded and shared with its members: the family name, categories and their settings, expenses (amounts, currencies, descriptions, notes, dates and author), top-ups, currency rates, and the names of the members. This data is stored in Google Cloud Firestore in the European Union (region europe-west1, Belgium). Invitation codes are stored only in hashed form and expire after seven days.
Families you keep only on your device are never uploaded.
What we do not do
Pennykin has no ads, no analytics and no tracking. We do not sell or share your data for advertising, and we do not connect to banks.
Service providers
Google (Firebase Authentication, Cloud Firestore and Cloud Functions) hosts the service. Apple provides the App Store, in-app purchases and Sign in with Apple. Google provides Sign in with Google. They process data on our behalf under their own terms.
Retention and deletion
We keep your account data while your account exists. You can delete your account in the app: tap the profile button at the top right, then Delete account under Your account. This deletes your account, your subscription records and the shared copies of families you organize from our servers, and removes you from other families. Budgets on your device stay there until you delete the app. Service logs kept by Google Cloud are deleted automatically after 30 days.
If you leave a shared family, your device keeps its copy of the budget, and the expenses you added stay in the family’s shared budget for the other members. If the organizer’s Plus ends, you choose whether to keep a copy on your device or remove the family from it.
Your rights
You can ask us for access to, correction of or deletion of your personal data, or object to its processing, by writing to the address below. You may also complain to your data protection authority.
Children
Pennykin is not directed to children under 13.
Changes
We will update this page when our practices change and show the new effective date above.