Privacy Policy
Last Updated: August 14, 2026
CODETIVE Pawel Boguta (“we,” “us,” or “our”) operates Penno (“the App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
1. Information We Collect
Information You Provide
The notes you type into the App — free-text lines describing your spending and income — and optional profile details such as your preferred currency.
Financial Notes
Penno is local-first: your notes, transactions, budgets, settings, and forecasts are stored on your device and may sync through your private Apple iCloud account when iCloud is enabled. We do not require bank credentials and the App does not connect directly to your bank.
Usage Data
We collect product events such as screens or features used, purchase-flow outcomes, app version, device and operating-system information, and diagnostic data. We do not include the text or amounts from your financial notes in analytics events.
Device Information
Penno creates an install-specific random identifier for backend abuse prevention. Apple, RevenueCat, and our analytics provider may also process device or transaction identifiers needed to operate subscriptions, measure reliability, and prevent fraud.
2. How We Use Your Information
We use your information to: provide the App's features; parse your typed notes into transactions, categories, and forecasts; sync your private ledger through iCloud; process and restore subscriptions; protect our service from abuse; measure reliability and feature usage; respond to inquiries; and comply with legal obligations.
3. AI Processing
When you submit a typed note, Penno sends that note and the install-specific identifier to our API. When you scan a receipt, optical character recognition happens on your device and Penno sends the extracted receipt text, not the receipt image, to our API. Our API uses OpenRouter and the selected model provider to return structured transaction data. We do not use your financial-note content for advertising or to train our own models.
4. Data Sharing and Disclosure
We disclose data only as needed to operate Penno: Apple for iCloud sync and App Store payments; RevenueCat for subscription status and purchase management; Cloudflare and our backend infrastructure for API delivery and abuse prevention; OpenRouter and its selected model provider for note and receipt-text parsing; PostHog for app and website analytics; OpenPanel for website analytics; and Logo.dev when the App requests a merchant logo. We may also disclose information when required by law or in connection with a business transfer.
We do not sell your personal information to third parties.
5. Data Storage and Security
Your ledger is stored on your device and, when enabled, in your private iCloud container. Data sent to our API is encrypted in transit using HTTPS. No method of storage or transfer is completely secure, but we use reasonable technical and organizational safeguards.
6. Data Retention
Data stored on your device or in iCloud remains until you delete it through Penno, your device, or your Apple account. Service providers retain operational, analytics, and subscription records under their own retention settings and legal obligations. We retain support correspondence and limited security logs only as long as needed for those purposes.
7. Your Rights and Choices
Depending on your location, you may have the right to: access your personal information; correct inaccurate information; delete your data; withdraw consent; object to data processing; request data portability.
Contact us at [email protected] to exercise these rights.
8. Push Notifications
Penno may use Apple push-notification infrastructure for CloudKit change notifications. You can manage notification permission in device settings.
9. Children's Privacy
The App is not intended for children under 13. We do not knowingly collect information from children under 13.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence.
11. Third-Party Services
Third-party services process information under their own terms and privacy policies. This includes Apple, RevenueCat, Cloudflare, OpenRouter and selected model providers, PostHog, OpenPanel, and Logo.dev. Links in the App or website may take you to other services whose privacy practices we do not control.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Your continued use constitutes acceptance.
13. Contact Us
CODETIVE Pawel Boguta
Email: [email protected]
Website: trypenno.com