Pennify Privacy Policy
Effective 8 November 2026
This Policy explains what data the Pennify app, its widgets, Siri integration and the Pennify Telegram bot process, why, where it's stored and how you control it.
Data controller: Oleksandr Tymoshenko, sole proprietor (FOP) registered in Ukraine, Kyiv, Ukraine. Privacy contact: support@pennifybudget.app.
1. In short
- We don't sell data, show ads or track you across other apps.
- The budget you keep is stored on your iPhone and on our servers, so it can sync between your devices and power reminders.
- We don't connect to banks and never see your cards.
- Analytics never include amounts, category names or other financial records.
- You can delete your profile and all its data in the app at any time.
2. Data we process
| Category | What | Source |
|---|---|---|
| Profile | Apple or Google account identifier, email (or Apple private relay email), language, display currency, time zone, start page | Sign in with Apple/Google, app settings |
| Budget data (financial information you enter manually) | accounts and balances, transfers, income, debts and payment schedules, monthly plan, categories, expenses, notes, reminder settings | entered by you |
| Telegram | chat ID, Telegram username or first name, connection date | if you connect the bot |
| Purchases | trial, subscription or Lifetime status, renewal dates, RevenueCat customer ID | Apple via RevenueCat |
| Technical | device identifiers for sync, app and iOS version, server error logs | automatic |
| Usage analytics | events such as "screen opened", "expense recorded" (no amounts or names), app version, language | automatic, PostHog |
We do not collect bank card or account numbers, bank statements, location, contacts, photos or the advertising identifier (IDFA).
3. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR / Ukrainian Law "On Personal Data Protection") |
|---|---|---|
| Providing the Service: sign-in, storing and syncing your budget, calculations, widgets, Siri | profile, budget, technical | performance of contract (Terms of Use) |
| Reminders on iPhone and Telegram | budget (item name, amount, date), Telegram | performance of contract; Telegram connection by your consent (action in the app) |
| Checking access and purchases | purchases | performance of contract |
| Improving the app, statistics | usage analytics | legitimate interest; no financial data |
| Security, abuse prevention, troubleshooting | technical | legitimate interest |
| Legal compliance | as needed | legal obligation |
4. Where data is stored and who processes it
Data is stored on your device and on servers at Hetzner Online GmbH in Germany (Nuremberg data centre, EU). We use these processors:
| Processor | Purpose | Data |
|---|---|---|
| Hetzner Online GmbH (Germany, EU) | servers and database | all profile and budget data |
| Cloudflare, Inc. (storage in the EU) | storage of encrypted database backups, DNS, forwarding of support emails | encrypted backups; emails you send to support |
| Apple | Sign in with Apple, App Store, notifications | identifier, email, purchases |
| Sign in with Google | identifier, email | |
| RevenueCat, Inc. (USA) | subscription management | customer ID, purchase history |
| PostHog (EU servers) | usage analytics | events without financial data, pseudonymous ID |
| Telegram | delivering reminders | chat ID and reminder text (name, amount, date) |
Processors receive only what their function requires and act under data processing agreements. Transfers outside the EEA or Ukraine (e.g. RevenueCat in the USA) rely on Standard Contractual Clauses or other lawful mechanisms.
5. Retention
- While your profile exists — all profile and budget data.
- After you delete your profile — data is removed from live servers as soon as the request is processed and from backups within 14 days; after that it can't be recovered.
- Server logs — for a limited time: they are overwritten automatically once they reach a set size.
- Analytics — up to 12 months in pseudonymised form.
- Purchase records we must keep by law — for the statutory period.
6. Your rights
You can: access your data and get a copy; correct it (mostly directly in the app); delete it; restrict or object to processing (including analytics); withdraw consent (e.g. disconnect Telegram); port your data; and complain to the Ukrainian Parliament Commissioner for Human Rights or to the supervisory authority in your EU country.
To exercise your rights, email support@pennifybudget.app. We reply within 30 days.
7. Deleting your profile
- In the app: Profile → Delete profile. This deletes your profile, all budget records, settings and the Telegram link — on the server and on every synced iPhone.
- Or email support@pennifybudget.app from the address linked to your profile.
- Deleting your profile doesn't cancel an Apple subscription — turn it off in Apple ID settings.
- After deletion you can sign up again as a new user; previous data isn't restored.
8. Security
Traffic to our servers is encrypted (TLS). Each user's data is accessible only within their own profile. Database backups are encrypted before they are stored, and Apple sign-in tokens are stored encrypted in the database. Only the developer has access to the servers, with a personal key. Data on your iPhone is protected by iOS encryption.
9. Children
The Service isn't intended for people under 16. We don't knowingly collect their data and will delete such a profile if we learn of it.
10. Changes
We'll announce material changes in the app. The current version is always at https://pennifybudget.app/en/privacy.
11. Contact
Oleksandr Tymoshenko (sole proprietor) · Email: support@pennifybudget.app · Kyiv, Ukraine