Privacy Policy

Effective date: 25 August 2026

1. Who we are

This policy applies to the Penvy Android application and the related Penvy cloud service operated under penvy.site. Questions and privacy requests can be sent to support@penvy.site.

2. Information Penvy handles

Depending on how you use Penvy, we handle the following information:

• Account information: your email address, optional display name, email-verification status, and password stored as a one-way hash on the server.
• Expense and budget information: amounts, currencies, categories, descriptions, optional notes, dates, monthly budgets, and category budgets that you enter.
• Preferences: selected currency, theme, notification preference, app-lock choice, and related settings.
• Sync and device information: an app-generated device identifier, device manufacturer and model, synchronization status and time, and technical operation identifiers used to prevent duplicate sync changes.
• Security and service information: authentication tokens, verification and password-reset code hashes, request timestamps, IP-derived security records, and server logs used to protect the service, diagnose faults, and apply rate limits.
• Advertising information: when ads are enabled, Google Mobile Ads may process IP address, approximate location derived from IP, app interactions, diagnostics, advertising identifiers, app-set identifiers, and related device or account identifiers.

3. How we use information

We use information to:

• create and secure your account, verify your email, and reset your password;
• provide expense tracking, budgeting, insights, preferences, export, and synchronization;
• keep your information consistent across your devices and restore it after sign-in;
• prevent abuse, duplicate operations, unauthorized access, and technical failures;
• respond to support, privacy, and account-deletion requests; and
• display and measure advertisements when advertising is enabled and your applicable consent choices allow it.

4. Local storage and cloud synchronization

Expense records are saved locally on your Android device first. When synchronization runs, account information, expenses, budgets, and supported settings are transmitted over an encrypted HTTPS connection to Penvy's cloud service. Android system backup and device-transfer backup are disabled for Penvy's local database and preferences.

5. App lock and biometric information

If you use fingerprint or another supported biometric method, authentication is performed by Android's protected biometric system. Penvy does not receive, store, or transmit your fingerprint or biometric template. If you choose a four-digit Penvy PIN, a salted one-way representation is stored only on your device; the PIN itself is not uploaded to Penvy's server.

6. Advertising and consent choices

Penvy uses Google AdMob to provide banner and interstitial advertisements. Google and its advertising partners may collect or receive the advertising information described above for advertising, measurement, analytics, security, and fraud prevention. Where required, Penvy presents Google's consent message before requesting ads and provides an Ad privacy choices option in the app.

Google's handling of information is described in the Google Privacy Policy and How Google uses information for advertising. You can also manage or reset your Android advertising identifier through your device's privacy settings.

7. When information is shared

We do not sell your personal information. Information may be processed by:

• hosting, database, and email-delivery providers that operate Penvy's cloud service and deliver verification or password-reset messages;
• Google AdMob and participating advertising providers when advertising is enabled; and
• authorities or other parties when required by law, or when reasonably necessary to protect users, Penvy, or the public.

Authorized Penvy administrators can access registered-account details, synchronized expense and budget records, sync status, and audit information for support, safety, service administration, and backup purposes.

8. Retention

We keep your account and synchronized records while your account remains active. Expired verification codes, expired or revoked login tokens, rate-limit information, and old synchronization receipts may be removed periodically. Encrypted administrative backups may temporarily contain older copies until those backups are securely replaced or deleted. A protected deletion ledger retains the original numeric account id, a keyed one-way hash of the registered email address, and the deletion time so that an older backup cannot reactivate a deleted account. Information may otherwise be retained for a limited period when reasonably necessary for security, fraud prevention, dispute resolution, or legal compliance.

10. Your choices and rights

You can change currency, theme, app-lock, and available advertising privacy choices in the app. You may request access, correction, export, or deletion of your information by emailing support@penvy.site. Applicable privacy laws may provide additional rights based on where you live.

11. Security

Penvy uses measures designed to protect information, including HTTPS transport, password hashing, hashed server-side tokens and one-time codes, encrypted local session storage backed by Android Keystore, access controls, and encrypted administrative backups. No method of storage or transmission can be guaranteed to be completely secure.

12. Children

Penvy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so that it can be reviewed and deleted.

13. International processing

Service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for such processing.

14. Changes to this policy

We may update this policy when Penvy's features, service providers, or legal obligations change. The effective date at the top will identify the latest version. Material changes may also be communicated through the app or website.

15. Contact

Penvy privacy support
Email: support@penvy.site
Website: https://penvy.site