Policies
Draft. This page states the principles the product is built on. It is not a legal privacy notice. The privacy notice, data protection impact assessment and breach procedure are written and reviewed before launch, and will be published here.
We never hold your money
PennyPlan is a diary. It is not a bank, wallet, savings product, payment app or lender, and no user funds ever touch it. Features that would change this are not built.
How we intend to treat your data
- Your diary is yours. You can export everything and delete your account and data.
- Organisations see aggregates, not people. A cooperative, employer or lender sees anonymised totals over groups of at least 10 people, never an individual’s entries, unless that person chooses to share a summary.
- Personal details are removed before AI. Names, phone numbers and account numbers are stripped before any text is sent to an AI provider.
- Voice notes and receipt photos are temporary. Raw files expire after 30 days unless you keep them.
- We ask before we message you. WhatsApp reminders are opt-in only.
Still to be published
| Document | When |
|---|---|
| Privacy notice | Before launch |
| Data protection impact assessment | Before launch |
| Sub-processor register | Before launch |
| Data subject rights procedure | Before launch |
| Breach response procedure | Before launch |
Last updated on