Skip to Content
PoliciesOverview

Policies

Draft. This page states the principles the product is built on. It is not a legal privacy notice. The privacy notice, data protection impact assessment and breach procedure are written and reviewed before launch, and will be published here.

We never hold your money

PennyPlan is a diary. It is not a bank, wallet, savings product, payment app or lender, and no user funds ever touch it. Features that would change this are not built.

How we intend to treat your data

  • Your diary is yours. You can export everything and delete your account and data.
  • Organisations see aggregates, not people. A cooperative, employer or lender sees anonymised totals over groups of at least 10 people, never an individual’s entries, unless that person chooses to share a summary.
  • Personal details are removed before AI. Names, phone numbers and account numbers are stripped before any text is sent to an AI provider.
  • Voice notes and receipt photos are temporary. Raw files expire after 30 days unless you keep them.
  • We ask before we message you. WhatsApp reminders are opt-in only.

Still to be published

DocumentWhen
Privacy noticeBefore launch
Data protection impact assessmentBefore launch
Sub-processor registerBefore launch
Data subject rights procedureBefore launch
Breach response procedureBefore launch
Last updated on