What the app stores
PennyLog stores what you type into it so it can show it back to you:
- Records: amounts, dates, categories, accounts, notes and any person tags you add.
- Set-up: your accounts, categories, budgets, budget templates and recurring schedules.
- Split groups: group names, the names of people you add, the expenses in each group and any UPI IDs you save for them.
- Preferences: currency, theme, reminder time and backup schedule.
All of this is kept in a database on your phone. PennyLog has no server that receives your records, and we cannot see them.
Google Drive backup
Backup is off until you turn it on. When you do, you sign in with your Google account and PennyLog saves a backup file to your own Google Drive, either when you tap back up or on the schedule you choose. Restore reads that file back onto your phone.
PennyLog asks Google only for access to files it creates itself. It cannot open, list or change any other file in your Drive, and it does not read your name, email address or contacts. The sign-in token is kept in your phone’s secure storage.
The backup file stays in your Drive under your Google account, and Google handles it under its own privacy policy. You can sign out in the app or delete the backup from your Drive at any time.
Analytics and crash reports
To learn which features are used and to fix problems, the app uses these Google Firebase services:
- Firebase Analytics: records that something happened, such as a record added, a budget created or a report exported. An event can include the record type, the category, the kind of account and a rough size of the amount (small, medium or large). It never includes the exact amount, notes, account names or the names of people you add. Firebase also collects standard device details such as model, Android version, language and approximate country.
- Firebase Crashlytics: if the app crashes, it sends a crash report with the technical details of the error, the app version and device details, so the bug can be fixed.
- Firebase Cloud Messaging: gives your phone a delivery token so the app can receive notifications, such as news about an update.
When it opens, the app also reads one public document from Google Cloud Firestore (part of Firebase) with the latest version number and its release notes, and asks Google Play whether that update is available for your phone, so it can offer it to you. Nothing about you or your records is sent; like any web request, Google sees your IP address and device details.
This information goes to Google, which processes it for us under the Firebase privacy terms. It is not linked to a name or email address. PennyLog has no ads and does not sell or share your information with advertisers.
The app is distributed through Google Play, which also gives developers basic install and crash figures that do not identify you.
Permissions
- Notifications: to send the daily reminder you set up, budget alerts, and the progress of a backup or export.
- Alarms and reminders: so the daily reminder arrives at the exact time you chose.
- Run at startup: to set your reminders again after the phone restarts.
- Vibration: for notification alerts.
- Internet: for Google Drive backup and restore, analytics and crash reports.
- Storage (Android 12 and older only): to save exported reports and shared images to your phone.
PennyLog does not ask for access to your SMS, contacts, location, microphone or camera.
Split expenses and sharing
The people you add to a split group are saved on your phone only. PennyLog does not contact them and does not upload their names or UPI IDs.
When you share a summary, the app creates an image or message and hands it to the app you pick, such as a chat app. It contains what you see in the preview: the group name, names, amounts and, in the app, a UPI QR for the person being paid. After you send it, the app you sent it through and the people who receive it hold that copy.
PennyLog does not move money. Payments happen in your friends’ own payment apps.
This website
This website sets no cookies, runs no analytics or ads, and loads its fonts from its own server. Only your light or dark theme choice is remembered, in your own browser.
The split tool runs entirely in your browser. The names and amounts you enter are not sent anywhere and are gone when you close the tab.
The What’s new page loads the app’s release notes from Google Cloud Firestore (part of Firebase) directly in your browser. Like any web request, this lets Google see your IP address and browser details; no cookies are set and nothing about you is stored. Other pages make no such request.
Like any website, the hosting provider may keep standard server logs, such as IP address, browser type and the time of a visit, to keep the site running and secure.
Your control
- Delete records: use Delete & reset in settings. The app lists what will be removed before it does it.
- Remove everything from the phone: uninstall the app.
- Remove a backup: delete the backup file from your Google Drive.
- Take your data with you: export a PDF report or an Excel spreadsheet for any period.
- Analytics data: it is not tied to your identity, but you can write to us to ask about it.
Children
PennyLog is a general-purpose money tracker and is not directed at children under 13. We do not knowingly collect information from children.
Changes
If this policy changes, the new version will be posted on this page with a new effective date. If a change affects what leaves your phone, the app will tell you before it takes effect.
Contact
Questions about this policy or your data: timsved57@gmail.com
PennyLog is published by Smit Prajapati, Gujarat, India.