Privacy Policy

Effective Date: June 29, 2026

Welcome to Pennytail. We are committed to protecting your privacy and ensuring your financial data remains secure. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

1. Data Storage (Local-First Approach)

Pennytail is built with a strict local-first architecture. This means:

• Your financial data (transactions, budgets, accounts, savings) is stored exclusively locally on your device.
• We do not maintain centralized servers storing your financial records.
• If you uninstall the app without backing up, your data will be permanently deleted from your device.

2. SMS and Notification Access

To provide automated expense tracking, Pennytail requests permission to read incoming SMS messages (specifically on Android devices).

• Purpose: We use this access solely to identify and parse bank transaction alerts (e.g., "Credited", "Debited").
• Processing: SMS parsing is done entirely on your device. We do not transmit your SMS inbox contents or individual messages to any external servers.
• Control: You can revoke SMS permissions at any time through your device settings, though this will disable automated tracking.

3. AI Anomaly Detection (Gemini API)

Pennytail includes an AI-powered anomaly detection feature to spot unusual spending patterns.

• API Usage: If you use the AI features, a subset of your categorized transaction data (amounts, descriptions, categories) is temporarily transmitted to the Google Gemini API to generate insights.
• No Personal Identifiers: We do not send your name, account numbers, or direct personal identifiers to the AI provider.
• Opt-In/Keys: This feature utilizes API keys configured within the app. Data sent to the Gemini API is subject to Google's data privacy policies.

4. Security Mechanisms

We employ multiple layers to secure your app data:

• PIN Lock: You can configure a 4-digit PIN lock screen and security questions to prevent unauthorized local access to your app.
• Device Encryption: We recommend relying on your device's built-in OS-level encryption for at-rest storage protection.

5. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

• Email: Dxt.tarun@gmail.com
• Mobile: +91 9654455857