核心承诺

Data Storage & Full Control

Your financial records are among your most private data. Penny uses a completely offline architecture. Every transaction you record, every category you create, every budget you set, is securely stored in your device's local database. We have no cloud servers to receive this data, which fundamentally eliminates the risk of cloud data breaches, hacker attacks, or unauthorized access. Your data stays in your hands.

Information We Do NOT Collect

• We do not collect your name, email, phone number, or any personally identifiable information
• We do not collect device identifiers (IDFA/IDFV, etc.) for tracking
• We do not collect location, contacts, photo library, or other sensitive data
• We do not include any third-party analytics, advertising, or tracking SDKs
• We do not perform any data reporting or network transmission of any kind

Permission Requests

Adhering to the "principle of least privilege", Penny only requests system permissions when necessary for core features. We promise never to request sensitive permissions unrelated to accounting (such as location, contacts, camera, etc.) and never allow any third-party trackers or ad SDKs in our code. The current version of the app does not request any system permissions during operation.

Data Destruction

When you decide to stop using Penny, the data destruction process is extremely simple and thorough. Simply clear app data in system settings or uninstall the app. Since all data exists only in the local sandbox, these operations will immediately and permanently erase all records. After this operation, data cannot be recovered. Please ensure you have completed necessary backups before proceeding.

Children's Privacy

Penny is not directed at children under 13 and does not knowingly collect any personal information from children. Since the app does not collect any user data at all, the full privacy commitments above apply equally to children.

Changes to This Policy

If we make any changes to this privacy policy, we will update it within the app and on this page. Since the app is fully offline and collects no data, the core commitment of this policy (no data collection) will not change.