Privacy for

PennyBook Privacy Policy

Effective October 2026

PennyBook is built so that we couldn't see your money even if we wanted to. There are no servers of ours, no accounts, and no networking code of our own. The only thing that can leave your device is your own data, into your own iCloud, and only if you turn on iCloud sync.

In short

PennyBook collects nothing: your book stays on your device, and in your own private iCloud only if you turn on sync.

What we collect2

Nothing. PennyBook collects no personal data, no financial data, no analytics, no identifiers, and no usage statistics. Not from anyone, ever. There are no third-party SDKs in the app.
PennyBook has no crash reporting of its own. If you have chosen in your device's settings to share analytics with app developers, Apple may pass us anonymous crash reports; that choice is Apple's setting and yours.

Your book6

Your entries, wallets, balances, categories, budget and import history are stored on your device, in the app's own storage. So is everything in the net worth tracker: what you own and owe and their values over time, money you put in or took out with the notes you add, what came back when something was sold or closed, loan details with prepayments and corrections, gold rates you enter, and the people you lent to or borrowed from, with the amounts, dates, repayments and notes. With iCloud sync on, a copy is also kept in your private iCloud (see below).
People in the net worth tracker are only the names you type. PennyBook does not read your contacts.
Your preferences (currency, budget, whether the lock, sync and reminders are on) are kept on the device too. With sync on, your currency is synced as well, so your devices agree on it. So is a small summary for the widgets: your total balance, this month's figures and your latest few entries.
There is no sign-in and no bank connection. PennyBook never asks for a bank login and never talks to a bank.
If you back up your device (to iCloud or to a computer), the book is part of that backup, the same as any app's data. That backup is yours, protected by Apple under your Apple Account; we have no access to it.
You can export the whole book as a CSV file to a place you choose, and you can erase everything from Settings at any time.

iCloud sync5

iCloud sync is off until you turn it on in Settings, or tap Bring it here or Get your book from iCloud when you set up a new device. Until then, your book stays on this device.
With it on, Apple's CloudKit keeps a copy of your book in the private database of your own iCloud account, so your other devices signed in to the same Apple Account show the same book. It is stored and carried by Apple and protected the way your other iCloud data is. Apple's push service quietly tells the app when there are changes to fetch; those silent pushes are never shown to you.
Each time it opens, PennyBook asks iCloud whether you are signed in, so Settings can say how sync stands. When you set up a new book, it also looks in your private iCloud for a PennyBook book you already have, so it can offer to bring it here. That look only reads your wallets' names; nothing is written or sent from the device.
We cannot see any of it. A private iCloud database belongs to your account, and developers have no access to what is in it. PennyBook does not use iCloud for anything else.
Turning sync off keeps the book on this device and stops sending changes; the copy already in iCloud stays. Erase everything while sync is on removes the book from iCloud and from every device that syncs with it. You can also delete PennyBook's iCloud data from iCloud storage in the Settings app.

Ask PennyBook4

Ask PennyBook answers questions about your money with Apple Intelligence, which runs on your device. Your questions, your entries and the answers are not sent to Apple, to us or to anyone else.
PennyBook works out every figure itself, from the entries on your device. The on-device model only reads your question and writes the words of the answer.
The conversation is kept only while Ask PennyBook is open. It is not saved, not added to your book and not synced; closing it, or tapping New chat, forgets it.
It is shown only on devices that support Apple Intelligence with it turned on, and you can turn it off in PennyBook's Settings under Smart help.

Importing and dictation3

When you import the export file from another app, or paste a table, PennyBook reads it on your device. The file itself is not uploaded anywhere, and only the entries you confirm are kept (and, with iCloud sync on, synced like any other entry).
The microphone in an entry's note and in Ask PennyBook uses Apple's speech recogniser with on-device recognition required, so what you say is turned into words on your device and is not sent to Apple or to us. It listens only while the microphone is on. If your device cannot recognise speech on the device, the microphone is not offered.
PennyBook cannot read your messages, your bank accounts or your other apps. iOS does not allow it, and we would not want it to.

Permissions4

Microphone and Speech Recognition are asked for the first time you tap the microphone, to write what you say into an entry or a question. You can say no and type instead.
Face ID is asked for only if you turn on the lock, and to confirm erasing everything. The app only learns whether you passed; it never sees your face or fingerprint data.
Notifications are asked for the first time you turn on net worth reminders. You can say no; nothing else changes.
PennyBook asks for nothing else: no location, contacts, photos or tracking.

Reminders2

If you turn on Net worth reminders, PennyBook schedules local notifications on your device: the monthly check-in, each loan's EMI day, and money due back or due to be paid. They are made from your book on the device and shown by iOS; nothing is sent to us or to anyone else to create them.
A reminder can show a name and an amount, such as who pays you back today, and iOS may show it on the Lock Screen. You can change how they appear in the Settings app, or turn them off in PennyBook.

Siri and Shortcuts1

If you ask Siri to log an expense, your request is handled by Apple under Apple's privacy policy before it reaches the app, as with any Siri request. The entry is written on your device, and PennyBook itself sends nothing.

Purchases2

PennyBook Pro is a one-time purchase processed entirely by Apple through the App Store. We never see your payment details or your Apple Account, and Apple's privacy policy governs that transaction.
To know whether you own Pro, the app asks the App Store on your device, and keeps a note of the answer there. Nothing about the purchase is sent anywhere by PennyBook.

Children1

PennyBook collects no data from anyone, including children.

Changes1

If this policy ever changes, the updated version will be posted at this address with a new effective date. Since the app has no way to send data to us, any future change could only apply to future versions of the app.

Contact1

Questions? Email hello@papermint.studio.

Still need a hand?

A person reads every message, usually within a day.

hello@papermint.studio