What your AI provider sees

When you connect an AI app to Pennyweight, that app's provider receives the answers Pennyweight gives your AI. This page lists what Pennyweight sends, what it never sends, and where your provider's terms take over.

If you haven't connected yet, start with Connect your AI.

What your AI receives

• Answers to its requests. Each time your AI asks Pennyweight for something, the answer goes back to your AI app decrypted. A list of transactions includes merchants, amounts and categories. A list of accounts includes account names, institutions, last four digits and balances.
• Your profile, when it connects. Each time your AI app connects, Pennyweight includes your saved profile, capped at 4,000 characters. If that connection can't open your profile, it gets only a note that one is saved, without its contents, saying to reconnect Pennyweight in your AI app. See Your AI profile.
• Billing status, after your trial. If a ledger needs a subscription soon or is read-only, the connect message names it by ledger ID, with a link to subscribe it.
• A demo ledger note. If you have a demo ledger, the connect message says its data is fictional. When your own ledger has no accounts yet, it also gives the demo's ledger ID and type.
• Your unread alert count. If you have alerts you haven't seen, the connect message says how many.
• Standing instructions. Every connection also gets short paragraphs that tell your AI where to save facts, how to review your books, to remind you that it can get numbers wrong, how billing works, and how to offer bug reports and feature requests. They contain nothing about you.
• An access token. After you authorize, your AI app gets a random token that starts with pwm_. It sends that token with every request.

The billing, demo and alert notes carry ledger IDs, links and a count. They don't include ledger names, amounts, merchants or transactions.

From the moment an answer reaches your AI app, your provider handles it under its own terms. Check your provider's privacy terms for how long it keeps conversations and whether it uses them for training. Pennyweight doesn't control that.

What your AI never receives

• Your passphrase. You type it on Pennyweight's authorization page, not in your AI app. Your browser turns it into a key there.
• Your encryption keys. The settings page puts it this way: "Your AI client never holds your keys — it gets an opaque token our server uses to decrypt on-demand, for tool calls only."
• Your sign-in. Your AI app never gets your Pennyweight password or two-factor codes. Authorizing happens in your browser: you need to be signed in with two-factor set up, plus your passphrase.

The token is a random string. Your keys aren't inside it. Pennyweight keeps a session copy of your workspace key on its servers, protected by AWS Key Management Service (KMS), and uses it to answer requests that carry your token. See What Pennyweight can and can't see.

How to do it

To review or cut off what an AI app can read:

1. Open Settings → Connect your AI.
2. Under Connected AI clients, find the connection.
3. Click Revoke, then Confirm revoke.

Full steps, including how to remove Pennyweight inside each AI app, are in Manage and revoke AI access.

What you'll see

The Connect your AI page says: "Authorizing requires your passphrase and two-factor auth." After you confirm a revoke, the connection list reloads. Requests for your data from that token stop working at once, and your AI is told to reauthorize. See my AI lost access to Pennyweight.

Good to know

• Revoking doesn't delete what your provider already has. Answers your AI received before you revoked stay with your provider under its terms.
• Anyone holding the token can use the connection. It works until you revoke it or it goes 30 days without use. If you think it leaked, revoke it.
• Your profile goes out when your AI connects. Keep anything you don't want your provider to see out of your profile.
• Logged changes name the AI app. When the activity log records a change, it notes which AI app made it. See How your AI's changes are logged.