Privacy Policy

Who we are

Pennyweight is a personal finance application operated by Pennyweight LLC, a Delaware limited liability company ("Pennyweight," "we," "us"). This policy explains what we collect, how we use it, and the choices you have. It applies to pennyweight.ai and the Pennyweight application.

Information we collect

We collect the information needed to operate the service:

• Account information. Your email address and authentication credentials when you create an account.
• Financial data via Plaid. When you link a financial institution, we receive transaction history, account balances, account names, masked account numbers, and institution names from Plaid Inc. on your behalf. We never see, receive, or store your bank login credentials.
• Data you add. Transactions, statements, and files you import; accounts and transactions you enter by hand; and the categories, notes, rules, budgets, and preferences that you or your AI assistant save. This data is encrypted the same way as your Plaid data.
• Feedback you choose to send. Bug reports and feature requests your AI assistant submits for you, only after you approve the text. They are stripped of amounts, balances, merchant names, account numbers, and personal names before we receive them.
• Usage and device information. Standard server logs (IP address, user agent, timestamps) needed to operate and secure the service.
• Communications. Messages you send to us through email or in-app support, and our responses.
• Billing information. Our payment processor, Stripe, collects and processes your payment method details on our behalf. We do not receive or store card numbers. We receive only a customer reference and the subscription status, which we use to show you your own billing state.
• Product and website analytics. We use PostHog to understand which features people use and how visitors find Pennyweight. Inside the application, PostHog receives an account identifier and the pages you visit. On pennyweight.ai, it receives the pages you view, the links you click, and the site or campaign link that brought you here; if you then create an account, that visit history and its source are linked to your account. PostHog does not receive your financial content — no merchants, amounts, balances, or account numbers. We do not enable session replay.
• Cookies and similar technologies. Strictly necessary cookies used by our authentication provider to maintain your session, analytics cookies set by PostHog on pennyweight.ai and in the application, and minimal first-party logs used to diagnose errors. We do not use advertising trackers or cross-site tracking pixels.

How we use Plaid data

We use Plaid solely to read transaction and balance data on your behalf, in order to provide the categorization, search, and natural- language insights that make up the Pennyweight product. Specifically:

• We do not sell your Plaid-derived data, or any other personal data, to anyone.
• We do not share your Plaid-derived data with advertisers, data brokers, or marketing partners.
• We do not use your data to train machine-learning models that span across users. AI features operate only on your own data, in your own session.
• We retain Plaid-derived data only as long as your account is active, plus up to 30 days after deletion to complete the removal and meet legal obligations.
• You can disconnect a linked institution at any time, which stops further data retrieval through Plaid. You can request account deletion at any time through the app or by emailing privacy@pennyweight.ai; previously collected data is then handled according to the retention rules below.

Plaid is itself a service provider. Plaid's use of information received from your financial institutions is governed by the Plaid End User Privacy Policy.

How we use other information

We use account information to authenticate you, provide and improve the service, send important transactional emails (security alerts, billing notices), and respond to your support requests. We use server logs to diagnose problems, prevent abuse, and meet our security obligations.

How your data is encrypted

When you set up Pennyweight you choose a passphrase. Your browser derives an encryption key from it, and your financial data is encrypted with that key before it reaches us. A stolen copy of our database is unreadable: merchants, descriptions, amounts, balances, account numbers, notes, and uploaded statements are ciphertext. Some fields stay outside the encryption envelope because we query on them — spending categories, transaction dates, currency, and which transactions belong to the same account.

Our servers can decrypt your data only while you have an active session, and only to do the work you asked for: answering your AI assistant's requests and syncing the institutions you connected. Outside a session we hold no key that can decrypt it. Your AI assistant never holds your keys; it holds an opaque access token, and our server decrypts on demand for the tool calls it makes.

Setup also gives you a recovery code. It is the only other way in. If you lose both your passphrase and your recovery code, your data cannot be recovered by you or by us.

Your AI assistant

Pennyweight works through the AI assistant you connect, such as ChatGPT (OpenAI) or Claude (Anthropic). When your assistant calls a Pennyweight tool, we send it the result of that call. That can include transactions, balances, account names, and the other financial data the request needs. Once your assistant receives it, that provider's own terms and privacy policy govern how it is used and retained. Pennyweight does not control that.

We receive only the tool requests your assistant sends. We do not receive your conversation history. You can see and revoke each connected assistant at any time in the Pennyweight web app's settings. A revoked assistant can no longer read or change your data.

Who receives your information

• The AI assistant you connect, which receives the results of the requests it makes, as described above.
• Our service providers, listed below, only as needed to run the service.
• Plaid, which connects to the financial institutions you choose to link.
• Authorities, when disclosure is required by law.

We do not sell your information, and we do not share it for advertising.

Data retention

We retain Plaid-derived data while your account is active. When you delete your account we remove your data within 30 days. Account information is retained for the life of the account. Server logs are retained for up to 90 days for security and troubleshooting. Support communications and billing records are retained as required by law.

International transfers

Pennyweight is operated from the United States and our service providers are primarily located in the United States. If you access the service from outside the United States, your information will be transferred to and processed in the United States. Where required, we put in place appropriate safeguards for cross-border transfers.

Service providers

We rely on a small number of vetted infrastructure providers to run Pennyweight: Plaid (bank connectivity), Amazon Web Services (hosting and storage, and Amazon SES for our account and billing emails and the waitlist addresses collected on pennyweight.ai), Clerk (authentication), Stripe (payment processing), PostHog (product and website analytics), and Slack (where our team receives the feedback reports you approve). We share only the information these providers need to deliver their service, under contracts that require confidentiality and prohibit secondary use.

Before October 7, 2026, Resend stored our waitlist sign-ups. We are moving those addresses to Amazon SES and closing that account.

Security

All traffic uses TLS 1.2 or higher. Data at rest is stored in AWS with KMS-managed encryption, and your financial fields are additionally encrypted under your own passphrase-derived key as described above. We follow the principle of least privilege internally, log administrative actions, and maintain a documented incident-response process. Report security issues to security@pennyweight.ai.

Your rights

Subject to applicable law, you have the right to access, export, correct, or delete your personal information, and where processing is based on consent, to withdraw that consent. Send requests to privacy@pennyweight.ai. If you are a California resident, you have additional rights under the CCPA/CPRA, including the rights to know, delete, correct, and to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising). If you are in the EEA or UK, you have the rights described under GDPR/UK GDPR. We respond to verified requests within the timeframes required by applicable law.

Security incidents

If we become aware of a security incident affecting your personal information, we will notify affected users and relevant regulators as required by applicable law and within the timeframes those laws require.

Children

Pennyweight is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact privacy@pennyweight.ai and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the app or by email at least 30 days before they take effect.

Contact