Privacy policy

Version 1.6 · October 2026 · applies to Penny for Windows and Android, and the newsletter on this website

Your money data stays on your device, encrypted. Penny has no accounts, no servers, no analytics and no advertising. If you turn on Sync, encrypted copies are kept in your own Google Drive, where only your linked devices can read them.

Who is responsible

Akrot Software publishes Penny. Your financial data never reaches Akrot Software. We act as data controller only for what you choose to send us, such as a support message or a newsletter sign-up. Contact: [email protected].

What Penny stores, and where

Your data (accounts, transactions, budgets, goals, bills, rules, reminders, settings and attached receipts) is kept in Penny's private storage on your device: %APPDATA%\Penny on Windows, the app's private folder on Android.
Backups: automatic copies on the same device (the latest 14 daily copies and a copy before bulk changes, imports and upgrades).
Encryption: everything is encrypted with AES-256-GCM. The key is protected by your Windows account (DPAPI) or by Android's Keystore. If you set a passcode, the key is also locked with it, and a recovery key is shown to you once. We never see your passcode or recovery key and cannot recover your data without them.
Diagnostic log (Windows): technical events only, never amounts, payees or notes.

Optional features that use your device

Purchases from bank notifications (Android, off until you turn it on): with your permission, Penny checks notifications on your phone for an amount of money. It keeps only the notifications of the apps you pick (your bank and card apps), encrypted on the phone, until you add or skip them. They are never sent anywhere.
Share to Penny, widget and quick tile (Android): text or files you share with Penny are used to fill in a new transaction on your device. The home-screen widget shows only what is safe to spend today (hidden while privacy mode is on or Penny is locked).
Receipt scanning (Android): when you scan a receipt, Google's document scanner and text recognition, part of Google Play services, read the photo on your phone. Penny uses the text to fill in a new transaction and keeps the photo, encrypted, with it. Nothing is uploaded.
Reminders (bills, the evening reminder, weekly and monthly summaries) are scheduled with your device's own notification system, and each can be turned off in Settings.

Sync between your devices (optional)

If you turn on Sync and sign in with Google, Penny stores encrypted copies of your data in a hidden app folder in your own Google Drive (the drive.appdata permission). Penny cannot see or change any of your other files.

Each copy is encrypted on your device before upload, with a sync key that exists only on the devices you link (by scanning a QR code). Google and Akrot Software cannot read it.
Penny uses your Google account's email address only to show which account Sync uses.
To stop: Settings › Sync › Stop syncing on this device. To delete the copies: remove Penny's access at myaccount.google.com/permissions, or delete Penny's hidden data in Google Drive (Settings › Manage apps).

Penny's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google APIs is used only to provide Sync to you, is never transferred to others, is never used for advertising, and is never read by people.

What is sent over the network

Nothing about you or your money reaches Akrot Software. There are no accounts with us, no analytics, no advertising and no crash reporting, and Penny never asks for bank logins.
Updates (Windows download from GitHub): Penny checks a small version file on GitHub Releases about every six hours. GitHub can see your IP address, as any web server can. You can switch automatic checks off. The Android and Microsoft Store versions update through their stores.
Sync, only if you turn it on: encrypted copies go to your Google Drive, as described above.

How long data is kept, and deleting it

On your device, until you delete it: Settings › Data & backups › Erase everything, or uninstall Penny. Synced copies stay in your Google Drive until you remove them as described above. Support messages are kept only as long as needed to answer you.

Your rights

Because we hold none of your financial data, you can export, correct or erase all of it yourself in the app. For anything we do hold, such as a support message or your newsletter address, you can ask us to access, correct or delete it, or complain to your local data-protection authority.

Children

Penny is a general-audience tool and is not directed at children.

This website

This website (penny.akrot.app) counts visits with Cloudflare Web Analytics. It sets no cookies, builds no profile of you and does not follow you to other sites. It records page views, the site that sent you here, your browser and country, and how fast the page loaded, as anonymous totals. The Penny app itself has no analytics.

If you subscribe on this website, we keep your email address so we can send you Penny's newsletter: news and updates, about once a month. Nothing else is asked for.

What we store: your email address, when and on which page you subscribed, your browser's language, and the wording you agreed to. Your IP address is not stored; to stop abuse we count sign-ups per visitor for one day under a scrambled code that can't be turned back into the address.
Where: in our own database on Cloudflare, which hosts this website. We never sell or share your address, and it is never connected to the Penny app or your data in it.
Legal basis: your consent, given when you subscribe.
How long: until you unsubscribe. Every newsletter has an unsubscribe link, or write to [email protected] and we'll remove you. Unsubscribing deletes your address from the list.
If we later use an email service to send the newsletter, it will receive your address only to deliver it, and this section will name it.

Changes

If this policy changes materially, the new version is published here and its version number changes.