Privacy Policy

Our approach to privacy

PennyPath is built with privacy at its core. We believe you should be able to manage your money without handing over personal information. We store the absolute minimum data needed to make the app work, and we never sell, share, or monetise your data.

What we store

When you create an account, we store:

• A unique identifier from your authentication provider (Firebase UID)
• Your preferred currency (GBP, USD, or EUR)
• Your preferred theme (light, dark, or system)
• Your financial data: income sources, bills, debts, budgets, expenses, savings goals, emergency fund, and mortgage details

What we do not store

• Your name or email address
• Bank account numbers or sort codes
• Credit card details
• Any form of personally identifiable information (PII)

Your email address is held by Firebase Authentication (operated by Google) and is never stored in our database.

Authentication

We use Firebase Authentication for account management. When you sign in, Firebase verifies your identity and issues a token. We create a secure, HTTP-only session cookie that expires after 14 days. We do not access or store your password.

Data storage and security

Your data is stored in a secure database hosted on Google Cloud Platform. All connections are encrypted in transit using TLS. The application runs on Google Cloud Run with access restricted by authentication at every API endpoint.

Cookies

We use a single HTTP-only session cookie for authentication. Your theme preference is stored in your browser's local storage. We also use a cookie set by our analytics provider (PostHog) to understand how people use PennyPath so we can improve it. This cookie does not contain any personal information.

Analytics

We use PostHog to collect anonymous usage data such as which pages are visited and which features are used. This helps us understand how to improve PennyPath. Analytics data is processed in the EU. For logged-in users, we associate usage data with your account to provide a better experience. We do not use analytics data for advertising or share it with third parties.

Third-party services

• Firebase Authentication (Google) -- handles sign-in and account security
• Google Cloud Platform -- hosts the application and database
• Google Fonts -- serves the Inter typeface
• PostHog (EU) -- anonymous product analytics

Data export and deletion

You can export all your financial data at any time from the Settings page in CSV or PDF format. You can delete your account and all associated data from the Settings page. Deletion is permanent and cannot be undone.

Changes to this policy

If we make changes to this privacy policy, we will update the date at the top of this page. We encourage you to review this page periodically.