Privacy Policy

1. Overview

Penvo ("we", "our", or "the app") is an AI-powered expense tracking app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

We are committed to collecting only what is necessary to provide the service and never selling your personal information.

2. Information We Collect

You can use Penvo in local mode without an account. In local mode your expense records are stored only on your device (and, if you turn it on, in an encrypted backup in your own iCloud account); we do not receive them. The account and cloud-sync items below apply only if you sign in.

2.1 Account Information

When you sign in with Google or Apple, we receive:

• Your name and email address (from your Google or Apple account)
• A unique user ID from your authentication provider

We do not receive or store your password.

2.2 Expense Data

Expense records you create, including:

• Amount, currency, category, date, and note
• Parsed text from receipt photos

If you are signed in, this data is stored in your account and synced to our cloud database (Firebase Firestore) so you can access it across devices and share ledgers with people you invite. Members of a shared ledger can see the records in that ledger.

2.3 Voice Data

When you use voice expense logging:

• Your device's microphone records audio locally
• Audio is converted to text by your device's speech recognition service (Apple Speech Recognition on iPhone; the system speech service on Android, which may be provided by Google)
• On supported iPhones, the text may be parsed entirely on-device by Apple's on-device model; otherwise the recognized text is sent to our AI parsing service to extract expense details
• We do not store raw audio recordings

2.4 Receipt Photos

When you photograph a receipt:

• The image is temporarily encoded and sent to our AI parsing service
• We do not store receipt images after parsing is complete

2.5 Profile and Feedback

• A nickname and avatar, if you set them, shown to members of your shared ledgers
• Messages you send through Settings → Feedback, so we can reply to you

2.6 Device & Usage Data

• Device locale and language preference (stored locally)
• App settings (currency, theme, Face ID preference) stored locally on your device
• Monthly voice and receipt scan usage count (stored locally to enforce free plan limits)

2.7 Purchase Information

If you buy Penvo Pro, the transaction is processed by Apple (App Store) or Google (Google Play). We receive only a confirmation of your purchase and subscription status. We do not receive your payment card details.

3. How We Use Your Information

4. Third-Party Services

We do not use any advertising networks or sell your data to third parties.

5. Data Storage and Security

• In local mode, your expense data stays on your device; iCloud backups are encrypted and stored in your own iCloud account
• If you sign in, your expense data is stored in Google Firebase Firestore, protected by security rules — only you, and members of ledgers you choose to share, can read and write it
• Text and receipt photos sent for AI parsing are used only to return the result and are not stored by us
• Authentication is handled entirely by Google or Apple — we never see your password
• All data transmission is encrypted via HTTPS/TLS
• Face ID/Touch ID lock is handled on-device by Apple's LocalAuthentication framework — biometric data never leaves your device

6. Data Retention

• Your data remains in our cloud as long as your account is active
• If you delete your account, all associated data is permanently deleted within 30 days
• To request account deletion, contact us at: [email protected]

7. Your Rights

Depending on your location, you may have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data (right to erasure)
• Export your data
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].

8. Children's Privacy

Penvo is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Permissions We Request

You can revoke any permission at any time in your device Settings.

10. International Users

Penvo is available worldwide. If you sign in, your expense data is stored on Firebase servers in the United States. Text and receipt photos sent for AI parsing are processed by the providers listed in Section 4, which may be located in the United States or China. Feedback messages are stored on our support server hosted in China. By using these features, you consent to these transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top. Continued use of the app after changes constitutes acceptance of the updated policy. For material changes, we will notify you within the app.

12. Contact Us

If you have any questions or requests regarding this Privacy Policy:

Email: [email protected]

Website: https://penvo.pro