Privacy Policy

1. Records you choose to keep

PennyZip stores the income, expenses, currencies, accounts, categories, tags, dates, notes, skipped purchases and attachments you enter or import. It does not require bank credentials or execute bank transactions. Avoid entering passwords or complete payment credentials in notes.

Local books use a database with immutable edit history and deletion markers. Deleting a visible entry does not immediately erase every historical byte. Ordinary ledger files use system file protection; this is different from the private vault's independent encryption.

2. Optional iCloud and sharing

If you enable iCloud, book operations, settings, accounts, categories, tags, entries, skipped purchases and ledger attachments may be sent to your Apple account's private CloudKit database. If you invite people to a book, they may access its shared contents. Check actual sync status and permissions before relying on them.

The developer does not operate a server that reads private ledgers. Apple provides iCloud under its own terms and privacy practices. Disabling sync or uninstalling the app does not automatically delete cloud data. Different iCloud accounts are isolated. Shared or previously exported copies may remain with recipients.

3. Processing on your device

Ordinary statistics, receipt text recognition, QR recognition, tips and tax-reserve calculations run on device. Tax-planning inputs are held in memory and are not sent to the developer, IRS or SSA. Receipt originals, PDFs and archive fields stay in the on-device archive. If you explicitly turn a receipt into an entry, that entry and its attachments follow book settings.

The vault uses AES-GCM and a device-specific system Keychain key. The key does not sync with iCloud. Face ID or the device passcode is handled by the system; the developer does not receive biometric data or your passcode. Losing the key, uninstalling or changing devices may make encrypted files unreadable. We cannot recover the original key.

Profile nicknames and device preferences stay on device and do not change your Apple account. Optional AI summaries use Apple's on-device model where supported. This implementation does not upload entries to a developer-run language model.

4. Exchange-rate requests

The currency tool requests fixed USD-base quotes from Exchangerate.dev. These requests do not contain your ledger, conversion input amounts, contacts or Apple account. The provider may process an IP address and connection metadata needed to serve requests. Quotes are cached separately and show their source and time.

5. Permissions and user-directed exports

Camera access is for receipt photos or QR scans you request. Photo selection, saving images, file import, sharing and reminders use the corresponding system permissions and interfaces. You can change permissions in iOS Settings. You choose the contents and destination of exports, receipt images and feedback. QR codes contain readable entry snapshots. Widgets may show selected summary information.

6. Billing, advertising and diagnostics

Purchases are not available in the current development version. Any future Apple subscription will require your confirmation. Apple handles payment; actual entitlements must be verified from transactions. Viewing membership information does not enroll you.

The app has no advertising or third-party tracking/analytics SDK. The developer does not sell private ledger content. Apple may provide aggregate store statistics or crash diagnostics under your system choices. Feedback contains only what you write and choose to send; version information is optional. No ledger, photos, logs or vault contents are automatically attached.

7. Website and support

Hosting and CDN providers, including Cloudflare, may process IP addresses, request times and technical connection metadata to serve and protect this website. Its source adds no advertising cookies, behavioral analytics scripts or feedback collection form.

If you email support, we receive your email address and the information you choose to send. We use it to respond, investigate issues and meet applicable obligations, retaining it as needed for those purposes. Contact support@prismsai.org to request access, correction or deletion of support correspondence. Do not send passwords, verification codes, vault keys or complete financial records.

8. Your choices and changes

You can view, edit, delete and export supported records in the app, and manage Photos, notification and iCloud permissions in system Settings. Review cloud storage with the relevant book and Apple's storage controls. Device backups follow your Apple settings. Removing the app does not guarantee removal of cloud, backup or previously shared copies.

The app is not designed for children and does not request contacts, precise location, government ID or an age profile. Material changes to processing will be reflected here and explained where appropriate. Planned features are not treated as already available. Nothing here limits rights provided by applicable law.