Privacy policy
Your statements stay on your iPhone.
Penny Drops has no account, no server and no analytics. The statements, bills and transactions you add are read and stored on your iPhone. We never receive them, so we cannot see, sell or share them.
Who we are
Penny Drops is made by Robert Plant, an individual developer in the United Kingdom. For anything about this policy, write to support@pennydrops.app.
What the app does with your data
- Statements and bills you import are turned into text and read by Apple's on-device model on your iPhone. The text, the transactions found in it, and a copy of the file are kept in the app's storage on your phone.
- Everything you add or change, such as categories, people you share bills with, budgets and notes, is stored the same way, on your phone only.
- Widgets and Live Activities read a small summary (for example this month's left-over figure and the next bills) from storage on the same phone.
- Notifications are created on the phone. None are sent from a server.
None of this is sent to us or to anyone else.
Optional online features
These are off until you switch them on, and each sends only what it needs:
| Feature | Sent to | What is sent |
|---|---|---|
| Bank and shop logos | Google's website icon service | The website name of a bank or shop, for example "oakbank.co.uk" |
| Shop locations on a map | Apple Maps | A shop's name and town |
| Crypto wallets you add | Public block explorers (Blockscout, mempool.space) and price services (CoinGecko, Yahoo Finance) | The public wallet address you enter, and the names of the coins it holds |
Amounts, account numbers, your name and the contents of your statements are never sent by these features. Those services handle the requests under their own privacy policies.
Backups
You can export an encrypted backup file, protected by a passphrase you choose. Where you keep that file is up to you. We do not keep a copy and cannot open it without your passphrase.
Crash reports
If you have chosen in iOS Settings to share analytics with app developers, Apple may pass us anonymous crash reports. These describe what the app was doing when it failed and never include your statements or transactions.
Layout reports
If a statement does not read correctly, the app can make a layout report to help add support for your bank. Every amount, name, merchant and account number in it is replaced with x's before you see it. It is only sent if you choose to share it yourself, using the share sheet.
Deleting your data
Deleting a statement removes its transactions and stored file. Deleting the app removes everything it has stored on your phone. Because we hold no copy, there is nothing for us to delete on our side.
Children
Penny Drops is meant for adults managing their own money and is not directed at children.
This website
pennydrops.app is hosted by Vercel, which keeps standard server logs (such as IP address and pages requested) to run and protect the site. Fonts are loaded from Google Fonts, which receives your IP address when you visit. The site uses no cookies, no analytics and no advertising.
Your rights
Under UK data protection law you can ask what personal data we hold about you and ask us to correct or delete it. For the app, the answer is none: it stays on your device. If you are unhappy with how we handle a request, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes, the new version will be published here with a new effective date. A change that sends any of your data off your phone would only ever be an option you switch on.