Privacy Policy
Last updated 23 May 2026
Penny is built around a simple principle: your conversations and journal stay on your device. This policy explains exactly what we do and don't collect, and what happens when you chat with Penny.
This policy applies to the Penny iOS and Android apps. By using Penny, you agree to it.
Who we are
Penny is operated by Stef Gijsbregts ("we", "us"). You can reach us at hello@penny-app.info.
What stays on your device
The app stores the following data on your device only. It is never sent to our servers, never uploaded, never seen by us:
- The name you choose for yourself
- The letter you write during onboarding
- Your daily check-in entries, including any text you engrave on a coin or write in a slip note
- Your full chat history with Penny (automatically pruned to the last 30 days)
- A short anonymized summary of your conversations that Penny uses to feel like she remembers you across sessions
- Your notification preferences and check-in time
- Your country code (used to suggest the right local crisis helpline)
Resetting the app from the settings screen deletes all of this data. Uninstalling the app deletes all of this data.
What gets sent to our servers when you chat
When you send a message in the chat with Penny, the following is transmitted to a small backend service we run on Google Cloud:
- Your chosen name
- Your onboarding letter
- Your current good-day and slip counts (numbers only)
- A windowed history of your most recent chat messages (typically the last 30 turns)
- The anonymized "what Penny knows" summary blob
The backend forwards this to Anthropic, the company whose AI model powers Penny's replies. The reply is sent back to your device.
Our backend is stateless. We do not store your messages on our servers. We do not log message contents. We log only anonymous request timings and token counts, for cost monitoring.
What we don't collect
We do not collect:
- Your real identity, email, phone number, or contact information
- Analytics or usage tracking events
- Location beyond the device's country code
- Advertising identifiers
- Payment information (handled directly by Apple or Google)
- Crash reports tied to your identity
We have no user accounts. We cannot identify who you are.
Third parties
Two third-party services process data when you use the chat:
- Anthropic receives your chat messages and the contextual information listed above, to generate Penny's responses. Their privacy policy: anthropic.com/legal/privacy
- Google Cloud hosts our backend. They handle network traffic but do not see message contents (we don't log them).
We do not sell or share your data for marketing.
Data retention
On-device: kept until you reset the app or uninstall it. Chat messages older than 30 days are automatically pruned; the summary blob preserves their general meaning.
Our backend: nothing stored.
Anthropic: see their privacy policy.
Your rights
You can delete all your data at any time by tapping "Reset and restart onboarding" in the app's settings menu, or by uninstalling the app. Because we don't store anything about you on our servers, there is nothing for us to delete on your behalf.
If you have questions about your data, email hello@penny-app.info.
Children
Penny is intended for adults working through a gambling-related issue and is not directed at anyone under 18. Do not use the app if you are under 18.
Changes to this policy
If we make material changes, we will update the "Last updated" date at the top of this document and notify users with an in-app message. Continued use after the change means you accept the updated policy.