Pennypip Privacy Policy

Last updated: October 5, 2026

Company: WileyWorx LLC ("Pennypip," "we," "us")

Contact: support@pennypip.com

Pennypip teaches personal finance and economics in short lessons. We built it to need very little about you. We never ask for bank accounts, card numbers, Social Security numbers, or passwords to other services.

1. What we collect

Things you tell us (in onboarding or your profile)

• Your name (it's kept on your device; others see it only if you choose to show it)
• Your state (required, or "National only") and your city (optional), used for leaderboards and state-specific lessons
• Age range, education, and income range (all optional, with "Prefer not to say")
• Your learning goals and interests
• A profile handle and avatar, or a photo if you upload one (optional)

Things the app records as you use it

• Essential data (needed for the app to work): an anonymous account ID, your lesson progress, scores, XP, streak, lives, your subscription status, and crash and security logs.
• Crash reports go to Sentry so we can fix a broken screen. A report includes the stack trace, the app version, the build mode (learner, reviewer, or developer), and the screen name. It does not include your name, email, IP address, lesson answers, age, income, city, or other profile answers. Typed text is removed. There is no session replay. This is not used to track you across other apps.
• Usage analytics (you can turn this off): which screens and lessons you open, quiz results, where people stop, and time in the app. We use these with your optional profile answers (such as age range or state) to see which lessons work for which groups of people.

Ads (free version only)

• Google AdMob shows rewarded ads when you choose to watch one. On iPhone, AdMob uses your device's advertising ID only if you allow tracking in Apple's prompt. If you don't, you still get ads, just not personalized ones.

Things we don't collect: bank or card numbers, account logins, government ID numbers, your precise location, your contacts, or health information.

2. How we use it

• To run the app: save progress, keep streaks and lives, and manage Plus. On iPhone, if iCloud is on, a copy of lesson progress, XP, streak, and the on-device Plus status is stored in your own iCloud key-value storage. WileyWorx cannot see that copy. iCloud is optional. If it is off, progress stays on the phone only.
• To improve lessons: find confusing questions and lessons, and measure what people learn.
• For leaderboards and public profiles, only as described in section 4.
• For reminders you've allowed (streak reminders, lives full, leaderboard updates). Offers and news are sent only if you turn them on.
• To keep Pennypip safe: moderate photos and handles, and act on reports.
• To publish research on financial learning, only in combined, anonymous form (for example, "people who finished Budgeting scored 20% higher on the check-in"), never data that identifies you.

3. Who we share it with

We don't sell your personal information. We never give your age, income, state, or city to advertisers.

We share data only with service providers who work for us under contract and may not use it for anything else:

• Supabase: hosts our database and file storage.
• Sentry: crash reports only, as described in section 1. No session replay.
• Google AdMob: ads in the free version (see section 1).
• Apple and Google: process subscriptions and payments. We never see your card.
• Cloudflare Turnstile: an invisible check at sign-in that tells people from bots. Cloudflare's handling of that data is described in the Turnstile Privacy Addendum.

We may also disclose information if the law requires it, to protect people's safety, or as part of a merger or sale of the business (and we'd tell you first).

4. Public profiles and leaderboards

• Your profile is private by default.
• Leaderboards show a handle (for example, "BudgetFox_4821"), your avatar, and weekly XP. They never show your real name, city, age, or income.
• Local leaderboards appear only when a city has at least 25 people; otherwise you see your state's board.
• You can hide yourself from leaderboards, make your profile public or private, and report or block anyone.
• Uploaded photos stay visible only to you until they pass moderation. We remove location data from photos.

Friends, invites and contacts

• Friends are mutual. Someone becomes your friend only when one of you sends a request and the other accepts, or when you use their invite code. You can remove a friend or cancel a request at any time, and blocking someone removes them.
• What friends see: your handle, avatar and frame, current streak, and weekly XP. Friends can send you a streak-freeze gift or a once-a-day nudge.
• Finding people by username: an exact username always matches. Partial-name search only shows public profiles.
• Contacts (optional): if you tap "Check my contacts," Pennypip asks iPhone for permission, then turns each phone number into a one-way scrambled code (a salted SHA-256 hash) on your phone. Only those codes are sent to check for matches. Your contact names and phone numbers are never uploaded or stored.
• Being findable by phone (optional): if you choose to, we store a scrambled code of your own phone number so friends who have your number can find your handle. Turn it off anytime in Friends → Add friends. The number itself is never stored. We do not text-verify numbers.
• Invites: each account has a short invite code. When someone joins with your code and finishes creating a profile, we record who invited whom so the reward can be paid, and you become friends.

5. Your choices

In Settings → Privacy choices you can:

• Turn usage analytics off
• Turn off personalized ads
• Download your data
• Delete your account. This deletes your progress, profile, photo, leaderboard history, friends, gifts, nudges, invite records and any findable-phone code from our servers, clears the copy in your iCloud, and cancels reminders on that phone. A subscription bought through Apple or Google is not cancelled by deleting the account. The screen links you to Apple settings to cancel it.

You can turn notifications off in the app or in your phone's settings. You can change or remove optional profile answers at any time.

iCloud backup is off when iCloud is off for the phone. Turn it on or off in the iPhone Settings app. The app still works either way. Choosing Start fresh after a reinstall keeps the new progress and does not require an account.

6. How long we keep it

• Account and progress data: while your account exists, then deleted within 30 days of a deletion request.
• Usage analytics: up to 24 months, then deleted or made anonymous.
• Crash and security logs: up to 90 days.
• Moderation records and reports: as long as needed to keep the service safe, then deleted.

7. Security

We use encryption in transit, access controls, and database rules so each person can reach only their own data. No system is perfect; if a breach affects you, we'll tell you as the law requires.

8. Age

Pennypip is for adults 18 and older. We don't knowingly collect data from anyone under 18. If we learn we have, we delete it.

9. State privacy rights

Depending on where you live (for example, California, Virginia, Colorado, or Texas), you may have the right to know, access, correct, delete, or port your data, and to opt out of targeted advertising, sale, or profiling. Most of these are built into Privacy choices. For anything else, email support@pennypip.com. We won't treat you differently for using your rights. We honor Global Privacy Control signals where the law requires it.

10. Changes

If we change this policy, we'll update the date above and tell you in the app. We won't start using data you already gave us in a new way without asking you first.

11. Contact

Questions or requests about your privacy: support@pennypip.com.

WileyWorx LLC · support@pennypip.com