Privacy Policy
Pingvy ("we", "our", or "us") operates the Pingvy budget tracking app (the "App"). This Privacy Policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
We collect only the data you actively provide:
- Account data – email address and password (if you create an account) or Apple ID token (if you use Sign in with Apple).
- Financial transactions – amounts, dates, categories, and descriptions you enter manually or via voice.
- Voice recordings – short audio clips recorded when you use the voice entry feature. Audio is processed on-device using Apple Speech Recognition and is never transmitted to or stored on our servers.
- Device data – anonymous crash reports and usage metrics (no personal identifiers) to improve App stability.
2. How We Use Your Data
- To provide and synchronise your financial data across devices (premium feature).
- To transcribe voice entries using on-device Apple Speech Recognition (your audio never leaves your device).
- To generate AI-powered spending insights (text only, processed via a secure proxy — no audio or raw financial data is stored on external servers).
- To send you important service notifications (no marketing emails).
3. Data Storage and Security
Your financial data is stored locally on your device using SQLite and, if you enable cloud sync, in Supabase (EU-region servers). Data in transit is encrypted with TLS. Sensitive credentials (tokens) are stored in the iOS Keychain, never in plain text.
4. Third-Party Services
- Supabase – cloud database for sync (supabase.com/privacy)
- Anthropic Claude – AI-powered expense parsing and insights, via our secure proxy (no data stored)
- RevenueCat / StoreKit – in-app purchase management
- Apple App Attest – security verification to prevent API abuse
We do not sell your data to third parties.
5. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to access, correct, export, or delete your personal data at any time. Use the Delete All Data option in Settings to remove all data from your device and our servers, or contact us at the address below.
6. Data Retention
Local data is kept until you delete it or the App. Cloud data is removed immediately when you use "Delete All Data". Soft-deleted records are permanently purged after 30 days.
7. Children
The App is not directed at children under 13. We do not knowingly collect data from children.
8. Changes
We may update this Policy. The "Last updated" date at the top reflects the latest revision. Continued use of the App after changes constitutes acceptance.
9. Contact
Questions? Email us at hello@pingvy.com.