Privacy
What we collect, and how to take it back
This notice covers pennypact.com and the waitlist. It's short because there isn't much to say yet. Effective September 5, 2026.
This website
pennypact.com is a set of static pages. It sets no cookies, runs no analytics and loads nothing from third parties: fonts, images and scripts all come from our own domain. We don't know who reads it, and we've built it so we can't find out. If we ever add measurement, it will ask first.
Our hosting provider sees the ordinary technical details any web request carries, such as your network address, for the purpose of serving the page and stopping abuse. We don't link those to anything.
The waitlist
When you join the waitlist we store three things:
- Your email address, encrypted at rest. Alongside it we keep a keyed hash of the address, so we can find and delete it without decrypting anything.
- The country you chose, if you chose one, so we know which opening to tell you about.
- When you joined.
We use the address for one thing: to email you when Pennypact opens where you are. We don't send newsletters, don't share or sell the list, and don't add you to anything else. If you join twice, you're still on the list once.
Leaving the list
Leave the waitlist
Email hello@pennypact.com from the address you joined with and we remove it by hand, without a confirmation email.
The product itself
The app's own privacy notice will be published before launch, and in more detail than this. The short version, so you know what you're joining: personal details are encrypted; money and descriptions never leave the record you're part of; nothing published on-chain names a person, an amount or a description; there is no AI processing of anything you upload; and deleting your account removes everything of yours after a 15-day window.
Questions
Email hello@pennypact.com. A person reads it.