Pennypair Privacy Policy
Effective October 2026 · Pennypair is made by Ji'an Wangdong Technology Co., Ltd. (吉安市旺东科技有限公司), China.
The short version
- Pennypair never connects to your bank, shows no ads, and never sells your data.
- We store what you type into the app (amounts, categories, notes, dates) so you and the people you share a ledger with can see it.
- You can delete your account in the app at any time: Me › Delete account.
What we collect
| Data | Why |
|---|---|
| Sign in with Apple identifier, and the name you choose to share | To create your account and show your name to people you share with. We do not ask for your email. |
| Ledger and savings jar content you enter: amounts, currency, categories, notes, dates, who paid and how it was split | That's the app. Members of a shared ledger see its contents. |
| Purchase records from Apple (product, dates, price, App Store country) | To unlock Pro. Apple handles payment; we never see your card. |
| Face ID lock: a public key created on your iPhone | To check it's you when revealing private ledgers. Your face data never leaves your iPhone and we never receive it. |
| Technical: time zone, language, App Store country, IP address in server logs | To show the right dates and currency, choose the nearest server, and keep the service secure. Logs are kept for a short time. |
We don't collect your contacts, location, bank details, or advertising identifiers, and we don't use third-party analytics or tracking SDKs.
Where it's stored
If you're outside mainland China, your data is stored on servers in Singapore (Alibaba Cloud). If you downloaded Pennypair from the mainland China App Store, or you use our WeChat mini program, your data is stored in Hangzhou, China. A shared ledger lives on one server, so everyone in it uses the same one.
Who can see it
- People you invite to a ledger or jar see its contents and your display name.
- Our staff can see aggregate statistics (for example, how many people signed up today) and basic account facts needed for support. We do not browse your entries.
- Service providers that run the service for us: Alibaba Cloud (hosting) and Apple (sign-in and payments).
- Authorities, only when required by law.
How long we keep it, and deleting it
We keep your data while you have an account. Delete it any time in the app (Me › Delete account). Your personal ledgers and jars are deleted immediately. In ledgers you shared with others, entries you made stay so their balances don't change, but they show as “Deleted user” and are no longer linked to you. Backups are overwritten within 14 days. To stop the free trial from being claimed again and to let you restore past purchases, we keep a one-way hash of your Sign in with Apple identifier and your Apple purchase records; neither contains your name or any entries. If you subscribe, cancel the subscription in your iPhone's Settings › Apple ID › Subscriptions — deleting your account doesn't cancel it.
Your rights
Depending on where you live (for example under the GDPR or CCPA), you can ask to access, correct, export or delete your data, or object to how we use it. Most of this you can do in the app; for anything else, contact us below. You can also complain to your local data protection authority.
Children
Pennypair isn't directed at children under 13 and we don't knowingly collect their data.
Changes and contact
If we change this policy in a meaningful way, we'll tell you in the app. Questions: support@zaoyinba.com.
简要说明
- Pennypair 不连接银行卡、没有广告、绝不出售你的数据。
- 我们保存你在 App 里填写的内容（金额、分类、备注、日期），让你和一起记账的人能看到。
- 你随时可以在 App 里注销账号：我的 › 注销账号。
我们收集什么
- 通过 Apple 登录的账号标识，以及你选择提供的名字（我们不索取邮箱）。
- 你填写的账本和心愿罐内容：金额、币种、分类、备注、日期、谁付的、怎么分摊。共享账本的成员能看到其中内容。
- 来自 Apple 的购买记录（商品、日期、价格、App Store 地区），用来开通 Pro。付款由 Apple 处理，我们看不到你的银行卡。
- 面容 ID 打码：在你的 iPhone 上生成的公钥，用来确认是你本人。面容数据不会离开你的手机，我们也收不到。
- 技术信息：时区、语言、App Store 地区、服务器日志里的 IP 地址，用于显示正确的日期和币种、选择最近的服务器、保障安全，日志只短期保存。
我们不收集通讯录、位置、银行信息或广告标识，也不使用第三方统计或追踪 SDK。
数据存在哪里
中国大陆以外的用户，数据存放在新加坡的服务器（阿里云）。从中国大陆 App Store 下载、或使用我们微信小程序的用户，数据存放在中国杭州。一个共享账本只存在一个服务器上，账本里的所有人使用同一个服务器。
谁能看到
- 你邀请加入账本或心愿罐的人，能看到其中内容和你的名字。
- 我们的工作人员只能看到统计数字（例如今天新注册多少人）和客服所需的基本账号信息，不查看你的账目。
- 为我们提供服务的机构：阿里云（服务器）、Apple（登录和付款）。
- 法律要求时的有关部门。
保存期限与注销
账号存在期间我们保存你的数据。你随时可以在 App 里注销（我的 › 注销账号）：个人账本和心愿罐立即删除；共享账本里你记过的账会保留（显示为「已注销用户」，不再与你关联），以免其他人的差额发生变化。备份会在 14 天内覆盖。为防止重复领取免费试用、并让你重新注册后能恢复以前的购买，我们会保留 Apple 登录标识的单向哈希值和 Apple 购买记录，其中不含你的名字和任何账目。如果订阅了 Pro，请在 iPhone「设置 › Apple ID › 订阅」中取消，注销账号不会自动取消订阅。
你的权利
你可以要求查阅、更正、导出或删除你的数据。大部分操作可以在 App 里完成，其他请联系我们。
儿童
Pennypair 不面向 13 岁以下儿童，我们不会有意收集他们的信息。
变更与联系
政策有重要变更时，我们会在 App 里告诉你。联系我们：support@zaoyinba.com。