What we keep, what we don't, and why.
This page lists everything pennivault saves about you, in plain English. The formal version is our Privacy Policy. If anything here is unclear, ask us.
When you create an account
- Your first name, last name and email address
- Your password, stored as a one-way hash so nobody can read it, including us
- If you sign up with Google: your name, email and Google account ID. Signing up with Google doesn't give us access to your Gmail.
$2b$12$…When you use pennivault
- Your income sources, expense categories and the amounts you plan for each month
- Your transactions: amount, date, category, description and reference
- Your display currency and notification preferences
- Anything extra you add to your profile, like a photo or phone number
- The devices you're logged in on, so you can see and end those sessions
Your light or dark theme choice stays in your browser and isn't sent to us.
Encrypted before we save it
Each transaction's description and reference. We use AES-256 encryption on those fields, so they're unreadable in our database without the encryption key.
Not encrypted at field level
Amounts, dates and categories. We need those to add up your budget and build your reports. They're still protected, because the whole database is encrypted at rest by our database host, MongoDB Atlas.
If you connect Gmail (optional)
What you're allowing
Connecting Gmail gives pennivault read-only access to your inbox. Google defines this permission, and it covers your whole inbox, so we can read emails but not send, delete or change them. We search for bank alert emails and ignore everything else.
What happens to a bank alert
- The Gmail address you connected
- Your Gmail access keys (OAuth tokens), encrypted, so we can check for new alerts
- The ID of each email we processed, and a numeric fingerprint of each imported transaction, so we never import the same alert twice
- The names of the banks we've found alerts from, and the progress of your import
- The email itself. Once the transaction is saved, the email's content isn't stored with it.
- One exception: while an alert is being processed, a temporary working copy can sit in our processing system for up to 72 hours. It's deleted automatically after that.
- Use it for ads, sell it, or share it to build a profile of you
- Use it to train or improve AI models
- Use it to decide whether you get credit or a loan
Google's rules: pennivault's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you visit the website
If you accept analytics in the cookie banner, PostHog records which pages you visit and which buttons you click, so we can see what's working. It never records your amounts, transactions, emails or anything you type into forms. If you reject it, nothing is recorded.
When you contact us
We keep your name, email and message so we can reply.
What we never ask for
- Your bank login or password
- Card numbers, PINs or your BVN
- Access to move money.
pennivault isn't a bank, can't hold your money and can't make payments.
Who else handles your data
We use a small number of services to run pennivault. They process data for us and only for that purpose.
Some of these services are outside Nigeria. See Privacy Policy for how we handle that.
Your controls
- Right awayLogged out everywhere
- ThenGmail access revoked
- DoneAll your data deleted