Private by design

Pennykite keeps your plan in your browser (IndexedDB), separately for each account that signs in there. That includes your balance, paychecks, bills, debts, payoff plan, check-ins and imported transactions.

What our servers hold

Only what's needed to run your account:

• Your account: name, email address and sign-in methods.
• Your subscription and billing state.
• Your weekly check-in email schedule: on or off, weekday, hour, time zone and the last week an email was sent.
• If you turn on encrypted sync: a copy of your plan, encrypted in your browser with a key only you can unlock.

That's it. The server never sees an amount from your plan in a form it can read, so it can't leak one. The weekly email contains no numbers for the same reason.

What that means for you

Being local-first has trade-offs, and we'd rather you know them up front:

• Your plan belongs to one browser on one device. To use it somewhere else, download a backup file in Preferences and restore it on the other device.
• Clearing your browser data deletes your plan unless you have a backup. Download one now and then.
• Private or incognito windows may not save your plan, or may forget it when you close them.
• You can delete it any time with "Delete my plan from this browser" in Preferences.

Read more in Your data and privacy and the privacy policy.