← Back to PennyPush

Privacy Policy

Last updated: April 8, 2026

Introduction

PennyPush ("PennyPush", "we", "us", or "our") is operated by ikoniq studio, based in the Netherlands. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application (the "App").

PennyPush is a privacy-first app. All your personal data — habits, streaks, saved affirmations, and preferences — is stored locally on your device. We do not operate user accounts or a backend server that stores your personal information.

By using PennyPush, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Information You Provide During Onboarding

To personalize your experience, we collect the following during onboarding. This data is stored locally on your device and sent as event properties to our analytics provider (PostHog, EU-hosted) to help us improve the app:

  • First name — used to personalize the app and identify you in analytics
  • Investing emotion — how you feel about investing
  • Journey stage — your current investing experience level
  • Motivation — what drives you to invest
  • Biggest obstacle — what's holding you back
  • Affirmation resonance — your relationship with affirmations
  • Notification preferences — your preferred reminder frequency

2. Information Stored Only on Your Device

The following data is stored exclusively on your device using local storage and is never transmitted to any server or third party:

  • Habit configurations and completion history
  • Penny balance and reward history
  • Affirmation streaks and perfect week counter
  • Saved and liked affirmation phrases
  • Notification time and day preferences
  • Your progress through the affirmation library

3. Information Automatically Collected

Our analytics provider (PostHog) automatically collects when you use the app:

  • Device information — device type, operating system, OS version, app version
  • IP address — used to derive approximate location (country/city level only; we do not collect precise GPS location)
  • Usage data — app opens, screen views, interaction events

4. Feedback Data (Optional)

If you submit feedback through the app, we collect your message, feedback category, and email address (only if you provide it). Feedback is submitted via Formspark.

How We Use Your Information

  • Personalize your experience — onboarding answers shape your app content
  • Improve the app — analyze onboarding funnels, retention, and feature usage
  • Understand our audience — learn where users are located and what devices they use
  • Send local notifications — reminders scheduled on your device based on your preferences
  • Respond to feedback — only if you provide an email address

We do not use your information for advertising, ad targeting, selling to third parties, or training AI models.

Third-Party Services

PostHog (Analytics)

  • Data shared: Onboarding answers, device info, usage events, IP address
  • Data region: European Union
  • Privacy policy: posthog.com/privacy

Formspark (Feedback)

RevenueCat (Subscriptions)

  • Data shared: Anonymous user identifier, purchase information, subscription status
  • Privacy policy: revenuecat.com/privacy

Loops (Waitlist & Email)

  • Data shared: First name and email address (only if you sign up for the waitlist)
  • Purpose: Waitlist management and launch notifications
  • Privacy policy: loops.so/privacy

Apple App Store

  • Purpose: App distribution and payment processing for subscriptions (handled directly by Apple)

We do not use any advertising SDKs, tracking pixels, or social media analytics tools.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only:

  • With analytics providers (PostHog, EU-hosted) to improve the app
  • Via Formspark for feedback submissions
  • With RevenueCat for subscription management
  • When required by law, regulation, or legal process
  • To protect rights and safety of our users or the public

Data Security

  • Local-first architecture — personal data stays on your device
  • Encrypted connections — all transmissions use HTTPS/TLS
  • EU data hosting — analytics data stored in the European Union
  • No user accounts — no passwords or central database of personal information
  • Minimal collection — we only collect what's necessary

No method of electronic transmission is 100% secure, and we cannot guarantee absolute security.

Your Rights

All Users

You have the right to:

  • Access your data — your personal data is stored on your device, giving you full access at all times
  • Delete your data — uninstalling the app removes all local data; contact us to request deletion of analytics data held by PostHog
  • Opt out of analytics — contact us and we will disable PostHog tracking for your device
  • Control notifications — disable at any time via app settings or your device settings
  • Stop all collection — uninstalling the app immediately stops all data collection

European Users (GDPR)

As PennyPush is operated from the Netherlands, we comply with the General Data Protection Regulation (GDPR). As an EU resident, you have the following rights:

  • Right of access (Art. 15) — you can request a full copy of all personal data we hold about you
  • Right to rectification (Art. 16) — you can ask us to correct any inaccurate or incomplete data
  • Right to erasure (Art. 17) — you can request that we delete all your personal data ("right to be forgotten")
  • Right to restriction (Art. 18) — you can ask us to temporarily stop processing your data while we resolve a concern
  • Right to data portability (Art. 20) — you can request your data in a structured, machine-readable format to transfer elsewhere
  • Right to object (Art. 21) — you can object to processing based on our legitimate interests, and we must stop unless we have compelling grounds
  • Right to withdraw consent — you can withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal
  • Right to lodge a complaint — if you believe we are handling your data incorrectly, you can file a complaint with the Dutch data protection authority

Dutch Data Protection Authority: Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl
Address: Bezuidenhoutseweg 30, 2594 AV Den Haag, Netherlands

Legal basis for processing:

  • Legitimate interest — analytics to improve the app experience
  • Consent — onboarding data collection and notification preferences
  • Contract performance — providing the app service

To exercise your GDPR rights, email us with "GDPR Request" in the subject line and specify which right you wish to exercise. We will respond within one month of receipt, as required by GDPR.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know — you can request what personal information we collect and why
  • Right to delete — you can request deletion of your personal information
  • Right to opt out — you can opt out of the sale of personal information; however, we do not sell personal information
  • Right to non-discrimination — we will not treat you differently for exercising your privacy rights

Data Retention

  • Local data — stored on your device until you uninstall the app or clear app data
  • Analytics data — retained according to PostHog's data retention policies (EU-hosted)
  • Feedback data — retained as long as needed to address your feedback

Contact us to request deletion of analytics data.

Children's Privacy

PennyPush is not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Push Notifications

Notifications are scheduled locally on your device based on your preferences. They are optional, can be disabled at any time, and are not used for marketing or advertising.

In-App Purchases & Subscriptions

Subscriptions are processed through the Apple App Store and managed via RevenueCat. We do not have access to your payment or billing details — these are handled directly by Apple. You can cancel your subscription at any time through your Apple ID settings (Settings → your name → Subscriptions).

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by updating the "Last updated" date at the top. Continued use of PennyPush after changes become effective constitutes acceptance of the revised policy.

Contact Us

PennyPush — operated by ikoniq studio
Email: pennypush@ikoniqstudio.com
Website: pennypush.ikoniqstudio.com

By using PennyPush, you acknowledge that you have read and understood this Privacy Policy.