Privacy policy

Pengo handles some of the most personal information you have: your money. This policy explains what Pengo collects, why, who sees it, and the control you keep. The app is run by Curly Braces, based in Pakistan, and we are responsible for your data.

1. What we collect

• Account details: your name, email address and sign-in method (Apple, Google or email one-time code).
• Financial information you add or connect: accounts and wallets, balances, transactions, bills, subscriptions, goals, debts, investments, limits, and the rewards and penalties you create.
• Voice and documents: audio you record and files you upload (receipts, invoices, statements) so Pengo can turn them into entries.
• Bank connection data: if you connect your bank, the account and transaction information your bank shares with Pengo.
• Bank message data: if you allow message access, your bank's transaction messages, used to log spending.
• Device and usage data: device type, operating system, app version, crash reports and basic usage, so we can keep the app working and fix problems.

2. Bank connection and message access

These features are optional and off until you turn them on. When you give message access, Pengo looks for your bank's transaction messages to log spending. We do not use your personal conversations, and we do not store messages that are not banking transactions. You can switch this off in Profile, and revoke the permission in your phone settings, at any time. Turning it off stops new messages being read. Entries already logged stay until you delete them.

When you connect your bank, the connection only lets Pengo read your account and transaction information. Pengo cannot move money or make payments.

3. How we use your information

We use it to run the app and show your totals, reports and recaps; to log entries from voice, documents, your bank and messages; to power the Pengo coach; to send reminders you ask for; to manage your subscription; to keep your account secure; and to fix bugs and improve Pengo. We use it because you asked us to provide the Service, because you agreed to optional features such as bank connection and message access, and because we have a legitimate interest in keeping the Service safe and working.

We do not sell your personal information, and we do not use your financial information for advertising.

4. Who we share it with

We share information only with services that help us run Pengo, and only so they can do that job. These include cloud hosting and database providers, authentication (Apple, Google and email sign-in), bank connection providers, crash and performance reporting, AI services that process voice, documents and coach questions to produce your entries and answers, and Apple and Google for subscription payments. We may also share information if the law requires it, or to protect the rights and safety of our users.

5. Your choices and rights

• Edit or delete any entry inside the app.
• Turn off bank connection or message access in Profile.
• Ask for a copy of your data, a correction, or deletion of your account by emailing business@curlybraces.co from the address you signed up with.
• Depending on where you live, you may have additional rights, including objecting to some processing or complaining to your local data protection authority.

6. How long we keep it

We keep your data while your account is active. If you delete your account, we delete or anonymise your personal information within 30 days, except for anything we must keep to meet legal obligations. Backups are cleared on their normal cycle.

7. Security

We protect your data with encryption in transit and access controls on stored data. No system is perfectly secure, so please keep your phone locked and use a sign-in method you protect.

8. Children

Pengo is for people aged 18 and over. We do not knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.

9. International transfers

Our providers may process data in countries other than yours. Where the law requires it, we use safeguards to give your data equivalent protection.

10. Changes

We will post updates on this page and tell you in the app or by email when a change is significant.

11. Contact

Curly Braces, Islamabad, Pakistan. Email business@curlybraces.co or visit the contact page.