Privacy Policy

Privacy Policy

Peggy ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use the Peggy mobile application and related services.

1. Types of Personal Information Collected

Account Information

When you create a Peggy account, we may collect your email address, display name, and authentication credentials. If you sign in with Apple or Google, we receive only the information you authorize those services to share.

Transaction Data

Peggy stores expense and income entries you create, including amounts, categories, dates, currencies, and any notes you attach. Voice inputs are processed to extract transaction details and are not stored as audio recordings.

Payment Notification Data

If you turn on automatic transaction tracking, Peggy processes the text of payment notifications from Google Pay and Google Wallet, or the transaction details an Apple Pay Shortcuts automation passes to it, in order to create the matching expense. This feature is off by default. See section 4 for exactly what is read and what is ignored.

Usage Data

We collect anonymized analytics about how you interact with the app, such as feature usage frequency and session duration. This data cannot be used to identify you personally.

2. How Your Data Is Stored

For iOS Users with iCloud

If you use Peggy without creating an account, your data is stored locally on your device and synced through your personal iCloud account. Peggy does not have access to your iCloud data in this mode.

For Peggy Account Users

If you create a Peggy account (required for shared wallets and cross-platform sync), your data is stored on our secure servers powered by Supabase with row-level security policies ensuring only you and your authorized collaborators can access your data.

3. Use of Personal Information

We use your information to:

• Provide, maintain, and improve the Peggy service
• Process and categorize your financial entries using AI
• Enable shared wallet features with collaborators you invite
• Send transactional notifications (e.g., budget alerts, shared wallet activity)
• Generate anonymized, aggregated insights to improve the product

4. Automatic Transaction Tracking (Optional)

Peggy can create transactions automatically when you pay with Apple Pay or Google Pay. This feature is turned off by default. It only runs after you enable it yourself, and you can turn it off at any time in Settings.

On Android

With your explicit permission, Peggy uses Android's notification access to read notifications from a fixed list of payment apps - Google Pay and Google Wallet. Notifications from every other app are ignored and discarded without being read, stored, or transmitted. We do not collect your notification history, and notification access is never used for any purpose other than creating the transaction you just made. You can revoke this permission at any time in Android Settings, or by turning the feature off inside Peggy.

On iPhone

The iOS version uses no notification access at all. Instead, you create a Shortcuts automation yourself that passes the amount and merchant of an Apple Pay transaction to Peggy. Deleting the automation in the Shortcuts app stops it entirely.

What Is Processed

When a matching payment is detected, the text of that single payment notification is sent over an authenticated connection to our server-side function, which uses an AI model to extract the amount, merchant, currency, and a suggested category. Only that text and the names of your own wallets and categories are sent. Your bank credentials are never involved, because Peggy has no bank connection of any kind. The extracted transaction is then saved to your account under the same protections as any expense you enter yourself.

5. Legal Basis for Processing

We process your personal data based on: (a) your consent when you create an account and use the service; (b) the necessity to perform our contract with you; and (c) our legitimate interest in improving and securing the service.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

• AI providers — Transaction text is sent to language model APIs for parsing. This includes the text of a payment notification if you have enabled automatic transaction tracking. No personally identifiable information is included beyond the text you enter or the notification being parsed.
• Infrastructure providers — We use Supabase for database hosting and Firebase Cloud Messaging for push notifications.
• Analytics — Anonymized usage data may be processed by analytics services.
• Legal requirements — We may disclose data if required by law or to protect our rights.

7. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated personal data will be permanently removed within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and all associated data
• Portability — Export your data in a standard format (CSV)
• Objection — Object to processing based on legitimate interests

To exercise these rights, contact us at [email protected].

9. Children's Privacy

Peggy is not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Peggy after changes constitutes acceptance of the updated policy.