Security
Understand how PennyGuard handles your data
PennyGuard needs read-only access to find what you pay for. Here is what each connection allows, what we keep, and how to turn access off at any time.
Your money
You connect a bank or card through Plaid with read-only access, and we never see your bank login. PennyGuard does not hold or move your money, pay your bills, or open financial products for you.
Connections
Read-only bank and card access
Plaid connects your bank or card with read-only access. PennyGuard sees your transactions to find recurring charges and perks, and cannot move money.
Sign in with Apple or Google
Your PennyGuard account uses Apple or Google sign-in. It is separate from the bank, card and email accounts you connect.
Email, only if you choose
Gmail connects through Google's own authorization. Outlook and Yahoo connect through Nylas, an email integration provider.
If you connect your email, PennyGuard reads it only to find subscriptions, bills and charges.
What we look for
Amounts, billing frequency, renewal and due dates, and the sender's address.
What we don't keep
We do not store the full content of your emails, and we do not look at personal or unrelated messages.
Not used for ads
Email content is not used for advertising and is not shared with partners.
Emails sent only when you ask
If you ask PennyGuard to cancel a subscription, it can send that email from your Gmail account. Nothing is sent without your request.
Your decisions
PennyGuard prepares actions and shows you what will happen. Nothing is sent until you confirm.
Cancellations
When a cancellation needs access to another account, we don't ask for or store your passwords. One-time codes are used once and then deleted.
Refund requests
A refund request goes to the merchant only after you confirm it, and only for the charge you chose.
Bill negotiation
A partner handles negotiation for the bill you pick. You see its separate fee before anything starts.
Your transaction data is not for sale, and we don't pass it on to advertisers.
Protection
Encrypted in transit
Data moves between you, PennyGuard and our providers over TLS encryption.
Encrypted at rest
Access tokens and other sensitive data are encrypted when stored.
Limited access
Only authorized systems and people can reach user data, and only what their role needs.
Your control
Disconnect an account
Disconnect a bank, card or email account at any time in your account settings. Collection from that account stops, and some features may stop working.
Revoke email access
Turn off email access in your account settings or in your email provider's security settings.
Request deletion
Email privacy@pennyguard.com and we'll delete your data. Our Privacy Policy explains the details.
Email our privacy team
FAQ
Yes. PennyGuard uses read-only access through Plaid, never sees your bank login and can't move your money. Nothing happens until you confirm it.
No. You sign in to your bank through Plaid, and PennyGuard never sees your bank login.
No. If you connect your email, PennyGuard looks only for subscription, bill and charge details, and does not store the full content of your emails.
We do not sell your bank transaction data, and we do not share raw transaction data with advertising networks or with partners for their own marketing.
Open your account settings and disconnect the account. You can also revoke email access in your email provider's security settings.
Email privacy@pennyguard.com and we'll delete your data. Our Privacy Policy explains the details.
Write to our privacy team at privacy@pennyguard.com, or see how PennyGuard works step by step.