Penni

Privacy Policy

Last updated September 17, 2026. Penni Technologies, Inc.

Penni is a bookkeeping service for small businesses and real estate agents. It reads your receipts and your bank activity, asks you by text, and records what you approve in QuickBooks.

This page says what Penni collects, where it keeps it, who can see it, and how you can take it out. It is written in plain words. Where the law needs an exact term, we use it.

What Penni collects

When you connect an account, Penni reads only what it needs to keep your books.

  • Your Gmail inbox. Penni asks Google for one permission, called gmail.readonly. It lets Penni read your mail to find receipts, bills, invoices and payment confirmations. Penni cannot send, change or delete your mail.
  • QuickBooks Online. Penni reads your accounts, vendors, invoices, bills and balances, and it writes the entries you approve.
  • Bank and card accounts. When you connect one, the data comes through Quiltt, our bank data partner, with your consent. Quiltt and the providers behind it, such as MX, hold your bank login. Penni never sees it. Penni gets your transactions and balances on a read only basis. Penni cannot move money, make a payment, or change anything at your bank.
  • Texts. Penni sends and receives texts through Twilio. Penni keeps the texts between you and Penni so it can follow the conversation and show you what was asked and answered.
  • Photos and files you text to Penni, such as a picture of a paper receipt.
  • Who you are. Your email address, phone number, name, business name, and the id of your QuickBooks company.
  • Basic logs of how the app is used, so we can fix problems.

What Penni keeps from your email

This part changed on September 17, 2026, so please read it.

  • From each receipt email, Penni keeps the vendor, the amount, the date, the category, the id of the email, who sent it and its subject line.
  • If a receipt email has an attachment, such as a PDF or a photo, Penni keeps a private copy of that file.
  • If an email is a statement, a report or a summary rather than a receipt, Penni files it instead of asking you about it. Penni keeps who sent it, its subject line and a private copy of any attached file, so you can find it later on your Receipts page. Nothing from it goes into your books.
  • If a receipt is only the email itself, with no attachment, and you book it, Penni turns that email into a PDF. Penni does this only when the receipt is booked, and only so the PDF can be attached to the entry in QuickBooks.
  • Penni keeps the words it read on a receipt file, so you can search your receipts by a word on them.
  • For mail that is not a receipt, a bill or an invoice, Penni keeps only the id of the email and when it arrived, so it does not read the same mail twice. The words in that mail are not kept.

Receipt files: where they live and who can see them

  • Receipt files are stored in a private bucket. Each file is stored under your account, and only your account can read it.
  • When you open a receipt, Penni gives your browser a link that works for five minutes and then stops working.
  • Penni attaches receipt files to the matching entries in QuickBooks, so your books carry their proof.
  • When Penni turns a receipt email into a PDF, it also keeps the original email, unchanged, beside that copy. The PDF says it is a copy made by Penni. Your export carries both, the copy and the original.
  • If you are on Penni Pro or Penni CFO, the bookkeeper or CPA who reviews your books can see the entries Penni recorded for you. That review is the service you chose.
  • Penni keeps receipt files for seven years from the day they were stored. That is the usual time tax records are kept. After that, Penni deletes them.
  • When your account is deleted, your receipt files are deleted with it.
  • You can download every receipt file, and a list of them, at any time from the Receipts page in the app. The list is a CSV file, and the files come as a zip.

How Penni uses your data

Penni uses your data only to run your books:

  • to sort and record expenses in QuickBooks after you approve them,
  • to match receipts to bank lines and to your QuickBooks entries,
  • to track invoices and money owed to you,
  • to show your cash and a forecast,
  • to remind you about tax deadlines,
  • to send you summaries and questions by text and email.

Penni uses AI, from Anthropic, to read receipts, photos and bank lines and to answer your questions. Your data is not used to train AI models.

Penni does not sell or rent your data. Penni does not use your data for ads.

Google user data and Limited Use

Penni's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

  • Penni asks for one Gmail permission, gmail.readonly. Penni uses it only to find receipts, bills, invoices and payment confirmations in your inbox, and to propose bookkeeping entries that you approve or decline.
  • The copies of receipt attachments Penni keeps from Gmail are Google user data too. Penni uses them only to show you your receipts and to attach them to your QuickBooks entries. They are never used for anything else.
  • Google user data is never used for ads. It is never sold. It is never shared for someone else's business. It is never used to judge credit or lending. It is never used to train or improve AI models.
  • No person at Penni reads your mail, except when you ask us to, when it is needed for security, or when the law requires it. Data that is added up and cannot identify you may be used to run the service.
  • You can take Penni's access away at any time at myaccount.google.com/permissions.

How Penni keeps your data safe

  • Your data is encrypted while it moves (TLS) and where it sits.
  • Penni stores data in Supabase. No customer connects to the database directly. Every read is made by Penni's server and limited to the signed in account.
  • The keys Penni uses to reach Gmail and QuickBooks are stored on the server and used only for your account.
  • Your bank login never touches Penni. Your card details go to Stripe, never to Penni.
  • Penni's app was assessed under the App Defense Alliance CASA program on September 11, 2026. That is a security assessment by an outside assessor. It is not an approval from Google.

Who Penni works with

Penni uses these companies to run. Each one gets only what it needs for its job.

  • Intuit QuickBooks Online, to read and write your books.
  • Google Gmail, through Nylas, to read your inbox for receipts.
  • Quiltt, and the bank data providers behind it such as MX, to connect your bank and card accounts on a read only basis.
  • Anthropic, whose AI models read receipts and answer your questions.
  • Twilio, to send and receive texts.
  • Resend, to send report and service emails.
  • Stripe, to bill your subscription. Stripe holds your card. Penni never sees it.
  • Supabase, for the database and for receipt file storage. Vercel, to host the app. Netlify, to host penni.so.
  • HubSpot, whose script runs on our pages for support and basic site analytics.

Disconnecting

You can take back any connection at any time.

  • QuickBooks: on the Settings page, tap Disconnect under QuickBooks. Penni gives its key back to Intuit the moment you tap, and your books stay as they are.
  • Bank and card accounts: on the Settings page in Penni, tap Disconnect under the bank. Penni stops reading it at once.
  • Email: on the Settings page, tap Disconnect under Email. Penni deletes its link to your mailbox the moment you tap. To take back Google's permission too, go to myaccount.google.com/permissions, find Penni, and remove it.
  • Texts: reply STOP to any text from Penni.
  • Your plan: on the Settings page, tap Manage subscription.

Deleting your account

On the Settings page, tap Delete my account and type DELETE. Penni deletes your account the moment you confirm. Your plan is canceled, every connection is given back, every file and row Penni stores for you is removed, and your phone number and email are free to sign up again. Your QuickBooks books stay as they are. You can also email support@penni.so.

Deleted means your account, the keys Penni held for your connections, your receipt files, your stored texts, and what Penni learned about your vendors, all gone when the delete finishes. Penni keeps one record of the delete, with your email, your phone number and the day you agreed to texts, the day of the delete, and what each step returned. Stripe keeps its own billing records, as the law requires.

Your books stay in QuickBooks. They are always yours.

Children

Penni is a business service. It is not for anyone under 18, and Penni does not knowingly collect data from anyone under 18.

Changes to this page

When Penni changes how it handles your data, this page changes first, and Penni tells active customers by text or email before the change takes effect. The date at the top is the date of the last change.

Questions

Email support@penni.so. A person reads every message.