Privacy Policy

Last updated: September 1, 2026

Penny is a personal, independent voice assistant app. This page explains what data the app accesses, why, and what happens to it. Penny is built around one rule: it only ever acts when you directly ask it to — nothing runs, listens further, or sends data anywhere on its own initiative.

Google Account data

If you choose to connect a Google account, Penny requests exactly three permissions:

• Calendar events — to read your schedule and set entries when you ask it to, e.g. "what's on my calendar tomorrow."
• Google Tasks — to save voice notes and manage a shopping list you dictate.
• Drive (app-created files only) — Penny can only see and manage files it creates itself, never any other file in your Drive. This is used solely to optionally upload a diagnostic log when you ask for one.

Penny never requests broader access to your Google account than this.

Spotify account data

If you connect Spotify, Penny can control playback (play, pause, skip, search, volume) on your behalf. It does not access your listening history, saved library, or any personal data beyond what's needed to control playback.

Data on your device

• Microphone — a small on-device model listens locally for the wake phrase. Nothing is sent anywhere until the wake phrase is detected or you press to talk — at that point, your speech is sent to cloud services (Google Speech-to-Text and Gemini) to be understood and answered.
• Contacts — read on your device only, to match a spoken name to a phone number when you ask to call or text someone. Contact data is never uploaded anywhere.
• Location — used only to provide directions when you ask for navigation.
• Camera — used only when you explicitly ask Penny to look at something. The photo is sent once to Google Gemini for an answer and is not stored by the app afterward.
• Notifications — Penny can read your notifications aloud, but strictly only when you ask it to. It never reads, stores, or acts on notification content on its own.

Where things are stored

Account sign-in tokens are stored encrypted on your device (Android's secure keystore) and are used only to talk directly to Google's or Spotify's own servers on your behalf — Penny does not run its own backend server, and tokens are never sent anywhere else. App preferences (language, app color, saved parking location, etc.) are stored as plain files on your device only.

Third-party processing

To understand and respond to what you say, your requests are sent to Google's Gemini API. Speech recognition and voice output use Google Cloud's speech APIs. These providers process the request text/audio needed to answer you; Penny does not share your data with advertisers, data brokers, or anyone else, and nothing is sold.

Your control over this

You can disconnect your Google or Spotify account at any time from within the app, which revokes Penny's access immediately. Because Penny doesn't run its own server, there is no separate copy of your data to delete elsewhere — disconnecting is the deletion.

Changes to this policy

If Penny's features change in a way that changes what data it accesses, this page will be updated accordingly.