Privacy policy

This policy covers the Pendi Android application. It is written to match what the app actually does; every claim below is grounded in the shipped behavior.

Effective date: to be set at publication. Contact: [email protected].

Data stored on your device

Tasks, lists, budgets, accounts, movements, categories, people, reminders and settings are stored locally in the app's private storage. Backups are user-initiated, encrypted, and saved where you choose. Uninstalling the app deletes its local data.

Transaction detection (notification access)

If you enable detection, the app reads system notifications ONLY from the sources you turn on (for example your bank's app), to recognize payment notifications and turn them into movements you confirm. Processing happens on the device. Notification content is never uploaded wholesale: if you use an AI feature, only a minimized fragment is sent, with digit runs longer than four characters removed on the device before anything leaves it, so full account numbers and card numbers never leave your phone. You can disable any source, or the whole feature, at any time.

Optional account and shared spaces

The app can operate a lightweight anonymous session (no email, no password) to enable its managed AI tier and shared content. If you share a space with family members, the content of that shared space (its tasks, lists, budgets and movements) syncs through Google Firebase (Firestore) so members see the same data. Personal, non-shared spaces are not uploaded. Google's infrastructure processes this data as our provider; we do not sell it or use it for advertising.

AI features

Two tiers exist. Pendi AI (managed): minimized text fragments are sent to our proxy service and processed by an AI model to suggest categories, parse dictation, or summarize your week; requests are quota-limited, not used to train models by us, and carry no account numbers (see minimization above). Bring-your-own-key (Gemini): requests go directly from your device to Google using your key under Google's terms; we never see your key in our services and it is stored encrypted on the device. AI features are optional and the app is fully functional with them off.

Contacts

Only if you use the contact import feature, and only at the moment you pick contacts, the app reads the selected entries (name, photo) to create people in your space. There is no background contacts access.

Crash reporting

Production builds send anonymous crash reports (stack traces, device model, OS version) through Firebase Crashlytics so defects can be fixed. Crash reports contain no financial content.

What we never do

• No ads.
• No sale of personal data.
• No advertising identifiers.
• No reading of SMS.
• No access to notifications from sources you did not enable.
• No collection of your precise location.

Data deletion

Local data: uninstall the app, or use the in-app deletion controls. Shared-space data: leave or delete the space in-app; deletion propagates to the synced copy. Anonymous session data and AI quota counters: request deletion by email and include your space identifier from Ajustes. We answer deletion requests at the contact address above. The complete account deletion steps are on Delete your account.

Children

The app is a family organization tool intended for adults and is not directed at children under 13.

Changes

Material changes to this policy will be announced in the app's changelog before they take effect.

Questions about your privacy? Write to [email protected], visit Support or Delete account.