Privacy

Last updated September 30, 2026. This page covers the Pecunia app, pecunia.gg and the waitlist.

Pecunia is a budgeting and personal finance app. To do its job it needs some of your most personal information, so we want to be plain about what we collect, why, who helps us handle it, and what you can do about it.

Who we are

Pecunia is operated by Pecunia Labs Corp. (“Pecunia”, “we”, “us”), a Canadian company. This policy covers the Pecunia iPhone app, the website at pecunia.gg and the waitlist. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

The waitlist and this website

When you join the waitlist, we collect:

• your email address;
• the date and time you signed up; and
• a label showing the signup came from this website.

We use your email address only to tell you about Pecunia’s launch and your early access. The waitlist is kept in its own database, separate from app data. A signup may also send your email address to our internal team chat, which stores it under that provider’s terms.

This website uses no advertising or analytics cookies and loads no third-party trackers. Our hosting provider, Vercel, processes technical data such as IP addresses and request logs to deliver the site and protect it from abuse. The site’s typefaces are served from this site, not from a font service.

To leave the waitlist, email support@pecunia.gg and we will delete your address.

What the app collects

Your account

• Your email address and password. Passwords are handled by our sign-in provider, Supabase, and are never stored in readable form.
• Your name and your province or territory, which you give when you sign up.

Accounts you connect

If you connect a bank, credit union, card or investment account, we receive the following through Plaid, read-only:

• the institution’s name, and account names, types, currencies and last digits;
• balances and credit limits;
• up to 24 months of transactions, with dates, amounts, merchant names and descriptions, and the name of the other party where Plaid provides it;
• the recurring payments Plaid finds in your transactions;
• investment holdings and investment transactions, where your institution supports them; and
• credit card and loan details such as interest rates, minimum payments, statement balances and due dates.

We identify you to Plaid with a random ID, not your name or email address. Plaid’s own handling of your information is described in the Plaid End User Privacy Policy.

What you add

• Accounts, assets, debts and transactions you add by hand, and the notes, tags, splits, categories and rules you set.
• Transactions from CSV statements you import. We keep the transactions and the file’s name, not the file.
• Receipt photos you take or choose. Before we store a photo, we remove its hidden details, such as where it was taken and on what device.
• Budgets, savings goals, debt plans, the TFSA, RRSP and FHSA room you enter, reminders you set for trials and bills, and your recap choices.
• Your answers in Ways to save, such as whether a flight was late or whether you found money on an official unclaimed-money list, and the province you choose for those lists.
• Your answers to the optional “About you” questions, such as where your money comes from and topics you want Pecunia to leave alone, and the areas you pick when you first open the app.
• Messages you send to Pia, the assistant in the app, and notes you save for Pia to remember.

Your device

• A push notification token, if you allow notifications, with your device name, app version and when that device last connected.
• Your time zone, which the app sends when you open it, so your days and months start at the right time.
• Error reports: the error, the screen you were on, the app version and build, the iOS version and your device name. The app keeps up to 10 on your phone and sends them to our server. No crash-reporting company receives them.
• Your IP address, which our servers use for a short time to limit abuse.
• Settings stored on your phone, such as hiding amounts and the Face ID lock, and a copy of your recent account information, kept on your phone for up to 24 hours so the app opens quickly.

Pecunia asks for your camera or photos only when you add a receipt, and for permission to save to Photos only when you save a recap card. Face ID unlock is handled by your iPhone. We never receive your biometric data. We don’t collect your location or contacts, and the app contains no advertising, analytics or tracking SDKs and does not use your advertising identifier.

How we use it

• To provide Pecunia: sort your transactions, keep budgets, find bills and subscriptions, suggest ways to save, track goals, plan debt payoff, build recaps and show your net worth.
• To send notifications you have turned on.
• To keep your account secure, prevent fraud and abuse, and fix problems.
• To test that new versions of Pecunia calculate correctly, using copies of account data kept under strict access controls.
• To answer you when you contact us.
• To meet legal obligations.

We do not sell your personal information, and we do not use it to advertise to you or let others do so.

AI features

Budgets, forecasts, totals and savings figures are calculated by fixed rules from your transactions, not by AI. We use AI models for these tasks, through the OpenRouter service and the model providers it connects to:

• Sorting merchants. When no rule knows a merchant, its cleaned-up name and Plaid’s category for it are sent to suggest a category. The name goes alone, without your name, accounts or amounts.
• Pia. Your message, your last few messages, notes you saved for Pia, your “About you” answers, and the account details Pia looks up to answer you are sent so Pia can reply. These can include account and institution names, balances, transactions with merchants, amounts and dates, bills, budgets, goals, debts, net worth and paydays. To choose what to look up, Pia also gets the names of your accounts, goals and categories, with numbers removed. Pia states figures only through references that Pecunia fills in with its own numbers.
• Summaries. To word the line at the top of Home and your budget note, we send figures such as your spending in a category this month and your usual amount, fees charged and the account they were charged on, money in and out, your planned monthly income, and each budget category’s name, limit and spending so far. The AI writes only placeholders. Pecunia puts in its own figures, and discards any reply that contains a number of its own.
• Receipts. Receipt photos you add are sent to read the store, date, total and currency. Only the photo is sent, without your name, accounts or history, and only to model hosts that do not keep it or train on it.

These providers process the data to return a result for you. Apart from receipt photos, some AI model providers may keep the data they receive under their own terms. The CSV files you import are never sent to AI providers. The transactions in them are treated like your other transactions, so Pia can read them when you ask a question.

Who we share it with

We share information only with service providers that help us run Pecunia:

• Plaid, to connect your financial accounts.
• Supabase, for sign-in, our database and receipt photo storage.
• DigitalOcean, for our servers.
• OpenRouter and the AI model providers it connects to, for the features above.
• Expo, to deliver push notifications through Apple, if you turn them on. By default a notification on your lock screen shows no amounts.
• Vercel, to host this website and the waitlist.
• Our team chat provider, which may receive waitlist signups.

We may also disclose information when the law requires it, or to a buyer or successor if Pecunia is sold or merged, in which case this policy continues to protect it.

Where it is stored

Your information is stored in Canada or the United States and processed in both. Plaid, OpenRouter and the AI model providers, Expo, Vercel and our other providers may store or process information in the United States or other countries. Information held in another country is subject to that country’s laws, and authorities there may be able to access it.

How we protect it

• Data travels over encrypted connections (HTTPS).
• The keys that connect to your bank are encrypted with keys that only our servers hold, so a copy of the database alone cannot open them.
• Receipt photos are kept in private storage. The app opens a photo through a link that works for five minutes.
• Bank access is read-only: Pecunia cannot move money.
• You can lock the app with Face ID. Your sign-in is kept in your iPhone’s encrypted keychain.
• Access to production systems is limited to the people who run them. Admin access needs two-step sign-in. An admin can open a read-only view of an account for up to 30 minutes, to see what you see, and each view is logged. It never shows full card or account numbers: Pecunia only holds their last digits.

No system is perfectly secure. If a breach puts you at real risk of significant harm, we will tell you and the regulator as the law requires.

How long we keep it

• We keep your information while your account is open.
• If you disconnect a bank, we remove the connection at Plaid and stop receiving new data from it. History already in Pecunia stays until you delete your account, or until you ask us at support@pecunia.gg to delete it.
• Receipt photos you don’t save are deleted after 30 days.
• We don’t keep a history of your conversations with Pia. Each answer is kept for up to 24 hours, so the app can show it again if the connection drops.
• When you delete your account, you are signed out at once. We then remove your bank connections at Plaid, delete your receipt photos and your data, and delete your sign-in. This usually takes minutes; if a bank cannot be reached it can take longer, but no one can sign in to the account in the meantime. We keep only a record that an account was deleted, with no name, amounts or institutions, for security and legal reasons. Copies in our server logs and backups are removed as they expire.
• Waitlist emails are kept until you ask us to delete them or we no longer need the waitlist.

Your choices and rights

You can:

• ask for a copy of the personal information we hold about you;
• ask us to correct it;
• export your transactions as a CSV file in the app, under You → Export transactions;
• disconnect accounts, or delete your account in the app under You → Delete account (tap your initials at the top of the screen to open You);
• turn notifications off in the app under You → Notifications, or in iPhone Settings;
• withdraw your consent, knowing some features may stop working; and
• complain to us, or to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Email support@pecunia.gg to make a request. We answer within 30 days. Residents of Quebec have additional rights under Quebec’s privacy law, including asking for their information in a portable format.

Children

Pecunia is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Changes

If we change this policy, we will update the date above. If a change is significant, we will tell you in the app or by email before it takes effect.

Contact us

Questions, requests or concerns about privacy: support@pecunia.gg. Pecunia Labs Corp., Canada.