Canny PennyPrivacy Policy
Last updated: 27 August 2026 · Applies to the Canny Penny iPhone app and cannypenny.com
Canny Penny ("we", "us") helps you track grocery spending by reading your supermarket receipts. This policy explains what personal data we process, why, and your rights. We built Canny Penny to keep the amount of personal data we hold to a minimum.
1. Who we are (data controller)
The data controller is Mikhail Mendel, operating Canny Penny (United Kingdom). For any privacy question or to exercise your rights, contact us at support@help.cannypenny.com.
2. What we collect and why
Account & sign-in
You sign in with Sign in with Apple. On your first sign-in, Apple provides your name and email address. We use your email address once — to send you setup instructions for forwarding receipts — after which it is kept only on your device until that email is sent, then deleted; it is never stored in our database. Your first name is kept on your device to personalise the app (for example, so Penny can address you by name); we do not store it on our servers. We identify your account only by a pseudonymous Apple identifier and a private, random @cannypenny.com forwarding address. Legal basis: performance of our contract with you (providing the app).
Receipts you send us
When you forward a receipt email to your Canny Penny address, or photograph a receipt in the app, we process its contents to extract items, prices, promotions, store and date. Before receipt text is sent to our AI processing providers, we automatically remove personal details we can detect (such as names, addresses, phone numbers, email addresses, card numbers, postcodes and loyalty numbers). We do not retain the raw receipt text after processing. Legal basis: performance of our contract with you.
Spending data
The extracted items, prices and categories are stored in your account so the app can show your spending, price trends and savings suggestions. Legal basis: performance of our contract.
Support correspondence
If you contact support, we process the content of your messages (and any screenshots you attach) to help you. These are deleted when the support ticket is closed. Legal basis: our legitimate interest in providing support.
Technical & diagnostic data
We keep minimal operational logs (e.g. processing status, error codes, timestamps). These are designed to contain no receipt content and no personal contact details. Legal basis: our legitimate interest in running and securing the service.
3. What we do NOT do
- We do not sell your personal data or use it for advertising.
- Our AI providers do not use your data to train their models.
- We do not store your email address or name on our servers.
- We do not retain raw receipt text after it has been processed.
4. Aggregated, anonymised insights
We may create and share aggregated, anonymised insights — such as market-level grocery price trends (for example, the average price of a product across supermarkets over time). These are produced by combining data across many users so that they do not identify you and do not reveal your individual purchases. Once anonymised in this way, the information is no longer personal data. We never sell or share data that identifies you or your individual purchases.
5. Service providers (processors)
We use a small number of trusted providers to run Canny Penny. Your account and spending data are stored in the United Kingdom (London). Each provider processes data on our behalf under a Data Processing Agreement. Where a provider processes data outside the UK/EU (our AI providers), that transfer is covered by Standard Contractual Clauses, and those providers do not use your data to train their models.
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, app backend | UK (London, eu-west-2) |
| Amazon Web Services (SES, Lambda, S3) | Receiving & sending email; processing | UK (London, eu-west-2) |
| Anthropic (Claude) | AI reading of receipts & in-app assistant | Under DPA; no training on your data |
| Google (Gemini API) | Looking up product prices (product names only) | Under DPA; no training on your data |
| Zoho Mail | Support mailbox | EU |
| Cloudflare | DNS / domain routing | Global (DNS only) |
Apple provides Sign in with Apple under Apple's own terms and privacy policy.
6. How long we keep data
Your account data and spending history are kept while your account is active. Raw receipt text is not retained after processing. Support messages are deleted when the ticket is closed. If you delete your account, your personal data is deleted from our systems.
7. Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. You can delete your account and its data at any time from within the app, or by emailing us. To exercise any right, contact support@help.cannypenny.com.
You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. Children
Canny Penny is not directed at children under 16 and we do not knowingly collect their data.
9. Changes
We may update this policy; the "last updated" date shows the current version. Material changes will be notified in the app.
10. Contact
Questions or requests: support@help.cannypenny.com.