Privacy

Who operates Pennumi

Pennumi is provided by Lemon Street Enterprises, LLC, a Massachusetts limited liability company (“we,” “us,” or “our”). Privacy and support questions may be sent to support@pennumi.com.

Information kept on the device

The app may store product names, brands, barcodes, package sizes, prices, dates, store names and branch addresses; product, shelf-label, receipt, and other store photos; receipt items, quantities, discounts, totals, store contact information, payment type, only the final four masked card digits when printed, and loyalty-point activity; shopping lists and evidence links; store-loyalty card details; and a random installation identifier used for service protection.

Loyalty cards use protected device credential storage where supported. The app is not designed to request full payment-card numbers, bank credentials, account passwords, contacts, advertising identifiers, or the user’s name or email address.

Automated photo analysis

When the user deliberately starts analysis, resized copies of selected images and limited task context—such as the expected store—are sent through Pennumi’s production analysis service to the OpenAI API. The result is an editable proposal, not a confirmed record.

The production service is designed not to log photo bodies and requests that OpenAI not store response application state. Under the production setting selected for this release, OpenAI’s API abuse-monitoring process may retain submitted content for up to 30 days. Shopper content is not opted in for model training by Pennumi.

Public barcode lookup

An unknown barcode may be sent to Open Food Facts for public product suggestions. Receipt images, prices, payment information, loyalty information, and location are not included in that lookup. Open Food Facts applies its own terms and privacy practices.

Location

Location is optional and requested only after the user asks for a nearby-store suggestion. Pennumi does not request background location, continuously track the user, or save raw latitude and longitude in its own records. A store and branch selected by the user may be saved with later records.

Use and sharing

Information is used to provide the app, create requested extraction proposals, prevent abuse, and support the user. Pennumi does not sell personal information, use it for behavioral advertising, or track users across other companies’ apps or websites. Processing providers receive only the information needed for their stated app function.

Retention, export, and deletion

Local records remain until the user deletes individual records, chooses Settings & Privacy → Delete All Pennumi Data, or removes the app subject to operating-system behavior. A structured JSON export is available in Settings & Privacy; it can contain sensitive local records and should be stored carefully. Photos are referenced but not embedded in that export. Copies exported elsewhere must be deleted separately.

Security

Production analysis uses HTTPS, keeps service credentials on the server, validates and limits requests, and avoids logging image bodies. No electronic system can be guaranteed completely secure.

Children and changes

The app is not directed to children under 13 and is not designed to collect children’s personal information. This policy may be updated as the app and its providers change; its effective date identifies the current version.