Who operates Pennumi
Pennumi is provided by Lemon Street Enterprises, LLC, a Massachusetts limited liability company (“we,” “us,” or “our”). A dedicated privacy and support contact will be published before beta distribution.
Information kept on the device
The app may store product names, brands, barcodes, package sizes, prices, dates, store names and branch addresses; product, shelf-label, receipt, and other store photos; receipt items, quantities, discounts, totals, store contact information, payment type, only the final four masked card digits when printed, and loyalty-point activity; shopping lists and evidence links; store-loyalty card details; and a random installation identifier used for service protection.
Loyalty cards use protected device credential storage where supported. The app is not designed to request full payment-card numbers, bank credentials, account passwords, contacts, advertising identifiers, or the user’s name or email address.
Automated photo analysis
When the user deliberately starts analysis, resized copies of selected images and limited task context—such as the expected store—may be sent through Pennumi’s production analysis service to the OpenAI API. The result is an editable proposal, not a confirmed record.
The production service is intended not to log photo bodies. It will request that OpenAI not store response application state. Under the production setting planned for release, OpenAI’s API abuse-monitoring process may retain submitted content for up to 30 days. Shopper content will not be opted in for model training by Pennumi.
Public barcode lookup
An unknown barcode may be sent to Open Food Facts for public product suggestions. Receipt images, prices, payment information, loyalty information, and location are not included in that lookup. Open Food Facts applies its own terms and privacy practices.
Location
Location is optional and requested only after the user asks for a nearby-store suggestion. Pennumi is not intended to request background location, continuously track the user, or save raw latitude and longitude in its own records. A store and branch selected by the user may be saved with later records.
Use and sharing
Information is used to provide the app, create requested extraction proposals, prevent abuse, and support the user. Pennumi is not intended to sell personal information, use it for behavioral advertising, or track users across other companies’ apps or websites. Processing providers receive only the information needed for their stated app function.
Retention, export, and deletion
Local records remain until the user deletes individual records, chooses Settings & Privacy → Delete All Pennumi Data, or removes the app subject to operating-system behavior. A structured JSON export is available in Settings & Privacy; it can contain sensitive local records and should be stored carefully. Photos are referenced but not embedded in that export. Copies exported elsewhere must be deleted separately.
Security
Production analysis is intended to use HTTPS, keep service credentials on the server, validate and limit requests, and avoid logging image bodies. No electronic system can be guaranteed completely secure.
Children and changes
The app is not directed to children under 13 and is not designed to collect children’s personal information. The final policy may be updated as the app and its providers change; its effective date will identify the current version.
← Return to Pennumi home