Privacy policy
Last updated 2 November 2026
This policy explains how Pennies, operated by RandWise ("we"), handles personal information, in line with the Protection of Personal Information Act, 2013 (POPIA).
What we collect
Your WhatsApp phone number and profile name; the name of your business or practice; the documents you send (photos and PDFs of receipts and invoices), notes, voice notes and travel log entries; emails forwarded to a Pennies email address (the sender, subject and attachments); details read from those documents (supplier, date, amounts, VAT); and which business, staff members and accountant you are linked to.
Why we collect it
To file your documents, make them available to the business owner and the accountant or bookkeeper you chose to link to, build reports, expense claims and logbooks, reply to you on WhatsApp and, for paid plans, bill you. We do not use your information for advertising and do not sell it.
Who we share it with
The business you send receipts for and the practice it is linked to. Service providers that run Pennies: Meta (WhatsApp Business Platform, to send and receive messages), Anthropic (to read the details on a document and to understand and translate messages), Railway (hosting and storage), Cloudflare (domain and encrypted backups) and Resend (to send Pennies emails and receive emails forwarded to a Pennies address). Some of these providers process data outside South Africa, under their own data-protection terms.
Website analytics
This website counts visits with Cloudflare Web Analytics, which uses no cookies and doesn't track you across sites. If you start a trial from the website, the WhatsApp message carries a short tag (such as #google) so we know which page or link brought you.
Where it is stored
Live data is hosted by Railway in the United States. Nightly backups are stored by Cloudflare in its Western European region.
How long we keep it
For as long as you, your business or your practice use Pennies, and then as long as needed for accounting and tax records, or until deletion is requested.
Security
Documents are stored on access-controlled servers. Dashboards are opened with a one-time code sent to your WhatsApp number. See security and data.
Your rights
You may ask to see, correct or delete your information, or object to its processing, by emailing hello@penniesapp.com. You may also complain to the Information Regulator (South Africa) or, if you are in the UK or EU, your local data protection authority.