Verified Claims

Updated 2026-05-19

Every marketing claim Penno makes on its landing page and in the App Store description is listed here with the method you (or anyone) can use to verify it. Privacy claims that can't be verified aren't real privacy claims.

Verified

Penno has no server of its own.

Penno makes no network call to any Penno backend — no transaction, budget, debt, or category data is ever sent to us. The one exception is iCloud backup: when you choose to back up, Penno saves a file to your own iCloud through Apple. Penno never receives it.

How to verify: Apple's iOS privacy report (Settings → Privacy & Security → App Privacy Report) logs every outbound request from every app. Use Penno for a week, then review: you'll see no Penno-server requests — only OS-level App Store telemetry, plus (if you backed up) iCloud, to your own account.
Verified

No personal identifiers are collected.

Penno does not collect your name, email, phone number, device identifier, or any other piece of data that could be used to identify you as an individual. The app contains no signup, no login, no account, and no user-ID generation.

How to verify: Apple App Store listings include a "Privacy" section showing what each app collects. Penno's listing shows no personally identifying data is linked to the user. Apple audits the binary to verify these declarations match what the code does.
Verified

No advertising SDK is included in the app binary.

No AdMob, no Meta Audience Network, no IDFA-based ad tracking.

How to verify: The App Store privacy listing rules out advertising-purpose data collection. The app contains no ad-display surface anywhere in the UI, which would be impossible if an ad SDK were present.
Verified

No bank-aggregation SDK is included in the app binary.

No Plaid, no MX, no Yodlee, no Finicity. The app has no UI for entering bank credentials because the code to handle them doesn't exist.

How to verify: Search the App Store listing for "bank" — Penno doesn't appear in queries that filter for bank-linking apps because Apple's category metadata reflects what's actually in the binary. Independent verifiers can also inspect the IPA on a jailbroken device to enumerate linked SDKs.
Verified

No account is required.

The first time the app is opened, the user goes directly to the budget UI. No signup screen, no email collection, no password setup, no Sign in with Apple, no anonymous user ID.

How to verify: Install the app and open it. The absence of a signup screen is the proof — there is no possible way to enter an account that the app doesn't request.
Verified

No subscription — a single one-time unlock.

Penno is free to download with one optional one-time $19.99 "Penno Pro" unlock. No monthly fee, no annual renewal, no recurring charges of any kind.

How to verify: The App Store listing shows a single non-consumable in-app purchase — the one-time Penno Pro unlock — and no subscriptions. After buying it, no recurring charges ever appear in the user's App Store subscription list.
Verified

Your data lives in a SQLite file you control.

The file is named budget-planner.db and lives in the Penno app container on your device. If you back up to iCloud, a copy of that data also lives in your own iCloud — and nowhere else.

How to verify: Reach the app data via the Files app → Browse, or Mac Finder → device. The file is readable with any SQLite browser. There is no copy on a Penno server — the only off-device copy that can exist is the iCloud backup in your own account.
Verified

Deleting the app deletes your on-device data.

Removing Penno wipes the data on your device, with no Penno-side copy left behind. If you saved an iCloud backup, it stays in your own iCloud until you delete it there.

How to verify: Delete and reinstall and the app opens fresh — there is no Penno cloud, and nothing restores on its own. If you made an iCloud backup, you can restore it yourself from Settings → iCloud; otherwise the data is gone. Clear the backup from your iCloud to make deletion final.
Verified

10 languages supported in-app.

English, Turkish, German, French, Spanish, Italian, Brazilian Portuguese, Japanese, Korean, Arabic. Arabic with full RTL UI.

How to verify: Settings → Language. Switch to any of the 10 — every screen updates. For Arabic, the entire layout flips right-to-left.

If you spot a claim on this site or in the App Store that isn't documented here, please flag it to [email protected]. The standard for what we say in marketing is the same as the standard on this page.