Privacy Notice
Version 2026-10-18 (interim, private beta)
Effective date: 18 October 2026
This notice explains how Pennora Limited ("Pennora", "we", "us" or "our") uses personal information when you visit or use Pennora, contact us or take part in our private beta.
Pennora is in private beta. We will review this notice before Pennora opens to the public and publish any changes with a new date.
1. Who we are
Pennora Limited is the controller of the personal information described in this notice, except where a clearly identified third party acts as a separate controller.
- Company number: SC902541 (registered in Scotland)
- Registered office: 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN
- Privacy contact: support@getpennora.com
2. What this notice covers
This notice covers Pennora's website and personal-finance application, including financial tracking, uploads, the Nora AI assistant, support contacts and private beta testing.
Pennora does not currently offer live bank connections. Before it does, we will update this notice to name the bank-data provider, explain each party's role and describe the data involved.
3. Information we collect
Account and profile information
Your email address, display name, country, preferred currency, onboarding answers, financial goals, ISA-tracking preference and product-update preference. Sign-in credentials and sessions are handled by our authentication provider. We never see your password in readable form.
Financial information you add
Income, expenses, recurring items, budgets, categories, payment methods, savings, investments, debts, balances and repayment information. You decide what to enter. Pennora never needs your online-banking password or PIN.
Receipts and statements you upload
If you upload a receipt, or a photo or screenshot of a bank statement, we store the file in your private storage area and send the image to our AI provider so it can read the entries for you. A statement image can contain your name, address, account details and a full list of transactions, so only upload what you are comfortable with us processing, and crop out anything you don't need.
PDF and CSV statements are read inside your browser and are not sent to the AI provider. Only the entries you choose to save reach our database.
Nora AI assistant information
When you ask Nora a question, Pennora sends the question and a summary of your active money profile to our AI provider. The summary is calculated by Pennora and currently includes:
- your first name, the profile's name and its currency;
- today's date;
- monthly income, spending and savings totals for the last 12 months, and yearly totals;
- typical monthly income and spending;
- your largest spending categories this month and last month, and average monthly spend for your top 10 categories;
- your total recurring expenses for the month;
- for UK profiles, how much of your ISA allowance you have used this tax year; and
- a list of Pennora features Nora can point you to.
Category names and profile names are words you choose, so they are sent as you wrote them. Individual transactions, transaction descriptions, notes, account numbers and bank credentials are not sent. Nora cannot browse your Pennora data.
Bank-connection testing information
We are testing bank connections in a sandbox with test banks. If you take part in that testing, we may store test institution details, connection identifiers, account names, the last digits of account numbers, account types, currencies and sync status. Access tokens are stored separately from your other records and are never shown in the app.
Plan and billing information
Your plan, trial dates, subscription status, billing period and country, how many Nora questions and scans you have used this month, and your Stripe customer and subscription references. If you pay, Stripe collects your payment details and billing address. Pennora never sees or stores your full card number.
Contact and support information
If you contact us, we collect your name, email address, request type, message and anything else needed to respond.
Device, security and technical information
Our hosting, database and authentication providers keep standard request and security logs, which can include IP address, browser or device details, timestamps, sign-in events and error information. We use these to run and protect the service.
Browser storage
We use browser storage for sign-in and for preferences such as theme, sidebar layout, active profile, onboarding progress, the product tour and hiding income figures. See our Cookies and Browser Storage Notice.
4. Sensitive information
Financial records can reveal sensitive things about you. A payment to a clinic, a place of worship, a trade union or a political party, or a category you name after a health condition, may indicate your health, religion, union membership or political views. UK data-protection law treats this as special category data.
Pennora does not try to work out this kind of information about you, and does not use it to make decisions about you. We process it only because it may appear in records you choose to add, and only to show those records back to you and provide the features you ask for. If you'd rather not record something, you can leave it out, label it generically, or delete it at any time.
5. Where information comes from
We get information:
- directly from you;
- from your use of Pennora;
- from files you choose to upload; and
- from service providers that help us run and secure Pennora.
6. Why we use information and our lawful bases
| Purpose | Information involved | Lawful basis under UK GDPR |
|---|---|---|
| Create and run your account | Account, profile, session and financial records | Contract |
| Provide features you ask for, including reading uploads and answering Nora questions | The upload, question and summary needed for that feature | Contract |
| Keep Pennora secure, prevent misuse and fix problems | Account, device, security and log information | Legitimate interests in running a safe, reliable service |
| Reply to enquiries and complaints | Contact and support information | Legitimate interests in responding to you, or contract where it concerns your account |
| Improve Pennora using feedback you send us | Feedback and support messages | Legitimate interests in improving the service |
| Take payment and manage your plan | Plan, billing and usage information | Contract |
| Keep payment and tax records | Billing records and invoices | Legal obligation |
| Send optional product updates | Email address and your preference | Consent |
| Meet legal and regulatory duties | Records we are required to keep | Legal obligation |
Where we rely on consent, you can withdraw it at any time. To stop product updates, email support@getpennora.com. Withdrawing consent does not affect processing that has already happened.
7. How Nora works
Nora explains your information and helps you find your way around Pennora. It is not a financial, investment, tax, debt or legal adviser, and it can be wrong.
- Nora receives your question and the summary described in section 3, nothing more.
- Nora cannot add, edit or delete your records, and cannot move money.
- Your conversation is shown in the current app session only. Pennora does not save Nora conversations to its database.
- Nora does not make decisions with legal or similarly significant effects on you.
Please don't put bank credentials, card details, government identifiers or other unnecessary sensitive information in a question.
9. International transfers
Some of our providers are based in, or process information in, the United States and other countries outside the UK. When personal information leaves the UK, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework where a provider is certified) or on the ICO's International Data Transfer Agreement or Addendum, together with a transfer risk assessment where required. You can ask us for more detail about a particular provider.
10. How long we keep information
| Record | How long we keep it |
|---|---|
| Account and financial records | Until you delete them or delete your account |
| Uploaded receipts and statement images | Until you delete them or delete your account |
| Bank-connection test records and tokens | Until you disconnect or delete your account. Connections are revoked with the provider at the same time |
| Nora conversations | Not stored by Pennora. Our AI providers may keep requests for up to 30 days, as described in section 8 |
| Invoices and payment records | Held in our Stripe account for 6 years after the end of the financial year they relate to, as tax law requires, even if you delete your Pennora account |
| Your plan and subscription record in Pennora | Until you delete your account |
| Monthly usage counts | Until you delete your account |
| Contact and support messages | Up to 2 years after the conversation ends |
| Security and request logs | For our providers' standard log periods, which are typically days to weeks |
| Backups | Until they expire on our database provider's rolling backup schedule |
| Records of your consent and agreement to our terms | While your account exists and for up to 5 years afterwards, in case of a dispute |
When you delete your account, Pennora cancels any paid subscription, revokes any bank connections, deletes your uploaded files and profile photo, deletes your sign-in account and deletes your records from our live database straight away. Copies in backups are removed when those backups expire.
11. Security
We protect your information with encrypted connections, access controls, database row-level security that keeps each account's records separate, separate storage for bank access tokens, provider credentials held only on our servers, and private file storage. No service can promise perfect security. Please use a strong, unique password and tell us straight away if you think your account has been compromised.
12. Your rights
UK data-protection law gives you the right to:
- be told how your information is used;
- get a copy of your information;
- have inaccurate information corrected;
- have your information erased;
- restrict how we use it;
- receive it in a portable format;
- object to processing based on legitimate interests, and to direct marketing;
- withdraw consent; and
- safeguards around significant automated decisions.
Some rights depend on the circumstances. We may need to confirm your identity first, and we may keep information where the law allows or requires it.
You can export your records and delete your account yourself in Pennora's settings. For anything else, or to make a privacy complaint, email support@getpennora.com. We will acknowledge a data-protection complaint within 30 days and tell you the outcome without undue delay.
You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first.
13. Age
Pennora is for people aged 18 or over. If we learn that an account belongs to someone under 18, we will close it and delete the associated information.
14. Changes to this notice
We will update this notice when Pennora, our providers or the law changes, and publish each version with its date. If a change materially affects you, we will tell you before it takes effect.
15. Contact us
Questions, rights requests and privacy complaints:
Pennora Limited
5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN
support@getpennora.com