Last updated: October 24, 2026
This Privacy Policy explains how Pennyboss ("Pennyboss," "we," "us," or "our"), a product of The Pocket App Company LLC, collects, uses, and protects information when you use the Pennyboss application and related services (the "Service"). By using the Service, you agree to the practices described here.
Pennyboss is an invoicing and small-business management app for solo traders and freelancers. It lets users create and send invoices and quotes, accept payments, schedule bookings, manage customers, and send service-related notifications to their own customers.
For the purposes of this policy, a "User" is a business owner who uses Pennyboss to run their business, and a "Customer" is an end client of that User (for example, the person receiving an invoice or appointment reminder).
Information Users provide:
Information collected automatically:
We do not collect more information than is necessary to provide the Service.
We use information to:
We do not sell personal information, and we do not use it for third-party advertising.
You (the tradesperson) decide what information about your customers to store in Pennyboss — names, phone numbers, addresses, notes, and anything else you add, including sensitive details like a gate code or where a key is kept. You are responsible for that information: for having the right to store it, for keeping it accurate, and for how you use it in your business.
We store and process your customers' information only to run the Service for you — for example, to show it back to you, to send a notification you asked for, or to fill in an invoice or booking. We do not sell your customers' information, and we do not use it for advertising, ours or anyone else's.
You can edit or delete a customer's record in the app at any time. Deleting your Pennyboss account deletes your business data, including your customers' information, as described in Section 14.
A small number of companies process this information on our behalf so the Service can work: Google Firebase (hosting, database, and sign-in), Stripe (payments), Twilio (text messages), SendGrid (email, including a message you send to the support team from inside the app: what you typed, the app version, your platform and, when signed in, your account email), Sentry and Google Firebase Crashlytics (crash reports from the app: what went wrong, the app version, the device model and an account ID, never your customers' details), and Anthropic (the AI features described in Section 9), and RevenueCat (which records your subscription status so the app knows what you have paid for; it receives an anonymous app user id and purchase receipts, never your name). None of them may use your customers' information for their own purposes, and none of them use it to train AI models. When you type an address, the text you type is sent to Google Places or to the free Photon address search (photon.komoot.io, built on OpenStreetMap) to suggest matching addresses.
Payments are processed by Stripe. When a Customer pays an invoice or deposit, their payment card details are collected and processed directly by Stripe under Stripe's own privacy policy and security standards. Pennyboss does not store full payment card numbers on its servers. We receive limited transaction information (such as payment status and amount) to mark invoices as paid.
Pennyboss enables Users to send service-related text messages to their Customers through our messaging provider, Twilio. These messages are transactional and may include booking confirmations, appointment reminders, "on the way" alerts, quote follow-ups, and invoice or payment notifications.
Consent: A Customer's mobile number is collected by the User when the User creates a booking, adds the Customer, or generates an invoice in Pennyboss. By providing their mobile number, the Customer agrees to receive service-related text messages from that User via Pennyboss. Consent to receive text messages is not a condition of any purchase.
Mobile information is not shared: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers and consent are used solely to deliver the service-related messages described above.
Message frequency: Message frequency varies and depends on activity in the User's account (for example, when an appointment is scheduled or an invoice becomes due).
Rates: Message and data rates may apply.
Opt-out and help: Customers can opt out of text messages at any time by replying STOP. For assistance, Customers can reply HELP. After opting out, a Customer will no longer receive text messages from that User via Pennyboss.
Availability: today, Twilio only carries automatic messages for one Pennyboss account, because a single phone number can only be registered with the carriers for one business at a time. For every other User, Pennyboss delivers these same notifications by email instead, and a User can always text a Customer by hand from their own phone number — that message is sent by the User directly and does not pass through Pennyboss or Twilio.
Automatic mileage works on Android only. The Pennyboss iPhone app does not read your location, in the foreground or the background, and does not collect location data; the rest of this section describes the Android app.
Pennyboss offers an optional automatic mileage log for Users on the Boss plan (and their team members, if the User turns it on for them). It is off by default. This section explains what happens when a User turns it on.
Pennyboss may send email notifications (such as invoices, quotes, and receipts) on behalf of Users through our email provider, SendGrid. These emails are transactional and relate to the User's business activity.
Pennyboss offers optional AI features — the voice/text assistant, and coaches that explain your profit and tax figures in plain English. When you use one of these features, the relevant text (your typed or spoken command, or a summary of your own business figures) is sent to our Cloud Functions proxy, which calls Anthropic's API to produce the result. We do not send your customers' full contact details to the AI beyond what a command needs to act on (for example, a customer's name to create a booking).
Neither we nor Anthropic use the content you send to these features to train AI models. If you never use an AI feature, no data is sent for AI processing.
Help chat. If you open Help & support and chat with the help assistant, your messages are sent to Anthropic's API to write the replies. To answer questions about your own account, the assistant may also read your plan, whether parts of your setup are switched on, record counts, and the number, status, total and dates of your ten most recent invoices. It never reads your customers' names or contact details. A chat is kept for 30 days so a problem you report can be looked into, and a bug report or a request passed to a person is kept for 90 days; then each is deleted automatically. Neither we nor Anthropic use your chat to train AI models.
Data is stored using Google Firebase (Firestore, Cloud Functions, and related services) with industry-standard security measures. Access is restricted, and secrets and credentials are managed through secure secret storage. While no system can be guaranteed perfectly secure, we take reasonable measures to protect your information.
We share information only as needed to operate the Service, specifically with:
We do not sell personal information, and we do not share mobile numbers with third parties for marketing.
We retain information for as long as a User's account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Users may request deletion of their account and associated data (see Section 14). Help chats are deleted after 30 days, and bug reports and requests passed to a person after 90 days (see Section 9).
To request access to, correction of, or deletion of your information, or to delete your account, contact us at the email address in Section 16. We will respond within a reasonable time and in accordance with applicable law.
The Service is intended for business use by adults and is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
For questions about this Privacy Policy or your information, contact:
The Pocket App Company LLC, 2501 Chatham Rd Ste N, Springfield, IL 62704-4188
Email: support+pennyboss@thepocketappcompany.com
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.