Privacy Policy

Penso is a personal finance application operated by Cien Aventuras LLC (“Penso”, “we”). By creating an account and using Penso, you accept the practices described in this Privacy Policy. If you do not agree with it, please do not use the service.

We collect the following information:

• Account data: name, email address, and password (stored in encrypted form). If you sign up with Google, we receive your name, email, and profile photo from Google.
• Financial information you enter or import: accounts, transactions, debts, budgets, investments, savings goals, subscriptions, installments, transfers, categories, and tags.
• Bank statements: the files you upload to import your transactions.
• Bank connections: when you connect a bank account, we obtain information about your accounts and transactions through our bank connection providers (see section 4).
• Shared space data: if you share your space with other people, their participation and role are associated with your account.
• Technical data: usage logs, device type, and IP address, which we use to operate the service, prevent abuse, and maintain security.
• Optional mortgage guidance: if you request this guidance, we collect your Chilean tax ID (RUT), full name, email, phone or WhatsApp number, property value and condition, down payment, whether you are buying alone or with a co-borrower, and your approximate net salary.

We use your information to:

• Provide the service: display, organize, and analyze your finances.
• Automatically import and categorize your transactions.
• Send you emails related to your account (verification, password recovery, and service notifications).
• Manage and refer your voluntary mortgage guidance request when you give explicit consent.
• Maintain security and prevent fraud and abuse.
• Comply with legal obligations.

We do not sell your personal data or use it for third-party advertising.

To show you your transactions automatically, Penso can connect to your bank accounts in two ways:

• Through Plaid: we use Plaid Inc. to securely connect with your financial institution. You authenticate directly with your bank within the Plaid flow; Penso does not receive or store your bank login credentials for accounts connected through Plaid. Plaid provides us with access tokens, which we store encrypted, along with information about your accounts and transactions. Plaid's processing of your data is governed by Plaid's privacy policy.
• Through a direct connection: for some banks, your transactions may be retrieved by connecting to your online banking. In those cases, your credentials are used solely to establish the connection and retrieve your transactions.

Penso uses artificial intelligence services from Anthropic (Claude) to process the bank statements you upload and to help categorize your transactions. For this purpose, the content of your statements and the descriptions of your transactions may be sent to Anthropic for processing. This data is used solely to provide you with the service and not to train third-party models.

To improve Penso we record, in anonymized form, how you use the app: which pages you visit, where you click and which errors appear. Only the app's own buttons and labels stay readable: amounts and any other numbers, the text you type, your transactions, your account names and any other data of yours are masked before they leave your device, and our server masks them again when it receives them. We never record passwords or receipt photos, nor anything while you are viewing someone else's shared space. This recording is stored on our own servers, does not use third-party analytics services and is automatically deleted after 30 days. To find problems we may analyze text summaries of these sessions, already masked, with the artificial intelligence tools described in the previous section. You can turn it off at any time in Settings → Privacy; doing so also deletes what we had already recorded.

When you connect or sync a bank from the app, we record what Penso does inside the bank's page in order to find and fix errors and to be able to read new products: the pages and menus it goes through, the shape of the bank's responses and the result of the reading. This record is masked on your phone before it leaves it: the numbers and letters in your data are replaced, keeping only their shape. As an exception, when the connection fails or the bank shows a product that Penso does not yet know how to read, we store, unmasked, what is needed to fix it: the bank's page at that moment and the bank's responses related to the error. We never record your password, the bank's login page, cookies or verification codes. Everything is stored on our own servers, with the error data encrypted; only the Penso team sees it, to fix the app, and we may analyze it with the artificial intelligence tools described earlier. It is automatically deleted after 30 days or when you delete your account. If you turn off usage recording, we also stop storing the masked part.

If you choose to request mortgage guidance, Penso processes the information listed in section 2 solely to record your request and share it with an independent external advisor from BKF Hipotecarios so that they may contact and guide you. The legal basis for this processing and transfer is the explicit consent you provide in the form. Penso does not sell or grant loans, the referral does not guarantee approval, and it is not a credit offer.

Penso retains the request while your account is active, until you delete your account or ask us to delete it. You may withdraw your consent and request deletion of the copy held by Penso by writing to [email protected]. Withdrawal does not affect processing already performed and cannot undo a transfer already made; if the advisor has already received your data, you may also ask them directly not to contact you and to delete it. We may retain what is strictly necessary when required by law.

We do not sell your personal information. We share it only with providers who help us operate Penso, to the extent necessary to provide you with the service:

• Plaid Inc. — connection with your bank accounts.
• Google — authentication when you choose to sign in with Google.
• Google Analytics — visit statistics for the public penso.money website (not the app).
• Anthropic — artificial intelligence processing of bank statements and categorization.
• Resend — delivery of transactional emails.
• DigitalOcean — server and database infrastructure.
• Telegram — only if you choose to connect the Penso Telegram bot.
• Independent external advisor from BKF Hipotecarios — only if you voluntarily request mortgage guidance and expressly agree that we may share the form information so they can contact and guide you.

We may also disclose information when required by law or to protect our rights and the safety of our users.

We apply security measures to protect your data, including encryption in transit (HTTPS/TLS), role-based access control, isolation of each user's data, and multi-factor authentication in our administrative systems. We maintain a documented Information Security Policy. No system is completely secure, but we work to protect your information in a reasonable manner.

We retain your personal and financial data while your account is active. You may delete your account and associated data at any time from the Penso app, or request it by writing to us at [email protected]; we will address email requests within 30 days. The steps, and details on what is deleted and what is kept, are in Delete your Penso account. Some data may remain in encrypted backups for a limited period before being permanently deleted. We retain certain information for longer when required by law.

In accordance with Chile's Law No. 19,628 on the Protection of Privacy, you have the right to access your personal data, rectify it, request its deletion, and object to its processing. To exercise these rights, write to us at [email protected]. We will respond within the timeframes established by law.

Penso uses strictly necessary cookies to keep your session signed in and for the operation of the service. To work offline, Penso stores data locally on your device. On the public penso.money website (not inside the app) we use Google Analytics, which stores measurement cookies to count visits and understand how people reach the site; we configure it without Google signals or ad personalization. We do not use advertising cookies, and inside the app we do not use third-party tracking cookies.

Penso is intended for people over 18 years of age. We do not intentionally collect data from minors. If you believe a minor has provided us with data, contact us so we can delete it.

We may update this Privacy Policy from time to time. We will publish the current version on this page and indicate the date it was last updated. We will communicate significant changes through the service or by email.

Penso is operated by Cien Aventuras LLC. If you have questions about this Privacy Policy or about the processing of your data, write to us at [email protected].