Last updated April 19, 2026
This Privacy Notice for Alex Enrique Sanchez Jardines (doing business as Penny) ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Penny is a mobile application that helps Spanish-speaking shoppers and resellers in the United States and Puerto Rico discover clearance deals, price errors, and discounted merchandise across major retailers including Walmart and Target. Users can scan products via barcode, save deals to a personal watchlist, and receive notifications about price drops. Penny offers free, Pro, and VIP subscription tiers via in-app purchase, with the higher tiers providing earlier access to deal alerts and additional features.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at alexsanchez.lab@gmail.com.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? We do not process sensitive personal information.
Do we collect any information from third parties? We may collect information from public databases, marketing partners, social media platforms, and other outside sources.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
With whom do we share personal information? We may share information with service providers and in specific situations described in this policy.
How do we keep your information safe? We have organizational and technical measures in place to protect your personal information. However, no transmission or storage method is 100% secure.
What are your rights? Depending on where you live, applicable privacy law may grant you rights regarding your personal information.
How do you exercise your rights? The easiest way is by visiting our privacy request form, or by contacting us.
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.
Personal Information Provided by You. The personal information we collect may include:
Sensitive Information. We do not process sensitive information.
Payment Data. We may collect data necessary to process your payment if you make purchases. All payment data is handled and stored by Apple and RevenueCat. You may find their privacy notices here: Apple Privacy Policy and RevenueCat Privacy Policy.
Social Media Login Data. We may provide you with the option to register with us using your existing Google account. If you choose to register this way, we will collect certain profile information about you from your social media provider.
If you use our application(s), we may collect the following information if you choose to provide us with access or permission:
In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.
The information we collect includes:
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In Short: We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources.
In order to enhance our ability to provide relevant marketing, offers, and services to you, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, social media platforms, and other third parties.
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information for a variety of reasons:
In Short: We may share information with third-party service providers who perform services for us.
The categories of third parties we may share personal information with are:
We may also need to share your personal information in the following situations:
In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.
Our Services offer you the ability to register and log in using your Google account details. Where you choose to do this, we will receive certain profile information about you from Google, including your name, email address, and profile picture.
We will use the information we receive only for the purposes described in this Privacy Notice. Please review Google's privacy notice to understand how they collect, use, and share your personal information.
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required by law. No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at alexsanchez.lab@gmail.com.
In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the contact details provided below. However, please note that this will not affect the lawfulness of the processing before its withdrawal.
If you would at any time like to review or change the information in your account or terminate your account, you can:
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements.
If you have questions or comments about your privacy rights, you may email us at alexsanchez.lab@gmail.com.
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted in the future, we will inform you about that practice in a revised version of this Privacy Notice.
In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information.
The table below shows the categories of personal information we have collected in the past twelve (12) months.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, IP address, email address, and account name | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | YES |
| C. Protected classification characteristics | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | YES |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interactions with our website and advertisements | YES |
| G. Geolocation data | Device location | YES |
| H. Audio, electronic, sensory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contact details or job title, work history, and professional qualifications | NO |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Inferences drawn to create a profile or summary about an individual's preferences and characteristics | NO |
| L. Sensitive personal Information | — | NO |
We will use and retain the collected personal information as long as the user has an account with us.
Learn more about the sources of personal information we collect in "What Information Do We Collect?" above.
Learn more about how we use your personal information in the section "How Do We Process Your Information?"
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed the categories of personal information listed above to third-party service providers for business purposes.
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
To exercise these rights, you can contact us by visiting our privacy request form, by emailing us at alexsanchez.lab@gmail.com, or by referring to the contact details at the bottom of this document.
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request.
If we decline to take action regarding your request, you may appeal our decision by emailing us at alexsanchez.lab@gmail.com. We will inform you in writing of any action taken or not taken in response to the appeal. If your appeal is denied, you may submit a complaint to your state attorney general.
California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at alexsanchez.lab@gmail.com, or contact us by post at:
Alex Enrique Sanchez Jardines
Data Protection Officer
2811 Pembroke Ln Apt 21 A
Saint Joseph, MO 64506
United States
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.
To request to review, update, or delete your personal information, please visit: https://forms.gle/KAynw8skqdQtN3yK8.