Privacy policy

Who we are

Moneypenny and Forge Moneypenny are published by BlueForge Studio. You can reach us about anything in this policy at hello@blueforge.studio.

What we collect

• Account data: your name and email address, from the sign-in you create to use the web app.
• Ledger data: the revenue and cost entries you record or sync, the apps you track, and the Stripe products the billing sync reads from your own Stripe account.
• Billing data, if you subscribe: your plan and subscription status. Card details go straight to our payment provider, Stripe; we never see or store a full card number.
• Technical data: IP address, timestamps and error logs, kept to run and secure the service.

The iPhone app

Forge Moneypenny has no account of its own. You paste a tenant API key with the ledger:read scope into Settings once. The key is kept in the iOS Keychain on your device, is never placed in a link and is never logged.

The app only reads: it sends the key as an authorization header to financials.blueforge.studio (you can change that address in Settings) and shows you the figures it gets back. It never writes to your ledger. The server keeps a hash of the key, its prefix, name, scopes and last-used time so it can check and revoke the key.

The app contains no advertising, no analytics SDK, no crash reporter and no tracking, and it asks for no device permissions.

How we use it

To run the service you asked for: sign you in, show your burn, costs and profit, take payment, answer your messages and keep the service secure. We do not sell personal data and we do not use it for advertising.

Who receives it

• Stripe: payment processing for subscriptions, and, if you connect it, the read-only sync of your own Stripe products.
• Our hosting provider: stores the service and its backups, in the EU.

We may also disclose data where the law requires it.

How long we keep it

Account and ledger data are kept while your account exists. If you ask us to close your account, we delete your account and ledger data, except records we must keep by law, such as invoices. Technical logs are kept only as long as needed for security and troubleshooting.

Your rights

You can ask us for a copy of your personal data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to hello@blueforge.studio. If you are in the EU you can also complain to your data protection authority.

Cookies and local storage

The site and the web app use only what they need to work: the session cookie that keeps you signed in, and your language and theme choices. The iPhone app stores your API key in the Keychain and the API address in local preferences.

Security

Traffic is encrypted in transit. On the iPhone the API key lives in the Keychain, not in app storage. No system is perfectly secure: if a breach affects your data we will tell you and the authorities as the law requires.

Changes

If we change this policy in a way that matters, for example by adding analytics or an account system to the iPhone app, we will update this page and its effective date first.