Privacy Policy

Last updated: September 12, 2026

This Privacy Policy explains how YummyPenny, LLC, doing business as YummyPenny (“YummyPenny,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information when you access or use our website, paid subscription dashboard, data tools, account features, communications, checkout flow, and members-only community, including our Discord community (collectively, the “Service”).

YummyPenny is a paid subscription information service. We aggregate discount, price, availability, product, and price-history data from third-party retailers and data sources, generate algorithmic price-drop estimates and related informational outputs, and make that information available through a gated web dashboard and members-only community.

YummyPenny does not sell, ship, stock, warehouse, fulfill, broker, or guarantee any third-party retail products. We sell access to information about products offered by other companies.

The Service is intended only for users who are at least 18 years old.

1. Scope of This Policy

This Policy applies to personal information we collect when you:

• visit our website;
• create or manage a YummyPenny account;
• purchase, renew, cancel, or manage a subscription;
• access the dashboard;
• use price-tracking, watchlist, alert, prediction, or map features;
• connect Discord or join the YummyPenny Discord community;
• contact support;
• interact with our emails;
• use checkout, billing, or account-deletion features;
• otherwise interact with the Service.

This Policy does not apply to the privacy practices of third-party retailers, marketplaces, Discord, Stripe, Google, Cloudflare, or other third-party services that we do not own or control. Those third parties may have their own privacy policies and terms.

2. Personal Information We Collect

Account Information

We may collect:

• email address;
• name, username, or display name;
• the login links we email you (there are no passwords) and, if you connect it, your Discord account;
• account ID;
• subscription status;
• account settings;
• account deletion requests;
• support requests and communications.

Payment and Billing Information

Payments are processed by Stripe or another third-party payment processor. We do not store full credit-card numbers.

We may receive and store limited billing and subscription information, such as:

• Stripe customer ID;
• Stripe subscription ID;
• payment status;
• invoice records;
• billing cadence;
• plan type;
• renewal date;
• cancellation status;
• limited payment-method details, such as card brand, expiration month/year, and last four digits, if provided by Stripe;
• billing email;
• billing address or tax-related billing information, if provided.

Stripe may collect and process additional payment, device, transaction, and fraud-prevention information under Stripe’s own privacy policy and terms.

Discord Information

If you connect Discord, use Discord OAuth, or join the YummyPenny Discord community, we may collect or receive:

• Discord user ID;
• Discord username;
• display name;
• avatar or profile image;
• Discord email address, if provided through OAuth;
• server membership status;
• role or access status;
• information needed to verify subscription-based access;
• what you type into the bot's slash commands and DM settings, including a home ZIP code, product or brand mutes and watches;
• support tickets and review text you send the bot, with any photos you attach (up to nine per review);
• receipt photos you submit to confirm a register price. We read them by optical character recognition to extract the store, date, item and price; a receipt can also carry the last four digits of a card or a loyalty identifier, which we do not use.

Photos and messages you send on Discord are stored on Discord's servers under Discord's terms; we keep the extracted text and the link to the photo.

Discord’s own privacy policy and terms govern Discord’s collection, use, and processing of information on Discord’s platform.

Dashboard, Watchlist, and Usage Information

We may collect information about how you use the Service, including:

• products viewed;
• retailers viewed;
• searches;
• filters;
• watchlists;
• saved products;
• saved locations or zip codes;
• alert preferences;
• notification settings;
• dashboard interactions;
• price-history tools used;
• algorithmic prediction tools accessed;
• referral pages;
• error logs;
• feature usage;
• timestamps and activity logs.

Price, Product, and Resale-Related Inputs

If you use features that allow you to save, organize, compare, or analyze products, we may process information related to those actions, including selected products, tracked retailers, target prices, saved deal criteria, product categories, alert thresholds, and historical dashboard interactions.

We use this information to provide and improve the Service. We do not guarantee any resale outcome, profit, retailer availability, order acceptance, or marketplace eligibility.

Location and Map Information

The member dashboard and product pages show nearby stores on a Google Map, the account page turns your home ZIP code into coordinates through Google's geocoding service, and the terminal draws its own map from tiles we host on Cloudflare R2 (Cloudflare receives your IP address when a tile is requested). For these features we collect:

• zip code;
• city and state;
• approximate location;
• store-location searches;
• map interactions;
• location-related search queries;
• other location information you choose to provide.

We never ask for precise device location; distance is measured from the ZIP code you give us. When a Google Map loads, Google processes map interactions, the map's centre, your IP address and device information under Google's own terms and privacy policy.

Device, Log, and Technical Information

We may automatically collect:

• IP address;
• browser type;
• device type;
• operating system;
• referring URL;
• pages viewed;
• timestamps;
• session identifiers;
• cookie identifiers;
• authentication logs;
• security logs;
• fraud-prevention signals;
• crash or diagnostic information.

Communications

If you contact us, we may collect your email address, the contents of your message, attachments or screenshots you provide, support-ticket history, responses from us, and metadata associated with the communication.

3. How We Collect Information

We collect information:

• directly from you when you create an account, subscribe, contact us, save products, configure alerts, or use features;
• automatically when you use the website, dashboard, or emails;
• from Stripe or another payment processor when you subscribe or manage billing;
• from Discord when you connect Discord or use Discord OAuth;
• from Cloudflare and other infrastructure providers that help secure and deliver the Service;
• from Google Maps if map or location features are enabled;
• from Google Analytics, for visitors who are not signed in, on our public pages;
• from service providers that help us host, operate, secure, email, or improve the Service.

4. How We Use Personal Information

We use personal information to:

• provide, operate, and maintain the Service;
• create and manage accounts;
• authenticate users;
• process subscriptions, payments, renewals, cancellations, invoices, failed payments, and billing disputes;
• provide dashboard access;
• verify subscription-based Discord access;
• operate watchlists, alerts, product tracking, price history, predictions, and map features;
• send transactional emails, account notices, billing notices, security alerts, and service updates;
• send marketing emails where permitted;
• provide support;
• detect, prevent, and investigate fraud, abuse, scraping, unauthorized access, security incidents, chargebacks, and Terms violations;
• enforce our Terms of Service, Refund Policy, community rules, and other policies;
• improve, debug, test, and analyze the Service;
• develop new features;
• maintain records for legal, tax, accounting, compliance, and business purposes;
• respond to lawful requests and legal process;
• protect the rights, safety, property, and security of YummyPenny, users, third parties, and the Service.

5. Algorithmic Features and Predictions

YummyPenny may provide algorithmic price-drop predictions, product signals, trend analysis, rankings, alerts, or other informational outputs.

We may process dashboard usage, watchlists, price-history interactions, product selections, and related data to provide and improve these features.

These features are informational only. They are not financial, investment, tax, legal, business, inventory, or resale advice. We do not use algorithmic predictions to make decisions that produce legal or similarly significant effects about you.

6. Transactional and Marketing Emails

Transactional Emails

Transactional emails are service-related messages, including account emails, login or verification emails, billing emails, subscription confirmations, renewal notices, cancellation confirmations, failed-payment notices, security alerts, material policy updates, and support messages.

You may not be able to opt out of transactional emails while maintaining an account or subscription.

Marketing Emails

Marketing emails may include product updates, promotional offers, feature announcements, newsletters, educational content, and community updates.

If we send marketing emails, you may unsubscribe using the link in the email or by contacting us at [email protected].

7. How We Disclose Personal Information

Service Providers and Subprocessors

We use third-party providers to operate the Service.

These providers may process personal information as necessary to provide services to us or to you. Their own privacy policies may also apply to their independent processing.

Third-Party Retailers and Links

The Service may display information about third-party retailers, brands, products, prices, discounts, availability, or offers. If you click a third-party link, visit a retailer, or purchase from a retailer, that interaction is between you and the third party.

We are not responsible for third-party retailers’ privacy practices, product practices, pricing, policies, transactions, or websites.

Legal, Compliance, and Safety Disclosures

We may disclose information if we believe it is reasonably necessary to:

• comply with law, legal process, subpoenas, court orders, or government requests;
• enforce our Terms, Refund Policy, or community rules;
• detect or prevent fraud, abuse, scraping, security threats, or illegal activity;
• protect the rights, property, safety, or security of YummyPenny, users, or others;
• respond to chargebacks, billing disputes, tax matters, accounting requirements, or regulatory inquiries.

Business Transfers

If YummyPenny is involved in a merger, acquisition, financing, sale of assets, restructuring, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction.

With Your Direction or Consent

We may disclose information when you direct us to do so, consent to the disclosure, connect a third-party account, or use a feature that requires disclosure to function.

8. Cookies and Similar Technologies

Our Cookie Policy lists every cookie and similar technology we use, what each is for, how long it lasts, and how to control it. In short:

• A signed session cookie keeps you signed in for seven days and is strictly necessary. Your theme choice is kept in browser storage as yp-theme.
• We use Google Analytics 4 on public pages to learn how visitors find us. It sets cookies beginning _ga. We do not run analytics inside the member area: if you are signed in, no analytics tag loads on any page you see.
• Before a page view is reported we rebuild the address so only the page path and a short list of campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid) are sent. Search terms and any token in a link we email you never reach Google.
• We honour Global Privacy Control: when your browser sends it, the analytics tag does not load at all.
• Stripe sets cookies on its own checkout and billing pages; Google may set cookies on pages that show a Google Map. We use no advertising or retargeting cookies.

9. Do Not Track and Global Privacy Control

We do not sell personal information for money and we do not share it for cross-context behavioral advertising. We treat a Global Privacy Control signal as an opt-out: analytics does not load for that browser at all. Analytics also never loads while you are signed in. "Do Not Track" has no agreed meaning, so we do not change our behavior in response to it beyond the practices described here.

10. Legal Bases for Processing

For users in jurisdictions where a legal basis is required, we may process personal information based on contract, legitimate interests, consent, and legal obligations.

We process information under contract to provide the Service, manage accounts, process subscriptions, provide dashboard access, verify Discord access, and deliver subscription features.

We process information under legitimate interests to secure, improve, analyze, debug, and enforce the Service; prevent fraud and abuse; communicate with users; and protect our business, users, and community.

We process information based on consent for certain cookies, marketing communications, precise-location features, or other processing where consent is required.

We process information under legal obligations to comply with tax, accounting, payment, billing, chargeback, legal, regulatory, and recordkeeping obligations.

11. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, operate our business, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.

We may retain de-identified, aggregated, or anonymized information that cannot reasonably identify you.

12. Account Deletion

You may request account deletion through https://yummypenny.com/account or by contacting [email protected].

Account deletion generally removes or deactivates your account profile, login access, dashboard access, and associated account data where deletion is legally and technically required.

However, we may retain limited information where necessary for:

• tax records;
• accounting records;
• billing records;
• fraud prevention;
• chargeback defense;
• legal compliance;
• security logs;
• dispute resolution;
• enforcement of our Terms;
• backup integrity.

Deleting your account cancels any active subscription immediately. Your access ends at once and the remainder of a paid month or year is not refunded, except where the law requires. If you want to keep access to the end of the period you have paid for, cancel from your account page instead of deleting, and delete later.

Two things survive deletion, and we say so rather than leaving them under "fraud prevention": a record that a free trial was used (a normalised email address, a Discord ID, a payment-card fingerprint that is not a card number, and a Stripe customer ID), kept so a trial cannot be claimed twice; and your contributions (penny confirmations, deal reports and staff picks), which are kept without your name because other members rely on them. Cancelled or never-activated accounts that are not deleted by hand are removed automatically 90 days after they go inactive.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include access controls, authentication systems, encryption in transit where appropriate, vendor security controls, logging and monitoring, payment processing through Stripe, Cloudflare security protections, and database and infrastructure controls.

No website, database, payment system, or internet transmission is completely secure. You are responsible for keeping the login links we email you and your connected Discord account to yourself, and for using a secure device and browser.

14. U.S. State Privacy Rights

Depending on your state of residence and applicable law, you may have rights to:

• confirm whether we process personal information about you;
• access personal information;
• correct inaccurate personal information;
• request deletion of personal information;
• obtain a copy of personal information in a portable format;
• opt out of certain targeted advertising;
• opt out of certain sales of personal information;
• opt out of certain profiling that produces legal or similarly significant effects;
• appeal a denied privacy request, where required.

To exercise rights, contact [email protected].

You can also download everything we hold about you, or delete your account and its data, yourself at any time from the Data & privacy tab of your account page, and you can turn marketing email off there or with the link at the bottom of any marketing email. For requests made by email we respond within 45 days, or within the shorter time your state's law sets, and we tell you if we need longer. If we decline a request we say why, and you may appeal by replying to our answer; appeals are decided within the time your state's law sets.

We may need to verify your identity before processing certain requests. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the consumer’s identity.

15. California Privacy Notice

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to us.

California Privacy Rights

California residents may have the right to:

• know what personal information we collect, use, disclose, sell, or share;
• access specific pieces of personal information;
• request deletion of personal information, subject to legal exceptions;
• request correction of inaccurate personal information;
• opt out of the sale or sharing of personal information;
• limit the use or disclosure of sensitive personal information where applicable;
• not be discriminated against for exercising privacy rights.

Categories of Personal Information Collected

We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you.

Sources of Personal Information

We may collect personal information from you, your device or browser, Stripe, Discord, Cloudflare, Google Maps, Google Analytics, Resend, Railway, other service providers, and your interactions with the Service.

Purposes for Collection, Use, and Disclosure

We collect, use, and disclose personal information for the purposes described in this Policy, including providing the Service, managing accounts and subscriptions, processing payments, providing Discord access, operating dashboard and map features, securing the Service, preventing fraud and abuse, sending transactional emails, providing support, complying with legal and accounting obligations, enforcing our Terms, and improving the Service.

Categories of Third Parties to Whom We Disclose Personal Information

We may disclose personal information to payment processors, hosting and infrastructure providers, email service providers, security and CDN providers, Discord, Google Maps, Google Analytics, professional advisors, legal or regulatory authorities, parties involved in business transfers, and other parties with your consent or direction.

Sale and Sharing of Personal Information

We do not sell personal information for money.

We also do not share personal information for cross-context behavioral advertising. We use Google Analytics only as a measurement service: Google Signals is not enabled, Google Analytics is not linked to Google Ads, and analytics data is not used to build or target advertising audiences. Analytics does not run at all while you are signed in, and it does not run for any browser that sends Global Privacy Control.

If we ever engage in activity that constitutes a “sale” or “sharing” of personal information under California law, we will update this Policy and provide any required notices and opt-out mechanisms before the change takes effect.

Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law unless we provide the required notice and choice.

Where we process sensitive personal information, we do so for purposes such as account access, security, payment processing, fraud prevention, legal compliance, or providing requested features.

Minors

YummyPenny is strictly intended for users who are at least 18 years old.

We do not knowingly permit minors to create accounts, purchase subscriptions, access the dashboard, connect Discord, or participate in the YummyPenny community.

We do not knowingly collect, sell, or share personal information of anyone under 18. If we learn that a person under 18 has provided personal information or created an account, we may delete the information, cancel the account, and terminate access to the Service.

Exercising California Rights

California residents may submit privacy requests by contacting [email protected].

We may need to verify your identity before fulfilling certain requests. You may also use an authorized agent where permitted by law.

We will not discriminate against you for exercising applicable privacy rights.

16. European, UK, Swiss, and International Users

YummyPenny is operated from the United States and is intended primarily for users located in the United States.

We do not intentionally target, market, advertise, or direct the Service to individuals located in the European Economic Area, the United Kingdom, or Switzerland. We do not currently maintain an establishment, data protection officer, EU representative, or UK representative in those jurisdictions.

If you access the Service from outside the United States, you understand that your information may be collected, processed, stored, and used in the United States and other jurisdictions where our service providers operate. These jurisdictions may have data-protection laws different from those in your location.

If we determine that additional international privacy-law obligations apply to our processing of your personal information, we will handle applicable rights and requests as required by law. We may also restrict, suspend, or decline access from jurisdictions where we determine that offering the Service would create compliance obligations we are not prepared to support.

If you are located in the European Economic Area, the United Kingdom, or Switzerland and believe you have privacy rights under applicable law, you may contact us at [email protected].

17. International Data Transfers

Because YummyPenny is based in the United States, personal information may be transferred to, stored in, or processed in the United States and other countries where our service providers operate.

Where required by applicable law, we rely on appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

18. Children’s and Minors’ Privacy

The Service is not intended for minors. You must be at least 18 years old to use YummyPenny.

We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information, created an account, purchased a subscription, or joined the YummyPenny community, we may delete the information, cancel the account, and terminate access.

Parents or guardians who believe a minor has provided information to us may contact [email protected].

19. Third-Party Retailers, APIs, and Product Data

YummyPenny displays information about third-party retailers, products, brands, prices, discounts, availability, and offers.

Retailer names, product names, brand names, logos, and trademarks belong to their respective owners. We may reference them only to identify products, retailers, prices, or offers for informational purposes.

Third-party retailers and data sources may collect information from you if you visit their websites, use their apps, click their links, or purchase products from them. Their privacy policies and terms govern those interactions.

YummyPenny is not responsible for third-party retailer privacy practices, product listings, pricing, inventory, checkout, shipping, fulfillment, returns, warranties, or customer service.

20. Affiliate Links and Referral Tracking

If you refer a friend with your referral link, we store their email address on your account record so that the referral credit can be applied, until either account is deleted. Referral credits are bill credits, never cash.

If we use affiliate links, referral links, sponsored links, or compensated retailer relationships, we may receive compensation when you click links or make purchases through those links.

If affiliate or referral tracking uses cookies, pixels, or similar technologies, we will disclose that use and provide any legally required consent or opt-out mechanism.

YummyPenny remains an information service and does not become the seller, shipper, fulfiller, or guarantor of third-party products by using affiliate or referral links.

21. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. The updated version will be posted with a new “Last Updated” date.

If changes are material, we may provide additional notice, such as by email, dashboard notice, checkout notice, or website banner.

Your continued use of the Service after an updated Policy becomes effective means you acknowledge the updated Policy.

22. Contact Us

YummyPenny, LLC
Tyler Grove
2502 Leon St. Unit 307
Austin, TX 78705
Email: [email protected]

For billing questions, contact: [email protected]

For support questions, contact: [email protected]