Y/Yangopen
ChillPenny / Privacy

Your plans
stay on your iPhone

No account, no ads, no tracking, no server of our own. Below is every time the app sends data out, and what it sends.

Effective date: 20 October 2026

Summary: ChillPenny has no server of its own, no account, no ads, no third-party analytics and no tracking. Your plans, spending and profile are stored on your iPhone. The app sends data out only in the cases listed below: finding places with Apple Maps, making a VietQR code when you ask for one, downloading exchange rates, iCloud sync if you turn it on (Pro) and buying Pro through Apple.

1. Scope

This policy covers the ChillPenny app for iPhone (App Store name: “ChillPenny: Kèo đi chơi”) and its support pages on yangopen.com. The app is published on the App Store by Yang Yang HOANG LE, an individual developer in Vietnam who runs Yangopen (“we”).

2. Data we receive

None. The app has no server of its own and sends no data to us. It contains no advertising SDKs, third-party analytics or tracking tools.

The App Store privacy label shows Payment Info under “Data Linked to You” and Precise Location under “Data Not Linked to You”. Both are used only for app functionality and not for tracking. The reason: your location is sent to Apple Maps to find places (section 4). Transfer details, which include the account holder's name, are sent to img.vietqr.io when you open a QR code (section 5), so Apple counts them as linked to you. We do not receive this data.

3. What the app stores on your iPhone

The app stores the following on the device with Apple's SwiftData and Keychain:

  • Plans: plans you used or saved, their stops, times, estimated prices, notes, the people with you (names you type), the spending you logged, your 👍/😐/👎 ratings and photos you add for a place.
  • Profile: a photo, a name and a short bio, if you add them.
  • VietQR: your bank, account number and account holder's name, kept in the Keychain.
  • Settings: your limit, group size, way of getting around, province and city names already looked up, places you picked yourself and downloaded exchange rates.

Like any app's data, this can be part of your own iPhone backup (section 10).

4. Location and Apple Maps

  • The app asks for location “While Using the App” to find places near you through Apple MapKit. Apple Maps handles place searches under Apple's policies. ChillPenny does not send your location to any server of its own.
  • The outing log looks up the province or city of stops in finished trips with Apple's map service, sending the coordinates of one stop for each area of about 10 km. The names are stored on the device.
  • When you choose to open directions in Google Maps, the app opens Google Maps with the points of the route. From then on, Google handles them under Google's policies.

5. VietQR

  • Your account number and account holder's name are stored in the Keychain on the device and are not synced to iCloud. They may be in this device's own encrypted backup, but they cannot be restored to another device.
  • The EMVCo-standard QR code is drawn by img.vietqr.io. The app calls that service only when you open a split QR code yourself, or when you turn on “Add the QR code to the split card” and export the card. That switch is off by default; when it is off, exporting a card makes no network connection.
  • That call sends the bank code, account number, account holder's name, amount and transfer note. This is what the service needs to build the code. At no other time does the app send these details.
  • The “Share QR” button sends an image of the code through the app you choose, never a link that contains the account number. A card image saved to your photo library still has a scannable code; deleting the app does not delete it.

6. Calendar and Photos

  • Calendar: the app asks only for permission to add events, when you tap Add to Calendar. It does not read your existing calendar.
  • Photos: the app saves to Photos only when you save an itinerary card or a trip card. You choose a profile photo with the iOS photo picker; the app receives only that photo, scales it down, removes its metadata (including where it was taken) and stores it on the device.
  • Trip cards have no street map, lodging or account number. The name, photo and amounts on a card can be turned off.

7. Exchange rates

Once a day, when online, the app downloads exchange rates from open.er-api.com (ExchangeRate-API). The request sends no location or other data of yours. Like any website, the service sees your device's network (IP) address.

8. iCloud sync and the widget (ChillPenny Pro)

  • iCloud sync is off by default. When you turn it on, your plans, stops, the people with you, the spending you logged, your ratings and your saved plans are also stored in your own iCloud (Apple CloudKit, private database; we cannot read it), so they appear on your devices with the same Apple Account. Not synced: VietQR account numbers, photos, your profile and settings.
  • The Upcoming Plan widget: the app writes a summary of your next plan (its name, time, stop names and estimated prices) to a file on the device for the widget to read. The file is not sent anywhere and is not synced to iCloud. The widget is on your Home Screen, so anyone holding the phone can see the plan's name.

9. When you buy ChillPenny Pro

Apple handles payment through your Apple Account under Apple's privacy policy. The app only learns from Apple whether you have bought Pro; it never sees your card, bank account, name or e-mail. PDF / Excel files you export are made on the device and leave it only when you pick an app to send them with. Apple shows developers only aggregated figures, such as downloads per country. If you chose to share analytics with app developers in your iPhone settings, Apple may also show us anonymous crash and usage figures. You can turn this off in Settings > Privacy & Security > Analytics & Improvements.

10. iPhone backups

If you back up your iPhone to iCloud or a computer, or move your data to a new iPhone, the backup can contain the app's data, as with any other app. The backup is yours and is handled by Apple. We cannot access it.

11. Deleting your data

  • “Delete All Data” in the app's Settings deletes from the device: plans, the people with you, spending, ratings and photos you added for places, saved plans, bank and account number, profile, province and city names already looked up, places you picked, .bak backup copies, exported PDF / Excel files and the widget's content. If iCloud sync is on, the data in iCloud and on your other devices with the same Apple Account is deleted too. This cannot be undone.
  • Photos saved to your library and events added to Calendar are not deleted; remove them in the Photos and Calendar apps.
  • Deleting the app also deletes the data it stored on the device.

We keep no data about you except e-mail you send us. To have it deleted, e-mail us.

12. Children

ChillPenny collects no personal information from anyone, including children. The app has no ads and no chat.

13. When you e-mail us

When you write to [email protected], we receive your e-mail address and what you wrote. We use them only to answer you, never add you to a mailing list and never pass your message to anyone else. You can ask us to delete your messages at any time.

14. Changes and contact

If a later version handles data differently, we will update this page and the effective date above, no later than when that version is released. Send privacy questions to [email protected].