About
Privacy in plain English
What we record when you ask or answer, who sees it, where it is stored, how long we keep it and your rights. A short summary of the full privacy notice, which is the legal version: if anything here differs, the notice wins.
Last checked against privacy notice version 1.11, 7 October 2026.
The short version
No passwords
You sign in with a passkey, so we never hold a password.
Askers never see who you are
They see answers under a pseudonym that is different for every asker.
No selling, no adverts, no AI training
Public-page analytics runs without cookies until you choose; analytics cookies need your permission. No outside AI provider receives your data.
A person decides
Software can hold an answer for checking. Only a person makes decisions about you, and you can appeal.
We collect what we need to run your account, show questions and deliver answers. Our database is in London. Uploaded images are stored in the US by our host, Netlify, under the UK’s data bridge with the US.
Who is responsible
David Bryan runs PennyForYours as a sole trader in the UK and is the controller of your personal data: he decides how and why it is used. If a company takes over the service, we’ll update the notice and tell you first.
If you request an invite
What we keep: your name, email, whether you want to ask or answer, what you tell us on the form (askers: company, role, what you want to test and how often; answerers: your 18+ and UK confirmation, topics and any expertise), how you heard about us, and a hashed IP address.
Why: only to decide whether to invite you and to email you an invite code. We send you a short email to say we have your request. A person reads every request.
How long: deleted automatically 12 months after you sent the request, or after we invite you or decide not to, whichever is later.
If you answer questions
What we keep: your display name, optional email, your 18+ and UK confirmation, your passkey details (never your fingerprint or face), the answers you give, the topics you choose to see or hide on your question board, and your Standing.
While you answer, we record a summary of how each answer was made, to check it came from a person:
- how long the question was on screen and how long before you started typing;
- how many times you typed or deleted, and your typing rhythm as six grouped counts;
- whether you tried to paste (it’s blocked);
- how often the window lost focus or you switched tabs;
- signs that software is driving the browser, and, until you start typing, how many times the pointer moved and how varied its direction was, as numbers only.
We never record which keys you pressed, your screen, camera, microphone or location, or where on the screen your pointer or finger goes.
When you join, the form also notes how long it was open and the same signs of automation. A hidden field that people never see stops scripted sign-ups; nothing else stops you joining, and anything unusual is looked at by a person.
Is typing rhythm biometric? No. Six grouped counts from one short answer can’t identify you, and we don’t use them to recognise you or link accounts.
Who sees your answers: the asker, under a pseudonym that’s different for every asker. The results summary may quote up to three answers word for word, without names.
If you ask questions
What we keep: your question as written and as shown, the options, any image and the results.
- A person reviews every question and image during early access.
- We strip hidden image metadata (location, camera details) before storage. The picture itself isn’t changed, so don’t upload photos of people who haven’t agreed, or personal details such as addresses or number plates.
- Images are never at a public web address. Only you, the members answering and the reviewer can see them.
- Members never see who asked.
If you’re a business or use the API
We keep your organisation’s name and type, the account that owns it, and for each API key its name, visible prefix, a hash of the key (never the key itself), its permissions and when it was last used. Test keys only ever reach synthetic members, never real people.
We don’t train AI on your data
We don’t train AI models on your answers, your questions or anything else about you, and we don’t give your data to anyone else to train theirs. No outside AI provider receives it: the checks on answer wording, question screening and results summaries all run on software inside PennyForYours. If that ever changes, the privacy notice will name the provider first.
How long we keep things
| Data | Kept for |
|---|---|
| Sign-in sessions | Deleted 30 days after they expire or you sign out |
| Answering signals | 12 months, then cut down to how long the question was on screen and whether paste was tried |
| Invite requests | 12 months after you sent the request, or after we invite you or decide not to, whichever is later |
| Daily visit totals (no personal data) | 25 months, then deleted automatically |
| Reports, complaints, appeals and support requests | 2 years after the matter closes |
| Your account, answers, questions and images | While your account is open; deleted within 30 days of a confirmed deletion request |
| Payment and tax records (once paid answering opens) | 6 years after the end of the tax year, as HMRC requires |
When you delete your account we keep a few things without your name, such as which option each answer chose (it’s part of other people’s results) and receipts already given to askers. The full notice lists them.
Your rights
You can get a copy of your data (as a JSON file), correct it, delete it, restrict or object to how we use it, take it with you, withdraw consent, and challenge any decision software was involved in. It’s free, and we reply within one month.
How: signed in, use Settings (“Get a copy of your data”, “Delete my account”). Signed in or not, use the help and support form. Or email hello@pennyforyours.com.
Not happy? Complain to us first; we acknowledge within 30 days. You can also complain to the Information Commissioner’s Office on 0303 123 1113.
Privacy questions
What do you record while I answer?
Timing and typing-rhythm summaries, paste attempts, tab switches and signs that software is driving the browser, to check answers come from people. Never which keys you pressed, your screen, camera, microphone or location, or where your pointer goes.
Can askers see who I am?
No. They see your answers under a pseudonym that's different for every asker, never your name or email.
Where is my data stored?
Our database and server code are in London. Uploaded images are stored by our host, Netlify, in the US (Ohio) under the UK's data bridge with the US, because it doesn't yet offer UK storage for files.
Do you train AI on my data?
No. We don't train AI models on your answers, questions or anything else about you, and no outside AI provider receives your data. Every automated check runs on software inside PennyForYours.
Do you sell data or use analytics cookies?
We don't sell personal data or show adverts. Optional Google Analytics cookies run on public information pages only after you accept them.
How do I get a copy of my data or delete my account?
Signed in, use Settings. Or use the help and support form. We reply within one month and delete within 30 days of a confirmed request.
Do you store fingerprints or faces?
No. Passkeys are unlocked on your own device, and the fingerprint or face never leaves it. Identity checks, when they start, will be done by a certified provider that returns a result to us, not images.
Does software decide things about me?
Software can hold an answer for checking and works out your Standing. It never rejects an answer, withholds pay or removes an account on its own: a person decides, and you can appeal.
Who do I contact about privacy or a data request?
Use the help and support form, signed in or not, or Settings if you're signed in. We reply to data requests within one month.
Questions about your data?
Ask a person. The help and support form works without an account; add an email so we can reply. Data requests are answered within one month.
Ready to ask a better question?
Ask real people. Get paid to be one.
Free during early access. We review requests by hand. Have an invite code? Join