Privacy Policy

Effective date: September 27, 2026

Penpim is a personal app platform that lets people create, use, and share small purpose-built apps called PIMs. This Privacy Policy explains what information Penpim may process, how it is used, and the choices available to you.

1. Information We Process

Depending on how you use Penpim, we may process the following categories of information:

• Account and authentication information, such as a Firebase user identifier, email address, display name, and the sign-in provider you choose. Penpim can also be used initially with a guest account.
• PIM creation information, such as prompts, PIM names, icons, generated definitions, and requests you submit when creating or editing a PIM.
• PIM data. Local-only PIM data is stored on your device. If you choose to make a PIM shared, data needed for that shared PIM is stored in Penpim's cloud services so invited members can access the same PIM.
• Shared PIM information, such as memberships, roles, invite records, timestamps, and data entered into a shared PIM.
• AI feature information. When you use an AI-powered creation, editing, or action feature, your request and the minimum relevant PIM context needed to perform that request may be sent to an AI service provider.
• Credit, referral, and purchase information, such as Penpim AI credit balances, referral records, App Store product identifiers, transaction identifiers, and purchase verification data. Apple handles payment-card information; Penpim does not receive your full payment-card details from the App Store.
• Technical and security information, such as request identifiers, app/runtime versions, diagnostic information, service logs, rate-limit information, and information needed to protect the service from abuse and troubleshoot failures.

2. How We Use Information

We use information to provide and operate Penpim, including to authenticate users, create and edit PIMs, synchronize shared PIMs, manage invitations and memberships, provide AI features, maintain credit balances, verify purchases, prevent abuse, troubleshoot problems, provide support, and improve reliability and product quality.

3. Local and Shared PIM Data

Penpim is designed so that local-only PIM data can remain on your device. Local PIM data is not automatically converted into cloud data. If you choose to make a PIM shared, the PIM definition and the data needed for shared use are uploaded to Penpim's cloud services and become available to the members you invite.

Deleting your Penpim account does not automatically erase local-only PIM data that remains on your device. You can delete local PIMs in the app or remove the app's local data from your device.

4. AI Processing

Penpim uses third-party AI services to generate or modify PIMs and to perform AI-powered actions. Information sent for an AI request may include your prompt and relevant declarative PIM context. We aim to send only information reasonably necessary to fulfill the request.

5. How Information Is Shared

We may share information in the following circumstances:

• With members of a shared PIM, when sharing is necessary for the collaborative feature you chose to use.
• With service providers that help operate Penpim, including cloud hosting, authentication, databases, AI processing, purchase verification, and related infrastructure. Current providers include Google Firebase/Google Cloud, OpenAI, Apple, and sign-in providers you choose to use.
• For legal, safety, and security reasons, when reasonably necessary to comply with law, respond to lawful requests, prevent fraud or abuse, or protect Penpim, its users, or others.

Penpim does not sell your personal information to advertisers.

6. Data Retention

We retain cloud information for as long as reasonably necessary to provide the service, maintain accounts and shared PIMs, process purchases and credits, prevent abuse, comply with legal obligations, resolve disputes, and maintain appropriate business and security records. Retention periods may vary by data type and purpose.

7. Account and Data Deletion

Linked-account users can initiate account deletion in the Penpim app from Account → Delete account. You may also contact us at support@penpim.com for help with a privacy or deletion request.

Account deletion is designed to remove your Penpim cloud account and account-linked personal data, subject to information we may need to retain for legal, fraud-prevention, security, dispute-resolution, or legitimate recordkeeping purposes.

8. Security

We use reasonable administrative and technical safeguards designed to protect information processed by Penpim. No internet service or storage system can be guaranteed to be completely secure.

9. International Processing

Penpim and its service providers may process information in Canada, the United States, and other countries where those providers operate. Data protection laws may differ from those in your jurisdiction.

10. Children's Privacy

Penpim is not directed to children who are below the age at which they may legally consent to the processing of personal information in their jurisdiction. If you believe a child has provided personal information without appropriate consent, contact us.

11. Your Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information associated with your account. You can contact us using the address below. We may need to verify your identity before completing certain requests.

12. Changes to This Policy

We may update this Privacy Policy as Penpim develops or as legal, operational, or technical requirements change. When we do, we will update the effective date shown above.

13. Contact

Penpim
British Columbia, Canada
Email: support@penpim.com