Privacy Policy

Last updated: October 4, 2026

This policy explains what information Penna ("we," "our," "the app") collects when you use the app, how we use it, and the choices you have. It's written in plain language on purpose — if anything is unclear, contact us using the details at the bottom of this page.

Information we collect

• Account information: your email address, and your password (stored securely, we never see it in plain text) or your Apple/Google account identifier if you sign in that way. If you sign in with Apple and choose to share your name, we save it with your account and use it only to suggest a pen name.
• Age confirmation and birth date: at sign-up you confirm that you are 17 or older. Adding your birth date is optional; if you add it, your age and zodiac sign are shown on your profile, and it can't be changed afterward without contacting support.
• Profile information: the display name, gender, country, city and region, languages, interests, what you're on Penna for, and bio you choose to add to your profile, plus your chosen avatar (built from a small set of preset options — see "What we don't collect" below).
• Letter content: the subject and body text of letters you write, and which stamp you attach to them.
• Push notification tokens: a device identifier used to deliver notifications (e.g., "your letter has arrived," and occasional announcements from Penna), if you allow notifications.
• Basic usage data: things like when letters are sent/delivered and moderation reports you file or that are filed against your content, needed to operate the core features described in this policy.
• Purchase information: if you subscribe to Penna Plus, the store transaction details (product, dates, renewal status) needed to activate it. Payment is handled by Apple or Google; we never see your card details.
• Advertising and analytics data: an app-instance identifier, basic device and app information, in-app events (for example, that a letter was sent), and your device's advertising identifier (on iPhone, only if you allow tracking). See "Ads and analytics" below.

What we don't collect

• No photo uploads. Profile avatars are built from a small set of preset illustrated options (base style, face, hair, skin tone) — there is no facility to upload a real photo in this version of the app.
• No precise location. We never access GPS or device location. Country and city are plain text fields you type or select yourself.
• No contacts access. Penna never requests access to your device's contacts or address book.

How we use your information

We use your information to operate Penna's core functions: creating and securing your account, matching and delivering letters (including enforcing the intentional delivery delay that's central to how Penna works), showing your profile to other users as you've configured it, sending notifications you've opted into, and reviewing content that's reported for violating our Terms of Use.

When you finish sign-up, you'll receive a few welcome letters from Ada, Penna's own account. They're written in advance by the Penna team and sent automatically in your language, addressed with your display name.

Ads and analytics

The free version of Penna shows ads through Google AdMob; Penna Plus removes them. We use Google Firebase Analytics to understand how the app is used.

• Consent: in the EEA, the UK and Switzerland, Google's consent form asks for your choices before ads or analytics run. On iPhone, Apple's tracking permission prompt is also shown.
• Personalized ads are shown only if you've given consent where it's required and, on iPhone, allowed tracking. Otherwise, ads are non-personalized.
• Changing your choices: on iPhone, Settings → Privacy & Security → Tracking; on Android, your device's ad settings (Settings → Google → Ads).

Who processes your information

We use a small number of service providers ("processors") to run Penna. We choose providers with strong security and privacy practices, and we don't sell your information to anyone.

• Supabase — our database, authentication, and backend hosting provider. Data is hosted in the EU (Frankfurt).
• Expo (push notifications) — delivers push notifications to your device through Apple's and Google's push services.
• Resend — delivers transactional emails (sign-up confirmation, password reset).
• RevenueCat — manages Penna Plus subscriptions, linked to your Penna account ID. Payments are processed by Apple (App Store) or Google (Google Play).
• Google AdMob and Google Firebase Analytics — ads in the free version and app usage analytics (see "Ads and analytics").
• Apple and Google sign-in — if you choose to sign in with them.

Some of these providers process data outside Turkey and the EU, including in the United States.

Data retention & deletion

You can request account deletion at any time from within the app. Here's exactly what happens:

• Your account enters a 7-day grace period: it's deactivated and hidden from everyone immediately. If you log back in during this window, you can cancel the deletion and your account is restored as-is.
• If the grace period elapses, your account is permanently deleted: your profile and any drafts are erased.
• Letters you've already sent that were delivered remain visible in the recipient's threads (this mirrors how a physical letter, once delivered, belongs to the person who received it) — but your identity on them is replaced with "deleted user."
• Any letter still in transit (not yet delivered) at the time of deletion is dropped and never delivered.
• Deleting your account doesn't cancel a Penna Plus subscription — cancel it in your App Store or Google Play settings.

Age requirement

Penna is intended for users aged 17 and older. You confirm this during sign-up, and accounts found to belong to someone under 17 will be removed.

Your rights

Depending on where you live, you may have rights under data protection law (such as the EU/UK GDPR or Turkey's KVKK) to access, correct, export, or delete your personal information, or to object to certain uses of it. Account deletion is available directly in the app (see above); for any other request, or if you have questions about how your information is handled, contact us using the details below.

Changes to this policy

We may update this policy as Penna evolves. If we make a material change, we'll update the "last updated" date above and, where appropriate, let you know in the app.

Contact

Questions about this policy or your data can be sent to pennaapp01@gmail.com.