Privacy Policy

Last updated: July 20, 2026

This policy explains what information Penna ("we," "our," "the app") collects when you use the app, how we use it, and the choices you have. It's written in plain language on purpose — if anything is unclear, contact us using the details at the bottom of this page.

This is a draft policy prepared ahead of launch and is subject to legal review before Penna is publicly available.

Information we collect

• Account information: your email address, and your password (stored securely, we never see it in plain text) or your Apple/Google account identifier if you sign in that way.
• Birth date: collected at sign-up solely to confirm you meet the minimum age requirement (see below). It is not shown to other users and cannot be edited afterward without contacting support.
• Profile information: the display name, gender, country, city, languages, interests, and bio you choose to add to your profile, plus your chosen avatar (built from a small set of preset options — see "What we don't collect" below).
• Letter content: the subject and body text of letters you write, and which stamp you attach to them.
• Push notification tokens: a device identifier used to deliver notifications (e.g., "your letter has arrived"), if you allow notifications.
• Basic usage data: things like when letters are sent/delivered and moderation reports you file or that are filed against your content, needed to operate the core features described in this policy.

What we don't collect

• No photo uploads. Profile avatars are built from a small set of preset illustrated options (base style, face, hair, skin tone) — there is no facility to upload a real photo in this version of the app.
• No precise location. We never access GPS or device location. Country and city are plain text fields you type or select yourself.
• No contacts access. Penna never requests access to your device's contacts or address book.

How we use your information

We use your information to operate Penna's core functions: creating and securing your account, matching and delivering letters (including enforcing the intentional delivery delay that's central to how Penna works), showing your profile to other users as you've configured it, sending notifications you've opted into, and reviewing content that's reported for violating our Terms of Use.

Who processes your information

We use a small number of service providers ("processors") to run Penna. We choose providers with strong security and privacy practices, and we don't sell your information to anyone.

• Supabase — our database, authentication, and backend hosting provider. Data is hosted in the EU (Frankfurt).
• Expo (push notifications) — delivers push notifications to your device.
• Resend — delivers transactional emails (sign-up confirmation, password reset).
• RevenueCat and Google AdMob — not yet active. These will be added, and this policy updated, upon launch of paid subscriptions (RevenueCat) and advertising (AdMob) respectively.

Data retention & deletion

You can request account deletion at any time from within the app. Here's exactly what happens:

• Your account enters a 7-day grace period: it's deactivated and hidden from everyone immediately. If you log back in during this window, deletion is cancelled and your account is restored as-is.
• If the grace period elapses, your account is permanently deleted: your profile and any drafts are erased.
• Letters you've already sent that were delivered remain visible in the recipient's threads (this mirrors how a physical letter, once delivered, belongs to the person who received it) — but your identity on them is replaced with "deleted user."
• Any letter still in transit (not yet delivered) at the time of deletion is dropped and never delivered.

Age requirement

Penna is intended for users aged 17 and older. We collect your birth date at sign-up specifically to enforce this, and accounts found to belong to someone under 17 will be removed.

Your rights

Depending on where you live, you may have rights under data protection law (such as the EU/UK GDPR or Turkey's KVKK) to access, correct, export, or delete your personal information, or to object to certain uses of it. Account deletion is available directly in the app (see above); for any other request, or if you have questions about how your information is handled, contact us using the details below.

Changes to this policy

We may update this policy as Penna evolves. If we make a material change, we'll update the "last updated" date above and, where appropriate, let you know in the app.

Contact

Questions about this policy or your data can be sent to pennaapp01@gmail.com.