Privacy Policy

Penpus — your campus, in your pocket · Effective 14 July 2026

Penpus (“we”, “our”, “the app”) helps university students connect with their school, classmates, classes and study materials. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

• Account information — when you sign in with Google, we receive your name, email address and profile photo.
• Academic information — the school, faculty, department and level you choose or verify, so we can place you in the right campus communities.
• Content you create — messages, voice notes, photos, posts, quiz attempts and course materials you share inside the app.
• Device information — a push-notification token so we can deliver message alerts and class reminders, and basic diagnostics to keep the app reliable.
• Camera, microphone and photo library — used only when you actively take a photo, record a voice note, or attach an image. We never access them in the background.

2. How we use your information

• To create and secure your account and verify your campus membership.
• To deliver messages, feeds, timetables, reminders and quizzes to you and your communities.
• To generate practice-quiz questions from course materials you choose (processed by an AI service solely for that purpose).
• To send push notifications you can turn off anytime in Settings.
• To prevent abuse and keep communities safe.

We do not sell your personal information, and we do not use your content for advertising.

3. Who can see your content

Penpus is a community app: your name, profile photo and academic rank are visible to members of the communities you join, and messages you send are visible to their recipients or channel members. Your quiz scores are private to you.

4. Services we rely on

We use trusted providers to run Penpus, each processing data only on our behalf:

• Google Firebase — authentication and push notifications.
• Supabase — application database.
• Cloudflare — file storage for photos, voice notes and course materials.
• Anthropic — AI processing of course materials you select for quiz generation.

5. Data retention & deletion

We keep your information while your account is active. You can delete your account from inside the app (Profile → Settings), which removes your personal data from our systems; or email us and we will delete it for you. Some minimal records may be retained where required for security or legal compliance.

6. Children

Penpus is intended for university students and users aged 13 and above. We do not knowingly collect data from children under 13; if you believe a child has created an account, contact us and we will remove it.

7. Security

Data is encrypted in transit, access to production systems is restricted, and permissions inside the app are enforced server-side.

8. Changes to this policy

If we make material changes, we will update this page and note the new effective date above.

Contact & support

Questions, feedback, or a data request? Email us at support@penpus.com — we usually reply within 48 hours.