Privacy Policy

Penpus — your campus, in your pocket · Effective 14 September 2026

Penpus (“we”, “our”, “the app”) helps university students connect with their school, classmates, classes and study materials. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

• Account information — when you sign in with Google, we receive your name, email address and profile photo.
• Academic information — the school, faculty, department and level you choose or verify, so we can place you in the right campus communities.
• Content you create — messages, voice notes, photos, posts, quiz attempts and course materials you share inside the app.
• Device information — a push-notification token so we can deliver message alerts and class reminders, and basic diagnostics to keep the app reliable.
• Camera, microphone and photo library — used only when you actively take a photo, record a voice note, or attach an image. We never access them in the background.
• Contacts — if you grant permission, phone numbers from your address book are checked against Penpus accounts so we can show you which of your contacts are already here. We do not store your address book, and contact names stay on your device.
• Location — if you grant permission, your device location is used once to determine your country when setting up your profile. We keep the country, not your coordinates.
• How you use the app — which features you open and complete. See “Usage analytics” below.

2. How we use your information

• To create and secure your account and verify your campus membership.
• To deliver messages, feeds, timetables, reminders and quizzes to you and your communities.
• To generate practice-quiz questions from course materials you choose (processed by an AI service solely for that purpose).
• To send push notifications you can turn off anytime in Settings.
• To prevent abuse and keep communities safe.
• To understand which features are used, so we know what to improve.

We do not sell your personal information, and we do not use your content for advertising.

3. Usage analytics

We record which features of Penpus you use — for example opening a challenge, completing a scan, or using the CGPA calculator — together with the date and your account ID. We record that a feature was used, never its contents: we do not record your messages, your documents, your quiz answers, or the files in your library.

We use this only to understand which parts of Penpus are useful and which need improvement. It stays on our own servers, is never sold, and is never shared with advertisers or data brokers. We do not track you across other apps or websites.

This data is automatically deleted after 60 days.

4. Who can see your content

Penpus is a community app: your name, profile photo and academic rank are visible to members of the communities you join, and messages you send are visible to their recipients or channel members. Your quiz scores are private to you.

5. Services we rely on

We use trusted providers to run Penpus, each processing data only on our behalf:

• Google Firebase — authentication and push notifications.
• Supabase — application database.
• Cloudflare — file storage for photos, voice notes and course materials.
• Anthropic — AI processing of course materials you select for quiz generation.

6. Data retention & deletion

We keep your information while your account is active. You can delete your account from inside the app (Profile → Settings), which removes your personal data from our systems; or email us and we will delete it for you. Some minimal records may be retained where required for security or legal compliance.

Usage analytics are deleted automatically after 60 days, whether or not your account is still active.

7. Children

Penpus is intended for university students and users aged 13 and above. We do not knowingly collect data from children under 13; if you believe a child has created an account, contact us and we will remove it.

8. Security

Data is encrypted in transit, access to production systems is restricted, and permissions inside the app are enforced server-side.

9. Changes to this policy

If we make material changes, we will update this page and note the new effective date above.

Contact & support

Questions, feedback, or a data request? Email us at support@penpus.com — we usually reply within 48 hours.