How Penova handles your data.
Short answer: it doesn't.

What we collect

From the apps: nothing. Penova for Mac and iPhone makes no analytics calls, registers no telemetry, and ships no third-party SDKs. The only outbound network request from the Mac app is Sparkle's daily check against penova.pages.dev/appcast.xml for new versions — a small XML file fetch that doesn't carry any identifier from your machine.

From this website: Cloudflare Web Analytics records anonymous, aggregated traffic stats — page views, country (city level), referrer, browser type. No cookies, no individual visitor tracking, no IP retention. Cloudflare's privacy policy covers the details.

What we don't collect

• The contents of your scripts
• The names of your characters or projects
• Any voice recording or transcript from Quick Capture
• Your contacts, calendar, photos, or any device data
• Your real name (unless you sign in with Apple, in which case Apple gives us only what you choose to share — and that's stored locally on your device anyway)
• Your IP address, beyond Cloudflare's anonymous aggregate counts

What runs on-device

Speech recognition for Quick Capture uses Apple's on-device speech framework when your iPhone supports it (iPhone 11 and later for English; varies for other languages). When on-device isn't available the system may fall back to Apple's servers — Penova doesn't see either path; iOS handles the recognition and returns text directly to the app.

Sign in with Apple, when used, completes entirely on your device. The Apple-issued credential is stored in your local Keychain. We never see your real Apple ID; we receive only the private relay email or full email you choose to share, and even that only persists in your local SwiftData store.

App Store privacy disclosures

Both Penova for iPhone and Penova for Mac ship a PrivacyInfo.xcprivacy manifest declaring zero tracking and zero data collection, with required-reason codes for the four standard APIs Apple asks about: UserDefaults (CA92.1), file timestamps (C617.1), disk space (E174.1), and system boot time (35F9.1). Apple's notary service has signed off on this.

Third-party services

Two services touch this site:

• Cloudflare Pages hosts the static files at penova.pages.dev. Cloudflare logs request metadata (IP, time, URL) for security and abuse prevention; they don't share that with us beyond aggregate counts.
• Cloudflare Web Analytics reports the anonymous traffic stats described above. No cookies are set.

The shipped apps don't depend on either; they only contact Sparkle's appcast at this domain for update checks.

Children

Penova is suitable for users 13 and up. We don't knowingly collect data from children — we don't knowingly collect data from anyone — but we don't market the app to children either.

Changes to this policy

If anything material changes (e.g., we add cloud sync as a paid tier and you opt in), we'll update this page and date the change below. Existing users keep the offline experience unchanged.

Contact

Questions about your data, this policy, or anything else — email rudra.ptp.singh@gmail.com or call / WhatsApp +91 99563 40651.

Last updated 1 May 2026.