1. Who is responsible
Penn is the legal operator of the service. Privacy requests should go to support@usepenn.com. The operator is responsible for account and service-administration data. Where a business or savings group decides why and how other people’s records are used, it may act as controller and Penn as processor.
2. This website and the Penn app
This information website has no account form, advertising cookies, or analytics scripts. Its conversations use sample records, not visitors’ information, and it does not send those examples to the Claude API. When hosted, the hosting provider may process connection information such as IP address, request time, and browser details to deliver and protect the site.
The app has a separate sign-in and record-keeping experience. The remaining sections describe the processing planned for the app, which is currently in development.
3. Information the app processes
Penn is for people aged 18 and above. It is not intended for children under 18.
- Account information: your name, verified email, authentication information, preferences, and any profile details you choose to supply. If you use Google or Apple sign-in, relevant identity information is provided by that service.
- Your content: messages, voice notes, images, uploaded files, and records such as sales, expenses, stock, debts, orders, bookings, and group contributions or payouts.
- Other people’s details: customer, staff, and group-member information included in your records, such as names, contact information, and transaction history.
- Documents and support: generated invoices, receipts, reports, exports, and information you send with support requests.
- Service information: device and connection details, sessions, activity and audit records, errors, notification subscriptions, usage counters, and subscription status or payment references.
Penn does not need a BVN, government ID, or bank details at signup. Bank details you later choose to display on invoices are record content; Penn does not use them to move money. Subscription payments are handled by the payment provider, rather than by asking you to put card details in chat.
4. Why information is used
Information is used to authenticate users, keep records, answer requests, generate documents, enforce permissions and plan limits, deliver chosen notifications, provide support, maintain security, and meet legal obligations. Information from voice notes, images, and files is intended to be shown to you for confirmation before recording.
Where applicable, processing may rely on performing a contract, compliance with law, consent for optional activities, or legitimate interests such as securing the service, subject to the required assessment. Penn is intended to assist record-keeping, not make automated decisions about people’s eligibility for credit, employment, or other significant opportunities.
5. Claude: development and app processing
Building Penn: Claude is used to assist with software development. This is distinct from processing your app requests. Claude development tools and the Claude API have their own applicable terms and settings. This notice does not authorise copying production user records into development chats.
Using Penn: the app uses Anthropic’s Claude API to interpret requests and create responses or documents. Relevant messages, conversation context, images or extracted content, and records needed for a request may be sent to Anthropic. This can include personal or financial information you supply. Processing happens on provider systems, not solely on your device.
Anthropic states that commercial API data is not used for model training by default; exceptions include explicitly submitted feedback or opting into training programmes. See Anthropic’s commercial model-training policy.
Anthropic describes standard API input/output deletion within 30 days, subject to exceptions including longer-lived services, different agreements, usage-policy enforcement, and legal requirements. This is Anthropic’s retention policy, not a promise that Penn’s stored records disappear after 30 days. This notice does not promise zero data retention by providers. See Anthropic’s retention policy.
6. Other providers and disclosures
The documented app design also includes OpenAI for voice transcription, Cloudflare for hosting, media storage and document rendering, Railway for backend hosting and database services, Paystack for subscriptions, Zoho for email delivery, and Sentry for error monitoring. These providers receive information needed for their functions: for example, an audio recording for transcription or document content for rendering.
Authorised people you invite may access records according to their permissions. Penn does not message customers or group members; you decide when to share a generated document through your device. Data may also be disclosed where legally required or necessary to protect rights and security, with appropriate safeguards.
7. Processing outside your country
Provider systems may process information outside Nigeria or your country of residence. No Nigeria-only storage promise is made. Questions about provider processing can be sent to support@usepenn.com.
8. Storage, security, and retention
The intended protections include access controls, separate business/personal/group records, secure connections, account verification, and optional device-based app lock. Device biometrics are handled by the device authenticator rather than being supplied to Penn as fingerprint or face images. No system can guarantee absolute security.
The app may store essential preferences and unsent message text on your device so a queued message can be sent when connectivity returns. Server-side records, conversation history, files, audit data, and provider copies have different retention requirements.
Penn keeps your records for as long as you need them, until you choose to delete them. You can request deletion of individual records or your full account, subject to verification of your authority over those records. A plan expiry or downgrade does not automatically delete your records. Full-history export is available on every plan. Limits on conversational history do not mean older records are deleted. The documented full-account deletion process is owner-initiated, requires identity verification, offers a full export first, and includes a reversible seven-day grace period before permanent purge. This user-controlled retention policy applies to your records; it does not set indefinite retention for operational logs or provider copies. Their retention and backup-deletion schedules are separate. Information required by law may be retained only for as long as that requirement applies.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy of your personal information, and withdraw consent where processing depends on it. A request may require proportionate identity verification. Where another business or group controls a record about you, the request may need to be coordinated with that controller.
You may also raise a complaint with the relevant data-protection authority. In Nigeria, this is the Nigeria Data Protection Commission. Send requests to support@usepenn.com.
10. Updates and contact
Material changes will be explained and this notice dated when adopted or updated. New optional uses requiring consent will be presented separately. Send questions to support@usepenn.com.