Privacy policy
Quick capture processes images locally with Apple Vision. It does not automatically save or upload the input image. Unfinished extracted drafts stay on this device outside backups and sync and can be deleted. Saved records retain hashed capture identifiers for duplicate detection. No cloud AI service is included.
Pennilo stores the records, account nicknames, notes, tags, confirmed places and imported photos you enter on this device. It does not connect to banks or request complete card numbers, passwords or CVV.
The app has no advertising, tracking or third-party analytics SDK. Financial content is not sent to a developer-operated server or ordinary diagnostic log.
With Pro, if you enable automatic iCloud sync, selected data is sent to your private CloudKit database under your Apple account. Record-only mode does not upload photo files or thumbnails from this device. Earlier cloud uploads are retained until you separately delete them. Apple provides the cloud service; protections depend on your device and iCloud security settings.
Map searches and map display use Apple services. Location is requested only when you ask for a current-place suggestion; no background location history is collected. You confirm any saved place. Imported image metadata is not used to create a place.
Photo selection uses Apple's system picker. Camera and Face ID access are requested when used. Re-encoded imported photos strip original metadata. Device authentication and file protection depend on system configuration. App content is obscured when inactive; screenshots you deliberately take remain your responsibility.
StoreKit processes purchases through Apple. The app uses verified transaction information to determine access. Full backups exclude purchases, authorization, tokens and device sync cursors. Exports can include precise places and photos; share carefully. System device backup is separate from app sync.
You can view, export, restore and delete data even after the trial. This device’s Trash can be permanently emptied. Minimal deletion markers are retained to prevent records from reappearing. Clearing the device and deleting the entire cloud space are separate actions. Deleting individual records or books propagates while sync is enabled, even without Pro. Emptying this device’s Trash does not immediately purge other devices’ recoverable copies. Cloud deletions may wait for a connection. Copies you shared or placed in system backups are outside this app's control.
When trial or Pro access ends, an already enabled and linked iCloud connection continues to read cloud records, which may include amounts, notes and places, to check deletion relationships and conflicts and exchange deletions and necessary photo-reference removals. It does not upload ordinary edits or new photos through this channel. Turning sync off stops this channel.
Before replacing current data from a backup, the app saves one recovery copy of the current records and photos on this device. Creating the next pre-restore copy replaces the previous one. This copy uses system file protection, not the exported backup password, and the app does not automatically sync it to iCloud. Clearing all local data removes it; copies in system backups or files you exported are managed separately.
The operator, contact details and online policy are listed in Contact & policies on this page. Contact support for questions about your data.
Visiting this website
This website uses Cloudflare to serve static pages.
When you visit the hosted website, Cloudflare may process your IP address, request URL and time, browser and device request headers, and operational or security logs to deliver pages and protect the service. Handling and retention depend on Cloudflare’s service terms and the actual hosting configuration. Loading this website does not give the operator access to your Pennilo records or private iCloud database.
These pages contain no advertising, analytics code, sign-in or submission form. The site code does not set cookies or use browser local storage. Hosting security features may process additional technical information or use necessary cookies depending on configuration. Visiting this website still produces the technical request information described above.
When you contact support
Support emails are forwarded through Cloudflare Email Routing and received and handled using Google's Gmail. If you choose to email support, the operator and these service providers process the address, message and attachments you send to answer your question, investigate the issue or handle your data request. Provide only what is necessary. Correspondence is kept only as needed for those purposes and any applicable legal obligations. You can ask the operator about access, correction or deletion of information you supplied by email.
Your rights and requests
Contact the support email below to ask about access, correction or deletion of information handled by the operator. Depending on the law that applies to you, you may also have rights to restrict or object to processing, receive portable data, withdraw consent for processing based on consent, or complain to the competent data protection authority. Withdrawing consent does not affect processing already lawfully carried out. The operator will assess requests under applicable law and may need proportionate information to verify identity. Do not send identity documents with an initial request.
Contact & policies
- Operator
- 于学龙
- Support email
- support@lumaxspace.com
Include your app version, device model and a short description. Do not send passwords, complete card details or an unprotected financial backup.