Skip to content
Penjo App TRY PENJO FREE

Privacy Policy

Effective Date: 16.05.2026

Penjo requests system permissions only when you use a feature that needs them:

  • Calendar: to show your Apple Calendar events on a day sheet, or to add and edit events.
  • Location: to add or edit a calendar event with a location, or to add and edit a map card.
  • Contacts: to show the participants of an Apple Calendar event you opened.
  • Photos: to insert images into a day sheet from your Photos library.
  • Files (disk access): to export a PDF to a folder you select.

If you don't use these features, Penjo does not access the corresponding information. When you do, that information is used only for the current session and stored locally in the application's folder. Penjo does not transmit it off your device.

Diagnostics Information

If you opt in to sharing diagnostics information, we collect crash reports to fix issues and improve app performance. The crash information is not associated with any identity.

Anonymous Analytics

Penjo, starting from version 2.9.10 (except the visionOS app), may collect non-personal usage data to improve the experience, detect glitches, and develop new features. You can opt out at any time from the main settings window. Penjo uses Google Firebase Analytics to record the following kinds of events:

  • Screen views and app state: screen view counts, status when a journal is called from a widget, setting a journal as the favorite widget (without which journal), bookmarking a sheet (only the bookmark color), whether the user has purchased a version, whether a review request is shown.
  • Authorization and sync: enabling iCloud, global authorization, journal-based authorization.
  • Navigation and interaction: long press for navigation, back-and-forth button, swipe navigation, context menu, selection, switching to a custom tool picker, copy/move sheets, setting the default font.
  • Content events (without content): adding journals (without names), shapes, text boxes (without content), images (without content), map cards (without location), text box added normally or via double-click, drag-and-drop of text or images (without details), the type of image generation chosen (drawing, text, image, or from the dialog), an image effect being performed, opening a URL (without the URL), content added via the Apple Journaling Suggestions Picker (without content info), and adding a new multi-sheet or using the multi-sheet switcher.
  • Calendar and reminders: a new event being created (without event details), an event list added to a day sheet (without event details), a reminder list added to a day sheet (without reminder details), setting reminders (without configurations).
  • Export and purchase clicks: clicks on Export to PDF buttons and on purchase buttons.
  • Import / export: importing or exporting a .penjo file, and whether one or multiple notes were involved.
  • Non-identifying device metadata: OS version, device model, language, and non-granular location.

Penjo has disabled the advertising identifier (IDFA), so these events cannot be linked to your advertising profile or any identity we control. We do not receive demographic information such as age, gender, or precise location.

Firebase Analytics is governed by Google's Privacy Policy.

iCloud Sync

As an optional feature, the user may sync their journals and related data to their private iCloud. iCloud is governed by Apple's Terms of Use and Privacy Policy.

Text Recognition

Starting with version 3.0, Penjo has an on-device text recognition feature. Text recognition processing is performed completely on the user's device and no data is transferred to any external server or device for processing.

Apple Intelligence

Penjo integrates Apple Intelligence tools, specifically Writing Tools and Image Playground, available on supported devices and in supported regions. Users can activate and use Writing Tools within text boxes, or generate images in their journals using drawings, images, or text inputs.

All data processed by Writing Tools and Image Playground is handled on the user's device whenever possible. In cases requiring more comprehensive processing, the data is securely transmitted to Apple's Private Cloud Compute servers for further processing. This process is managed entirely by Apple, and all data handling is subject to Apple's privacy policies. For more details on how Apple processes data, please refer to Apple's Privacy Policy.

Penjo does not collect the content of your journals. Your handwriting, text, drawings, images, map cards, locations, and calendar references stay on your device, plus your private iCloud if you enable iCloud Sync. We do not store, transmit, or sell journal content. The anonymous analytics described above record only that an action happened, never what you wrote, drew, or inserted. For iCloud Sync, Apple Intelligence, and Firebase Analytics, the third-party policies linked above apply.

Further Information

For further information contact info@penjoapp.com