Privacy Policy

Last updated: August 2026

Penrise is a private daily journal. This page explains what data the app collects, how it's protected, and how you can delete it.

What we collect

Your email address — used only to log you in and to send account-related emails (like password resets).
Your journal entries — encrypted on your device before they're ever sent anywhere.

End-to-end encryption

Your journal entries are encrypted on your device using a key derived from your password before they're uploaded. The encryption key itself is never sent to our servers or stored anywhere outside your device's memory during a session. This means nobody — including us — can read your entries. If you forget your password and don't have your one-time recovery key, your entries cannot be recovered by anyone.

Where your data lives

Account and encrypted entry data is stored with Supabase, our backend infrastructure provider. We don't share, sell, or use your data for advertising. Supabase only ever sees encrypted ciphertext for your entries — never the plain text.

Local storage

Penrise also keeps a copy of your entries in your browser's local storage so the app works offline. This local copy stays on your device.

Your rights

Export — you can export all of your entries at any time from within the app.
Delete your data — you can permanently delete your journal data from your account settings inside the app. This immediately and permanently removes your encrypted entries from our servers.
Delete your account entirely — after deleting your data in-app, email Hellopenrise@gmail.com if you'd also like your login/email record removed completely, and it will be done promptly.

Children's privacy

Penrise is not directed at children under 13, and we do not knowingly collect data from children under 13.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions about your data or this policy? Email Hellopenrise@gmail.com.