Pennilo Privacy Policy

Identity and scope

XUELONG YU is the developer. UUThings (有物) is the product brand, not a separate company; Lumax is one of its product lines. “We” refers to XUELONG YU. This page includes only provisions relevant to the app named in its title.

How Pennilo handles your data

Quick capture processes images locally with Apple Vision. It does not automatically save or upload the input image. Unfinished extracted drafts stay on this device outside backups and sync and can be deleted. Saved records retain hashed capture identifiers for duplicate detection. No cloud AI service is included.

Pennilo stores the records, account nicknames, notes, tags, confirmed places and imported photos you enter on this device. It does not connect to banks or request complete card numbers, passwords or CVV.

The app has no advertising, tracking or third-party analytics SDK. Financial content is not sent to a developer-operated server or ordinary diagnostic log.

With Pro, if you enable automatic iCloud sync, selected data is sent to your private CloudKit database under your Apple account. Record-only mode does not upload photo files or thumbnails from this device. Earlier cloud uploads are retained until you separately delete them. Apple provides the cloud service; protections depend on your device and iCloud security settings.

Map searches and map display use Apple services. Location is requested only when you ask for a current-place suggestion; no background location history is collected. You confirm any saved place. Imported image metadata is not used to create a place.

Photo selection uses Apple's system picker. Camera and Face ID access are requested when used. Re-encoded imported photos strip original metadata. Device authentication and file protection depend on system configuration. App content is obscured when inactive; screenshots you deliberately take remain your responsibility.

StoreKit processes purchases through Apple. The app uses verified transaction information to determine access. Full backups exclude purchases, authorization, tokens and device sync cursors. Exports can include precise places and photos; share carefully. System device backup is separate from app sync.

You can view, export, restore and delete data even after the trial. This device’s Trash can be permanently emptied. Minimal deletion markers are retained to prevent records from reappearing. Clearing the device and deleting the entire cloud space are separate actions. Deleting individual records or books propagates while sync is enabled, even without Pro. Emptying this device’s Trash does not immediately purge other devices’ recoverable copies. Cloud deletions may wait for a connection. Copies you shared or placed in system backups are outside this app's control.

When trial or Pro access ends, an already enabled and linked iCloud connection continues to read cloud records, which may include amounts, notes and places, to check deletion relationships and conflicts and exchange deletions and necessary photo-reference removals. It does not upload ordinary edits or new photos through this channel. Turning sync off stops this channel.

Before replacing current data from a backup, the app saves one recovery copy of the current records and photos on this device. Creating the next pre-restore copy replaces the previous one. This copy uses system file protection, not the exported backup password, and the app does not automatically sync it to iCloud. Clearing all local data removes it; copies in system backups or files you exported are managed separately.

Pennilo · Email

If you email the developer, including support emails sent from the app, the developer and the email service providers used receive the address, message and attachments you send to answer your question, troubleshoot and meet applicable obligations. Do not send passwords, full card information or an unprotected financial backup.

Your choices, rights, and security

For website or support information held by the developer, you may ask for access, correction, or deletion by emailing support@uuthings.com. Available rights depend on applicable law. The developer uses reasonable safeguards for information received, but no storage or transmission method can be guaranteed completely secure. Service providers may process information in the locations where they operate, subject to their policies and applicable law.

Changes and contact

Material changes to the relevant data practices or services will be documented on the corresponding policy page with their revision date.

Privacy and product-support questions: support@uuthings.com.