Privacy Policy

Penchant ("the app," "we," "us") is operated by Qube Industries LLC. This policy explains what we collect, how we use it, and the choices you have. Questions: penchant@qube-ind.com.

What we collect

• Account information: your email address and a password (stored securely hashed; we never see your password).
• Your writing: the entries you write, the lines you star ("seeds"), your prompt and place selections, session length and dates, and your settings.
• Prompt suggestions: if you submit a word or place suggestion, we store it with your account.

We use first-party product analytics to understand how Penchant is used. We do not track you across other apps or websites, use advertising, or sell your data — ever.

How your writing is used

Your writing is private to your account. It is stored so you can read, search, and export it. It never appears on shareable images (share cards show only the prompt, minutes, and word counts) and is never sold or used to train anyone's models. Your writing leaves the app in only two cases, both started by you:

1. Export — you download your own entries as a file.
2. The Coach — if you tap the optional "coach" on an entry, that entry's text is sent to our AI provider to generate a few reflective questions, then returned to you. The Coach is off unless you turn it on, and only runs when you ask.

Third parties we rely on (sub-processors)

• Supabase — database, authentication, and secure storage.
• Lovable — application hosting and the AI gateway that powers the Coach.
• Google (Gemini) — the AI model, accessed through Lovable's gateway, that generates Coach questions from text you explicitly submit.
• Datamuse — the "word well" explorer. When you look up a word, only that single word is sent; no account information or writing is included.

These providers process data on our behalf under their own terms and security practices.

Where data is stored and security

Data is transmitted over encrypted connections (HTTPS) and stored in Supabase with row-level security, so your entries are accessible only to your account. Passwords are hashed by Supabase; we never store or see them in plain text. Offline, a copy of your recent entries and settings is cached on your device so the app works without a connection.

Analytics

We use first-party product analytics (PostHog) to see how Penchant is used — usage events and metadata only (which screens and actions, counts, timings, the public daily word), never your writing, and never shared with advertisers or used to train models. In the EU/UK this is off until you accept the cookie banner; elsewhere you can opt out from the banner or via the "Cookie preferences" link in the footer. In the app, opt out anytime in Settings → Privacy.

Your choices and rights

• Export everything, anytime, from Settings.
• Delete your account and all associated data (entries, seeds, settings, suggestions) from Settings — this is permanent and cannot be undone.
• Access or correct your information by emailing penchant@qube-ind.com.

Depending on where you live (for example, the EEA or UK under GDPR, or California under CCPA/CPRA), you may have additional rights to access, correct, delete, or port your data and to object to certain processing. Email us to exercise them.

Children

Penchant is not directed to children under 13, and we do not knowingly collect information from them.

Changes

We may update this policy; material changes will be reflected by a new effective date at the top of this page.

Contact

Qube Industries LLC — penchant@qube-ind.com