Short version: Penflow collects as little as possible. No trackers. No ad networks. No selling your data to anyone.
Here is what that means in practice.
When you visit penflow.dev
Nothing beyond the standard server logs kept by our hosting provider (Railway). No ad pixels. No manuscript tracking. Account and billing pages may use cookies only to keep you signed in.
When you join the waitlist
You give us your email address. That email goes to two places:
- Our mailing list on Resend, stored in the Penflow Waitlist audience. Resend is the service that sends Penflow emails.
- A confirmation email back to you, also sent through Resend.
We use your email only to send news about Penflow. You can unsubscribe any time using the link at the bottom of any Penflow email, or by replying and asking. Unsubscribing removes your email from Resend.
When you use Penflow (the app)
Penflow is in private beta. Here is how your writing moves through the system.
- On your device. The editor writes every keystroke to local project files on your computer. The desktop app uses those files as the source of truth.
- On your GitHub, if you turn it on. Optional GitHub backup pushes your project files to a private repo under your own GitHub account. Your local project folder stays the source of truth.
- AI requests. If you turn on the AI reader, every request goes directly from the app to OpenRouter using your own API key. Penflow does not proxy these requests and does not see your prompts or the responses.
What we do not do
- We do not sell your data. To anyone. For any reason.
- We do not run ad networks, retargeting pixels, or advertising trackers of any kind.
- We do not read your manuscript.
- We do not train AI on your work. Your words only reach an AI model if you personally send them through the AI reader using your own key.
How to delete your data
- Waitlist only: unsubscribe through any Penflow email, or reply and ask to be removed.
- App account: email [email protected] and we will delete account records we hold. Local files on your computer stay under your control.
- All of it: unsubscribe and ask us to delete any account records we hold.
Service providers we rely on
Penflow uses these third parties to operate. Each has its own privacy policy.
- Railway (website hosting)
- Resend (waitlist and transactional emails)
- GitHub (optional backup, only when you authorize it)
- OpenRouter (AI requests, only when you enable AI and provide your own key)
Children
Penflow is not designed for children under 13 and we do not knowingly collect information from them. If you believe a child has signed up, email us and we will remove the data.
Changes
If this policy changes, we update the "Last updated" date at the top. Meaningful changes also get an email to the waitlist and to active users.
Contact
Questions, concerns, or deletion requests: [email protected].