Privacy
What Pennello knows about you
Last changed 7 November 2026. Pennello is made by Pennello Studio in Vancouver, Canada.
The web version
Needs no account and sends nothing to us. Your paintings, their pictures and any photo you paint from are kept in your browser's own storage, on your device, and go when you clear the browser's site data. The pages are served without analytics, advertising or third-party scripts. The server keeps ordinary access logs (the address a request came from, the page, the time) for up to 30 days, to run the site and keep it safe.
The apps
Paintings live on your device. An account is optional for painting; it starts the iPad's free trial and records your unlock, so a second iPad or a Mac signed in is unlocked too. For an account we keep your email address, username, a hash of your password (never the password), when the trial started, your unlock, and when you signed in and from what kind of device. We send email only to verify your address, reset your password, or answer you.
The unlock is bought through Apple; we receive a signed record of the purchase and no payment details. Apple's own privacy terms apply to the purchase.
What we don't do
We don't sell or share personal information, show advertising, or track you across other sites and apps. We don't read your paintings.
Your account, deleted
Delete your account in the app (Your account → Delete my account) or by writing to help@pennello.app. Everything is removed within 30 days; backups age out after that.
Children
Pennello is for anyone, and collects nothing beyond what's above. An account requires an email address.