Privacy Policy

Last updated: 10 November 2026

Pennu ("Pennu", "we", "us") helps businesses and creators plan, make and publish social media posts. This policy explains what personal data we handle on trypennu.com and in the Pennu app, why, and the choices you have. Pennu is a service by Lund Awesome (sole proprietorship), org. no. 930 267 813, Sandnes, Norway, which is the controller of your personal data. We follow the EU/EEA General Data Protection Regulation (GDPR).

Questions? Email hello@trypennu.com.

What we collect

• Waitlist: your email address and the date you signed up.
• Account details: your name, email and login information when you create an account.
• Brand information: what you tell us about your brand, such as descriptions, website and channel links, voice, audience and guidelines, and the public pages you ask us to read.
• Your content: media you upload (videos, images, music), drafts, captions and the posts Pennu creates for you.
• Connected accounts: when you connect Instagram, YouTube or TikTok, we store the access tokens the platform gives us, your account or channel ID and name, and the results of posts we publish for you (post IDs and links).
• Usage and technical data: logs of what the service did (for example generations and publishing attempts), error reports, and basic device and browser information needed to run and secure the service.

How we use it

• To provide the service: draft ideas and captions, create and edit media, and publish the posts you schedule.
• To contact you about the waitlist, your account and important changes.
• To keep Pennu secure, prevent abuse and fix problems.
• To improve Pennu, using aggregated usage information.

We do not sell your personal data, and we do not use your content to train AI models. Our legal bases are performing our contract with you, our legitimate interest in running and securing the service, and your consent where we ask for it (for example the waitlist).

Service providers

We share data only with providers that help us run Pennu, and only as much as they need:

• Cloudflare: website hosting, storage of media files, and the waitlist.
• Anthropic: AI that drafts ideas, captions, brand profiles and edit plans from the information you provide.
• AI image, video and voice providers: create media from the prompts and references for your posts.
• Pixabay: free stock media you choose to use.
• Meta (Instagram), Google (YouTube) and TikTok: receive the posts you publish to them, through their official APIs.
• Payment provider: processes payments once paid plans launch. We never see your full card details.

Some providers are outside the EEA. Where that is the case we rely on adequacy decisions or the EU Standard Contractual Clauses.

YouTube

Pennu uses YouTube API Services. When you connect a YouTube channel, Pennu can see the channel's name and ID and upload the videos you schedule to it. Pennu does not access your other YouTube data. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy.

You can disconnect YouTube in Pennu at any time, or revoke Pennu's access in your Google security settings. When you disconnect, we delete the stored tokens right away.

TikTok and Instagram

When you connect TikTok, Pennu can read your basic profile and posting options and publish the videos you schedule. When you connect Instagram, Pennu can publish the posts you schedule to that account. You can disconnect in Pennu at any time, or remove Pennu's access in TikTok (Settings and privacy → Security → Manage app permissions) or Instagram/Meta settings. We delete stored tokens when you disconnect.

How long we keep data

• Waitlist emails: until early access opens and you've had a chance to join, or until you ask us to remove you.
• Account data and content: while your account is active. When you delete your account, we delete your data within 30 days, except where the law requires us to keep it (for example invoices).
• Logs: up to 12 months.

Your rights

You can ask to see, correct, export or delete your personal data, and you can object to or restrict how we use it. Email hello@trypennu.com. If you're unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority where you live.

Cookies

The website uses no tracking or advertising cookies. The Pennu app uses essential cookies to keep you signed in and to complete sign-ins with Instagram, YouTube and TikTok securely.

Children

Pennu is meant for businesses and creators aged 18 and over, and is not directed at children.

Changes

We'll update this page when our practices change, and tell you by email about important changes.