Privacy Policy
Perpenda — an Android learning app for product professionals. Last updated: 1 June 2026.
This policy explains what data Perpenda collects, how it is used and shared, and how you can delete it. Questions: hello@perpenda.com.
What we collect
| Data | Why |
|---|---|
| Email address | Account identity and sign-in. |
| Password (stored only as a bcrypt hash, never in plain text) | Authentication. |
| Display name | Shown in the app. |
| Learning activity — unit completions, grades, spaced-review schedule | To track and pace your progress. |
| The free-text answers you submit for grading | To grade your answer against the unit's rubric (see "AI grading" below). |
The Perpenda app contains no advertising SDKs, no behavioural analytics, and does not collect location, contacts, or advertising identifiers. It does include a crash-reporting SDK (Sentry) so we can fix bugs — see "Crash diagnostics" below for exactly what those reports contain. (For the perpenda.com website, see "This website" below.)
AI grading (third-party processing)
When you submit an answer for grading, that answer text and the relevant unit's rubric are sent to Anthropic (the Claude API) to generate the grade and feedback. Anthropic processes this data as our service provider. We do not send your email, password, or identity to Anthropic — only the answer text needed to grade it.
This website (perpenda.com)
The Perpenda website is separate from the app. It uses Google Analytics 4 to measure aggregate traffic (pages viewed, referrers, approximate country), which sets a small set of cookies. We do not run advertising tags, fingerprinting scripts, session-replay tools, or any form of cross-site tracking. The Android app itself remains free of analytics SDKs.
Crash diagnostics (app)
The Android app uses Sentry to report crashes and uncaught exceptions, hosted in Sentry's EU region. Reports contain the stack trace, Android version, device model, app version, and a coarse locale — enough to diagnose the crash. We deliberately do not attach personal information (email, sign-in token, decision-prompt answers, or grades) to crash reports. Reports are only sent from release builds, not debug. The website is unaffected.
Update checks (app)
On launch the app fetches a small JSON manifest from perpenda.com/latest.json to see whether a newer version is available. The request contains no personal data — it's a plain HTTPS GET to a static file. The website's host records the request's IP address and user-agent in its standard access logs, as it does for any visitor to the site.
How your data is stored and shared
- Hosting: the backend and database run on Railway; data is transmitted over HTTPS only.
- On your device: your sign-in token is stored in Android's encrypted storage.
- Service providers only: Anthropic (AI grading, app), Railway (hosting, app + backend), Sentry (crash diagnostics, app), and Google LLC (Google Analytics 4, website only — see "This website" above). We do not sell your data or share it for advertising.
Data retention and deletion
We keep your data while your account exists. You can delete your account and all associated data at any time — in the app (Settings → Delete account) or by request. See the Account & Data Deletion page. Deletion is permanent; residual copies in encrypted backups are purged on the normal rotation cycle (within 30 days).
Children
Perpenda is intended for adult product professionals and is not directed to children under 13. We do not knowingly collect data from children.
Changes
We may update this policy; material changes will be reflected by the "last updated" date above.