Privacy
Policy

Penvilo LLC (“Penvilo,” “we,” “us,” or “our”) operates the Penvilo mobile application Hey Hey Hey. Hey Hey Hey is currently an invite-only pilot for sharing casual intentions with selected friends, expressing interest, and forming plans.

This policy explains what information Penvilo collects, how we use and share it, and the choices available to you. If you do not agree with this policy, do not use Hey Hey Hey.

Information we collect

Account and profile information

When you create an account, we collect your email address, authentication information, an internal account identifier, account-approval status, and the display name you choose. Password authentication is handled by our authentication provider; Penvilo does not store or have access to your plaintext password.

Social and activity information

We collect information you provide or generate while using Hey Hey Hey, including:

• friend requests, friendships, removals, and blocks;
• intentions you create, including their title, optional description, time or place hints, capacity, expiration, and the friends you select to receive them;
• expressions and withdrawals of interest;
• plan proposals, invited participants, dates, places, notes, responses, confirmations, revisions, and cancellations;
• private answers about whether a confirmed plan happened and any optional note you provide;
• notification preferences; and
• reports you submit about an account, intention, or plan, including the reason and optional details.

Hey Hey Hey does not currently offer private messaging and does not collect your address book, precise location, photos, microphone recordings, health data, payment information, or advertising identifier.

Limited product and technical information

We record a limited set of events needed to operate and evaluate the private pilot, such as account creation, friendships, intentions, interest changes, proposal responses, confirmations, cancellations, blocks, reports, and whether a hangout was reported. We do not record screen views, notification opens, contacts, precise location, or message contents.

Our infrastructure providers may automatically process technical information associated with network requests, such as IP address, request time, operating system or app version, and diagnostic or security information. We use this information to provide, secure, troubleshoot, and prevent abuse of the service.

How we use information

We use this information to create and authenticate accounts; administer the private pilot; provide profiles, friendships, intentions, planning, blocking, reporting, and deletion features; display content to the appropriate people; operate support and safety review; send a generic pending-account alert to the pilot operator; evaluate the core product experience; secure and improve Penvilo; and comply with legal obligations.

We do not use Penvilo information for targeted advertising, sell or rent personal information, or track your activity across other companies’ apps or websites.

How information is visible

Hey Hey Hey is not a public feed. Your display name can be found by another approved member who searches for that exact name, subject to blocking rules. Friend requests are visible to the sender and recipient. Intentions are visible to the friends selected when they are posted, while interest and plan details are visible only to the people who need them to use those features.

Blocking or removing a friend revokes the access described in the app, but it cannot erase information another person has already seen, copied, or captured. Reports are not shown to the person being reported. They are available to the reporter as described in the app and to the authorized Penvilo operator for safety review.

Service providers and disclosures

We use service providers to operate Penvilo. They process information to provide their services to us and are expected to protect it consistently with this policy and applicable law. Current providers include Supabase for authentication, database, server functions, and hosting, and Resend for operational email.

The new-account email sent through Resend is intentionally generic and does not contain the applicant’s email address, display name, or account identifier.

We may disclose information when required by law or valid legal process; when reasonably necessary to protect users, Penvilo, or others; with your direction or consent; or as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protection.

Retention and deletion

We retain account and product information while your account is active and as needed to provide the service. During the private pilot, limited product-event records are retained for no longer than 12 months unless deleted earlier with the related account or reasonably required for security, legal compliance, or resolving a dispute. Safety reports may be retained while they are being reviewed and for a reasonable period afterward when needed to document or respond to an incident.

You can permanently delete your account in Hey Hey Hey from Profile → Delete account. Account deletion removes your authentication account, profile, friend relationships, intentions and plans you created, participation data, private outcome answers, notification choices, associated product-event records, and reports you submitted or that identify you or your content from the active Penvilo database. It also removes you from other members’ audiences. Deletion cannot remove copies another person made outside Penvilo.

Infrastructure backups, security logs, and provider records may persist for a limited period under normal backup rotation, fraud-prevention, legal, or provider-retention processes. Deleted information is not restored to the live service except when legally required or necessary to address a security incident.

If in-app deletion is unavailable, contact ethan@penvilo.com. We may ask you to verify control of the account.

Your choices and rights

You can edit your display name and notification preferences, withdraw interest, decline proposals, remove friends, block members, and delete your account using controls in the app.

Depending on where you live, you may also have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. Email ethan@penvilo.com to make a request. We will not discriminate against you for exercising an applicable privacy right.

Security and international processing

We use administrative and technical safeguards intended to protect personal information, including authenticated access and database controls that limit information according to account and relationship. No transmission or storage system is completely secure.

Penvilo and its providers may process information in the United States and other countries where they operate. Where required, we and our providers use appropriate safeguards for international transfers.

Children

The Hey Hey Hey private pilot is intended for people age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us so we can investigate and delete the account when appropriate.

Changes to this policy

We may update this policy as Penvilo changes. We will post the updated policy with a new effective date and provide additional notice when a change is material or required by law.

Contact us

Penvilo LLC
ethan@penvilo.com