Who we are
Pentake is operated by Pentake Limited, company number 17337638, registered in England and Wales, with its registered office at 45 Albemarle Street, 3rd Floor, London, England, W1S 4JL. We are the data controller for the personal information described in this policy. For privacy questions or requests, contact asma@pentake.com or write to our registered office.
What this policy covers
This policy explains how we collect, use, store and share personal information when you visit pentake.com or use the Pentake study application. The public website is an informational page; account and study features are provided through the application.
Information we collect
- Account information: your name, email address, authentication details, and optional institution, course and study preferences.
- Study content: recordings, transcripts, notes, uploaded documents and images, flashcards, quizzes, and messages you submit to the study assistant.
- Service and usage information: feature use, storage and transcription usage, study activity, device and browser information, IP addresses, and diagnostic logs.
- Support correspondence and information you send when contacting us.
- Billing and subscription information. Stripe handles payment card information; full card numbers do not reach our servers.
Sign in with Google
If you choose Sign in with Google, we receive your Google account identifier, name, email address and profile picture, together with the authentication information needed to establish your session. We use this information to create and authenticate your Pentake account, identify your account, and display your profile. Sign in with Google requests only the openid, email and profile scopes; it does not give us access to your Gmail messages, Google Drive files, contacts or calendar. Account information is stored through Supabase, our authentication and database provider. We do not sell Google account information, use it for advertising, or use it to train AI models. You can revoke Google access in your Google Account connections; revoking access does not by itself delete your Pentake account or study content. To request deletion, contact us or use the application’s account deletion feature.
Why we use your information
We use account and study information to provide the service you request, store your materials, generate study resources, manage subscriptions, and provide support. Our legal basis is performance of our contract with you. We use limited technical and security information to protect accounts, prevent abuse and diagnose problems, relying on legitimate interests. We retain accounting information where required by law. Where consent is required for an optional activity, we ask for it and you can withdraw it. Providing account information is necessary to use account features; without it we cannot create or authenticate your account.
Study content and AI processing
When you request transcription, study generation, chat or audio features, relevant content is sent to the providers needed to perform that request. This may include ElevenLabs for audio, Anthropic and Google for AI responses and study generation, and Datalab for document text extraction. This processing is separate from Sign in with Google. We do not use your study content to train our own AI models. Your study content remains linked to your account and is shared with other users only when you choose to share it.
Who receives information
Supabase provides account authentication, database and file storage. Cloudflare hosts and delivers this public website and processes request information such as IP addresses. Stripe provides billing, and Resend provides service emails. AI and document providers receive the content needed for the feature you request. We may also disclose information to professional advisers or authorities where necessary to meet legal duties, protect rights or respond to a valid legal request. We do not sell your personal information.
International processing
Providers may process information outside the UK or the country where you live. Where required, international transfers must be supported by an applicable adequacy decision or appropriate contractual safeguards. You can contact us for information about the safeguards relevant to your data.
How long we keep information
Account information is kept while your account is open. Study content is kept until you delete it or delete your account. Under the application’s normal account deletion process, access ends immediately and production account data and study content are scheduled for purge after 30 days. Backup copies expire according to the applicable backup retention cycle. Billing records may be retained to meet tax and accounting duties. Support and security information is retained for as long as needed to resolve requests, investigate abuse or meet legal obligations.
Cookies and website storage
This public website does not use analytics, advertising cookies or tracking scripts. The application uses browser storage and authentication information to keep you signed in and remember preferences. Hosting providers may process technical request information to deliver and secure the website.
Your rights
Depending on applicable law, you can request access, correction, deletion, a copy of your information, or restriction of processing. You can object to processing based on legitimate interests, including any direct marketing, and withdraw consent where processing relies on consent. Some requests are subject to legal exceptions. Contact asma@pentake.com to exercise your rights; we may need to verify that the request comes from the account holder. You can also complain to the UK Information Commissioner’s Office or your local data protection authority.
Children and policy changes
Pentake is intended for users aged 16 and over. If you believe a child under 16 has provided personal information, contact us. We may update this policy as the service changes and will communicate material changes through appropriate service channels. The date above shows when this page was last updated.