The PenaReports application ("Software"), provided by Gürbüz Uğurgül ("Application Owner"), is committed to maximizing user privacy. This Privacy Policy outlines how the Software handles (or does not handle) your personal data.

1. Commitment to Non-Collection (Core Principle of the Application)

PenaReports is primarily designed to protect the privacy of its users and is not a user data collection tool.

As the Application Owner, We Do Not Collect, Store, or Process the Following User Data:

• Personal Data: We do not collect any personally identifiable information (PII) such as your name, email address, or location, unless explicitly provided by the user (e.g., via support email).
• User Content: All reports, processed data, data sources, and report outputs created using the Software are stored strictly locally and only on your device. The Application Owner cannot access this content.
• Usage Data (Analytics): We do not use third-party analytics services for application usage or crash reporting.

2. Data Processed via Licensor's API (apinews.penareports.com)

The Software connects to the Application Owner's API (`apinews.penareports.com`) solely for the purpose of retrieving application development news, updates, or static notification data. This is a one-way communication (server to user) and **does not process active user queries or PII**.

• Data Collected: Since this connection involves an internet server request, the server automatically collects standard access log data required for security and maintenance, which may include the **IP address** of the request and the **timestamp**.
• Processing by Third-Party Host: Please note that this API is hosted via a third-party hosting service provider. Therefore, the Application Owner and the hosting provider may process these standard server log data for the purposes of server security and operation.
• Purpose: This limited data is used solely for security, debugging, traffic monitoring, and abuse prevention. This log data is retained only for necessary maintenance periods.

3. Secure Management of Credentials

PenaReports manages user credentials (passwords, API keys, etc.) required to connect to external services (DB, etc.). These sensitive credentials are securely encrypted using the Windows operating system's built-in security mechanism, the Windows Credential Manager, and are stored only on your local computer. Credentials are **not designed to be stored in plain text. The Application Owner does not have the capability to access, view, or copy these encrypted credentials.

4. Other Third-Party External Connections

If the Software allows connection to other external services (not controlled by the Application Owner, such as a corporate database), the User establishes the connection directly.

• The use of these third-party services is subject to their respective Privacy Policies and Terms of Service. As the Application Owner, we are not responsible for the data practices or privacy policies of these external services.

5. Data Collected by Microsoft Store

PenaReports is distributed via the Microsoft Store. Microsoft, as the platform provider, may collect certain data, such as:

• Transaction Data: Your purchase history and licensing information.
• Performance Data: General performance data and crash reports indicating that the application is running correctly on your device.

This data collection is subject to Microsoft’s Privacy Statement, and we, as the Application Owner, do not individually control this data.

6. Children's Privacy

PenaReports does not knowingly collect personal information from children under the age of 13. The application is intended for general business and reporting purposes.

7. Data Security and User Responsibility

The application ensures the highest level of data privacy by keeping your core data local. However, the security and backup of your local data are entirely the responsibility of the User:

• The security, backup, and protection of your device against unauthorized access are entirely your responsibility.
• Data loss (due to device failure, accidental deletion, etc.) is not the responsibility of the Application Owner.

8. Changes to the Policy

We may update this Privacy Policy from time to time. The new policy will become effective when published on this page. If we make a material change, we will attempt to notify you through the Software or the Microsoft Store.

9. Contact

If you have any questions regarding this Privacy Policy or data handling, please contact us:

Application Owner: Gürbüz Uğurgül
Email: info@penareports.com