Privacy Policy
Effective date: May 1, 2026. Last updated: May 1, 2026.
This Privacy Policy explains how Outlane, Inc. (“Outlane”, “we”, “us”, or “our”) handles information when you use the PDF Translator iOS application (the “App”) and its supporting backend at pdftranslator-server.vercel.app (the “Service”). It is written to comply with Apple App Store Review Guideline 5.1.1, the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the U.S. Children’s Online Privacy Protection Act (COPPA).
1. Who we are
Outlane, Inc. is a Delaware corporation. For privacy questions or to exercise the rights described below, contact us at hi@outlanegames.com.
2. Information the App processes
The App is designed to keep your documents private. We do not require an account, and we do not collect names, email addresses, phone numbers, advertising identifiers (IDFA), location, contacts, photos, microphone or camera data, or any cross-app tracking signals.
When you use the App, the following information is processed:
- PDF files you open in the App.The App reads PDFs you choose with the iOS file picker or open from another app. The file is copied into the App’s private sandbox at
Documents/Importsso you can re-open it from the “Recents” list. The original file never leaves your device. - Text extracted from those PDFs.The App extracts text either from the PDF’s embedded text layer or, for scanned pages, by running on-device optical character recognition (OCR) with Apple’s Vision framework.
- Your translation preferences. Source/target language, choice of translation engine, and a count of how many documents you have translated. These are stored only on your device via iOS
UserDefaults. - Translated documents.Saved to your App’s private sandbox at
Documents/Translationsuntil you export or delete them.
3. How translations work
The App offers two translation engines that you can choose between:
- Apple Translation (default, on-device).Translation runs entirely on your iPhone or iPad using Apple’s Translation framework. No text leaves your device.
- OpenAI (optional).When you select the OpenAI engine, the App sends the text segments extracted from your PDF (not the original PDF binary, and no file metadata) over HTTPS to our backend Service. The Service forwards those segments to OpenAI’s Chat Completions API for translation and returns the translated text to your device.
We do not store your PDFs, the extracted text, or the translated text on the Service. Requests are processed in memory and discarded after a response is returned. We do not log request or response bodies.
4. Sub-processors
We rely on the following third parties to operate the Service. Their processing is governed by their own terms and policies.
- OpenAI, OpenAI L.L.C.Receives the text segments you choose to translate via the OpenAI engine. Per OpenAI’s API data-usage policy, content submitted through the API is notused to train OpenAI’s models and is retained by OpenAI for a limited period (currently up to 30 days) for abuse and misuse monitoring before being deleted.
- Vercel Inc.Hosts the Service’s serverless functions and static pages. Vercel processes standard request metadata (IP address, user-agent, timestamps) for delivery and infrastructure security.
- Upstash, Inc. Provides a Redis store used to keep short-lived rate-limit counters keyed by IP address.
5. Server-side logs and rate limiting
When the App calls the Service, our hosting provider may transiently record the calling IP address and a request timestamp for delivery, rate limiting, and abuse prevention. We use a sliding-window rate limit of 20 requests per minute per IP, stored in Upstash for at most 60 seconds. We do not place cookies on your browser, do not operate analytics, and do not run any advertising or tracking technologies.
6. Legal bases (GDPR)
For users in the European Economic Area, the United Kingdom, and Switzerland, the legal bases for our processing are:
- Performance of a contract (Art. 6(1)(b) GDPR) — to deliver the translation feature you requested.
- Legitimate interests (Art. 6(1)(f) GDPR) — to keep the Service secure and prevent abuse via rate limiting.
7. International data transfers
Outlane, Inc. and our sub-processors are based in the United States. If you use the OpenAI engine from outside the U.S., your text segments will be transferred to and processed in the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses and equivalent UK/Swiss mechanisms.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of, or receive a portable copy of your personal data, and the right to lodge a complaint with a supervisory authority.
Because we do not maintain accounts and we do not retain the text you translate, there is generally nothing for us to look up, export or delete on the Service. To exercise any right, email hi@outlanegames.com. To delete on-device data, uninstall the App or use Settings → iPhone Storage → PDF Translator → Delete App.
9. California (CCPA/CPRA) disclosures
In the past 12 months we have not sold or shared personal information, and we do not engage in “sale” or “sharing” as those terms are defined under the CCPA. We do not use sensitive personal information for any purpose other than as permitted by Cal. Civ. Code §1798.121(a). California residents have the right to know, delete, correct, and to limit the use of sensitive personal information. To exercise these rights, contact us at hi@outlanegames.com.
10. Children
The App is not directed to children under 13 (or under 16 in the EEA and UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please email hi@outlanegames.com and we will delete it.
11. Security
Traffic between the App, our Service, and our sub-processors uses TLS/HTTPS. The App authenticates to our Service with a shared secret. We take commercially reasonable steps to protect your information, but no method of electronic transmission or storage is 100% secure.
12. Do Not Track
We do not track our users across third-party websites or applications, so we do not respond differently to “Do Not Track” signals.
13. Changes
We may update this Privacy Policy from time to time. The updated version will be indicated by a new “Last updated” date and will be effective as soon as it is published at this URL. Material changes will be highlighted in-app or via a release note.
14. Contact
Outlane, Inc.
Email: hi@outlanegames.com