Privacy Policy
What Ponte does on your device
Ponte imports, scans, restores, reflows, reads and exports documents on your device. Product analytics are bounded, content-free counters stored on your device. Ponte has no advertising or third-party tracking SDK.
Cloud translation
When you explicitly accept the disclosure and use Cloud Translate, selected text is sent through Ponte's service hosted by Railway to Anthropic (Claude) solely to perform that translation. “Explain this passage” sends the selected passage and the context shown to you. Ponte does not use this content for advertising, profiling, or its own model training.
Foreground requests are processed in memory without a retained database copy. If you explicitly enable background translation, Ponte stores encrypted source text and results in PostgreSQL for up to 24 hours from submission, to continue while your device is offline and recover interrupted work. The active job copy is deleted sooner after successful download or cancellation. Document content is never written to application logs. Anthropic processes this content under its commercial API terms. Its standard API retention is up to 30 days for safety and security, with exceptions under its policies, such as legal requirements or abuse investigations. This provider retention is separate from Ponte's foreground processing and optional background-job retention. API content is not used to train Anthropic models by default.
Purchases and credits
Credit packs are consumable in-app purchases processed by Apple. Ponte never receives your card or bank details. The service stores the verified StoreKit transaction identifier, product identifier, a random device account identifier, the authoritative credit balance, job-cost totals, and content-free retry markers. This information is used for app functionality, fraud prevention, and purchase support.
There is no Ponte login in version 1.0. The random account identifier is stored in this device's Keychain. Unused credits do not automatically transfer to a replacement device and Apple's Restore Purchases flow does not restore consumable credits.
Subprocessors
Apple provides app distribution and in-app purchases. Railway provides Ponte's service and PostgreSQL infrastructure. Anthropic provides the requested cloud translation and explanation processing.
Retention and deletion
Document content is not retained for foreground requests. Optional background-job content is encrypted and removed from the active database after download, cancellation, or its 24-hour expiry. Infrastructure backups follow the hosting provider’s backup lifecycle. Purchase and credit-ledger records are retained for the life of the associated device account and as needed for accounting, fraud prevention, disputes, and legal obligations. To request access or deletion, email legal@readponte.com. Some transaction records may need to be retained where law or dispute handling requires it.
What we don't do
Ponte does not show ads, does not use third-party analytics or tracking SDKs, and does not sell or share your data with data brokers.
Contact
Privacy or data requests: legal@readponte.com. Product and purchase support: support@readponte.com.