pocket translator
PTEN
DownloadGet an invite
Version of 2026-09-30 · closed beta

Privacy

uai? is a pocket translator for your computer, made by Deciban, from Brazil. This policy explains, in plain words, what data the app and this website process, why, with whom and for how long. It covers the closed beta, which is free and invite-only. uai? is for adults (18 and over) only.

This is a translation of the Portuguese version, which prevails if they ever differ. Article numbers refer to Brazil's General Data Protection Law (LGPD).

In short

  • The text you translate goes straight from your computer to Google Translate. It never passes through our server and we don't keep it.
  • Text only goes to the AI (OpenAI) when you click Explain, Summarize, Reply or Ask. We don't keep that text either.
  • We keep your account and usage numbers. Never the text you select, nor the names of the apps you use uai? in.
  • No analytics, no pixels, no tracking. We don't sell data.
  • You can see, correct, export and delete your data right in the app.

Who is responsible

  • Controller: Deciban — Rafael Rabelo de Souza, CNPJ (Brazilian company ID) 66.323.849/0001-04, Av. Paulista, 1636 — São Paulo/SP, Brasil.
  • Data protection officer (DPO): Rafael Rabelo de Souza. Contact: privacidade@deciban.com.br or the contact form, with the subject Privacy. We reply within 15 days.

What stays on your computer only

  • Copy history: lives in memory only, disappears after 3 hours and never leaves your computer.
  • AI history: the AI's answers, encrypted on your computer. You can turn it off and clear it in Settings.
  • The app's settings.
  • Account session: the token that keeps you signed in is encrypted by your operating system (DPAPI on Windows, Keychain on macOS).
  • What the app doesn't read: password fields and the apps on the exclusion list, such as password managers. Without your consent on the app's privacy screen, it reads nothing.

Your data, item by item

For each item: what it is, why we process it, the LGPD legal basis, who else receives it and how long it is kept.

  • Text to translate. The passage you select to translate.Why: to translate the passage you selected.Legal basis: consent (art. 7, I), given on the app's privacy screen.Who else receives it: Google LLC (Google Translate, USA). The text goes straight from your computer. As an international transfer, it relies on your specific and highlighted consent (art. 33, VIII).How long we keep it: we don't keep it. The text doesn't even pass through our server.
  • Text sent to the AI. Only when you click Explain, Summarize, Reply or Ask.Why: to produce the explanation, summary or answer you asked for.Legal basis: consent (art. 7, I) and international transfer with specific and highlighted consent (art. 33, VIII).Who else receives it: Vercel Inc. (USA), which runs our server in São Paulo, and OpenAI, L.L.C. (USA). OpenAI doesn't use data sent through its API to train models and may retain it for up to 30 days to monitor abuse.How long we keep it: we don't keep the text on the server.
  • AI usage count. How many AI uses, characters and credits per month. Numbers only.Why: to apply each account's monthly AI credit limit (Free: 1,000; Pro: 10,000).Legal basis: performance of a contract (art. 7, V).Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: for as long as the account exists (see “How long”, below).
  • Exchange rates. None of your text leaves the computer here.Why: to convert prices into your currency. The math happens on your computer.Legal basis: performance of a contract (art. 7, V).Who else receives it: the open service Frankfurter (frankfurter.dev), which provides the European Central Bank's daily rates. It only sees the rate request and the IP address.How long we keep it: we don't keep anything.
  • Account. Name, e-mail, phone (optional), password (only its scrypt hash, never the password itself), what you use uai? for most (optional: work, study, shopping, games, reading or other), your acceptance of the terms and this policy (version and date) and whether you want to receive news.Why: to sign in to the app, run the beta and tell you about the service. News only if you ask for it.Legal basis: performance of a contract (art. 7, V). Receiving news: consent (art. 7, I), which you can turn off at any time.Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: until you delete the account.
  • Computers on the account. Up to 3 per account: a random identifier, the operating system, the app version and the last access.Why: to limit the account to 3 computers and show where it is signed in.Legal basis: performance of a contract (art. 7, V).Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: for as long as the account exists.
  • Usage statistics. Numbers only, per day: how many translations, conversions, AI uses, copies and pastes; the total number of characters; the category of the app where you used it (browser, e-mail, documents, chat, development, design, games or other), worked out on your computer; and the language pair (for example, English→Portuguese). Never the app's name, never the text.Why: to understand how the app is used and improve the beta.Legal basis: legitimate interest (art. 7, IX). You can turn it off under Settings > Privacy, with the “Send usage statistics” option.Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: for as long as the account exists.
  • Technical errors. The area, code and technical message of the error, the version and the operating system. None of your text.Why: to find and fix failures.Legal basis: legitimate interest (art. 7, IX): keeping the service working and secure.Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: 90 days.
  • Access logs. Sign-ins, failed sign-ins, sign-outs and password recovery, with date, time and a hash of the IP address. The IP address itself is not stored.Why: to protect your account and investigate unauthorized access.Legal basis: compliance with a legal obligation (art. 7, II; Brazil's Internet Civil Framework, art. 15) and legitimate interest (security).Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: 6 months.
  • Feedback. Your survey answers, the version, the operating system and how many days you have used the app.Why: to hear from users and decide what to improve.Legal basis: legitimate interest (art. 7, IX). Only sent if you choose to.Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: for as long as the account exists.
  • Invite request. On the website: name, e-mail, phone, operating system and your reason, if you share one. To prevent repeated requests, we keep a hash of the IP address. When you download the app, we record the code used and the operating system.Why: to review the request and send the invite.Legal basis: steps prior to a contract, at your request (art. 7, V).Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: until you delete the account, or up to 6 months after the beta ends.
  • Contact message. Name, e-mail, subject and message from the contact form.Why: to reply to you.Legal basis: legitimate interest (art. 7, IX) and, for requests about your data, compliance with a legal obligation (art. 7, II).Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: 1 year after we reply.
  • E-mails we send. Your e-mail address and the content of the message.Why: to send password recovery codes and service notices.Legal basis: performance of a contract (art. 7, V).Who else receives it: Resend, Inc. (USA), which delivers the e-mails.How long we keep it: the recovery code is valid for 15 minutes, and we keep only its hash.
  • Attempt limits. A hash of the IP address and how many attempts it made within a time window.Why: to block bots and repeated attempts at sign-in, password recovery and on the forms.Legal basis: legitimate interest (art. 7, IX): security.Who else receives it: Supabase Inc. (USA), with the database in São Paulo, Brazil.How long we keep it: up to 2 days.

Who else receives your data

  • Google LLC (USA), through Google Translate: the text you translate, straight from your computer.
  • OpenAI, L.L.C. (USA): the text of AI requests, only when you click.
  • Vercel Inc. (USA): hosts this website and our server, which runs in São Paulo. AI requests and the app's calls pass through it.
  • Supabase Inc. (USA): the database, in São Paulo. It stores accounts, computers, counts, statistics, errors, access logs, feedback, invite requests and contact messages.
  • Resend, Inc. (USA): sends password recovery codes and service notices.
  • Frankfurter (frankfurter.dev): receives only the rate request and the IP address. No text.

We don't sell, rent or share data for advertising.

Transfers outside Brazil

The companies above are based in the United States. The text for translation and for the AI leaves Brazil only with your specific and highlighted consent, given on the app's privacy screen (art. 33, VIII). Our database and server functions are located in São Paulo.

What the person in charge can see

To run the beta, the person in charge sees, in an internal dashboard, account data (name, e-mail and what you use the app for most), statistics, errors, access logs, feedback, invite requests and contact messages. He never sees translated texts or AI requests, because they are not stored.

This website

  • It is hosted on Vercel.
  • It uses a single cookie, uai-lang, to remember your language. The internal dashboard also uses the administrator's session cookie.
  • No analytics, no pixels, no tracking and no selling of data.

How long

  • Your account and everything linked to it stay until you delete the account.
  • Technical errors: 90 days. Access logs: 6 months. Contact messages: 1 year after we reply.
  • When the beta ends, data is kept for up to 6 months and then deleted. We'll let you know beforehand by e-mail.

Your rights (LGPD, art. 18)

  • Confirm whether we process your data and access it.
  • Correct incomplete, inaccurate or outdated data.
  • Ask for anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the LGPD.
  • Take your data to another service (portability).
  • Ask for deletion of data processed on the basis of your consent.
  • Know who we share your data with (the list is above).
  • Know that you may refuse consent, and what happens if you do: without it, the app doesn't read your selection, so it can't translate or use the AI.
  • Withdraw your consent at any time.
  • Object to processing based on another legal basis, such as legitimate interest.
  • Ask for a review of decisions made solely by automated processing.
  • File a petition with Brazil's National Data Protection Authority (ANPD).

How to use your rights

  • In the app, Settings > Account: see and correct your data.
  • In the app, Settings > Privacy: export your data to a file, withdraw consent, clear the AI history and delete your account. Deleting the account erases the account, its computers, statistics, feedback, errors, invite request and contact messages.
  • In writing: at privacidade@deciban.com.br or through the contact form, with the subject Privacy. We reply within 15 days.

Security

  • Encrypted connections (TLS) everywhere.
  • Passwords stored only as a scrypt hash.
  • Session token and AI history encrypted on your computer.
  • Access control in the database (row-level security).
  • Attempt limits on sign-in and password recovery.

If something goes wrong

If a security incident may bring you relevant risk or harm, we notify the ANPD and the people affected within 3 business days (ANPD Resolution CD/ANPD No. 15/2024).

Age

uai? is for adults (18 and over) only.

Changes to this policy

When this policy changes, we let you know in the app. If the change is relevant, we ask you to accept it again. The version date is at the top of this page.

Questions: get in touch. See also the terms of use.
Version 2026-09-30 (internal 2026-09-30b).