Privacy Policy

OrdLens · Last updated: 12 October 2026

OrdLens ("the app") helps you learn Danish by photographing or selecting an image of Danish text, translating words and passages, saving vocabulary, generating short practice stories, and hearing pronunciation. This policy explains what data the app handles and how.

1. Who is responsible

This app is operated by Yukun Ling, the developer of OrdLens, who is the data controller. For privacy questions, contact yukunling@gmail.com.

2. Your account

Saving words requires an account, so that your words are kept safely and can be used on any device you sign in to. You sign in with Google.

• What we receive from Google: your email address, your Google display name, and a link to your Google profile picture. Those last two arrive with every Google sign-in and cannot be switched off. OrdLens never reads, displays or shares them — only your email address is used, to show you which account you are signed in to. Google does not share your contacts or any other information with us.
• What we store: your email address, an internal account identifier, and sign-in timestamps. Your email is used to identify your account and to contact you about your account if needed. It is never used for marketing.
• Signing in with Google does not give us access to your Google account. You can withdraw the app's access at any time at myaccount.google.com/permissions.
• You can use the app without an account. Scanning, reading, translation and pronunciation all work signed out. Saving words, practising them with flashcards and quizzes, restoring a backup and sending feedback require signing in.

3. Data the app processes

• Your saved vocabulary. The words you save — the Danish word, its translation, part of speech, an example sentence, and your practice progress — are stored on our server (Supabase, in the EU) and linked to your account. A copy is also kept on your device so the app can be read offline.
• Your saved stories. Practice stories you keep are stored only on your device. They are not sent to or stored on our server, unless you report one (see below).
• Images you capture or select. When you take a photo or choose an image, that image is sent to optical-character-recognition and AI services to extract and structure the text. Whatever is visible in the picture is sent, so please avoid photographing documents containing information you do not want processed. We do not store your images on any server we control.
• Text from your images and your inputs. Extracted text, words you tap, words and phrases you add manually, and your saved words are sent to AI services to translate them, write practice stories, and generate pronunciation audio. No account information is attached — these services receive the text, not your identity.
• Feedback and reports you send. If you use Settings → Send Feedback, or Report this story on a story, the message you write is stored on our server and linked to your account so we can reply. A story report also stores the text of the reported story, so we can see what was wrong with it. Alongside either we store the technical line shown to you underneath the box before you send — the app version, your device platform and browser, whether you are using the installed app or a browser, and your screen size — which we use to reproduce the problem you describe. Feedback and reports are never sent to any other service. Only you decide what to write, so please do not include information you would not want stored.

The app does not collect your contacts, location, advertising identifiers, or device identifiers, and it does not use analytics or tracking, cookies for tracking, or advertising. Your Google display name and profile-picture link are stored as part of your sign-in record, as described above, and are never used or shared. We do not sell your data or share it with anyone other than the service providers listed below.

4. Why we are allowed to process it (legal basis)

Under the GDPR, we process your data to perform the service you asked for (Article 6(1)(b)) — creating your account, saving your words, and running the features you trigger. You are not asked to consent to marketing, profiling or tracking, because we do none of those things.

5. Service providers

To provide its features, the app uses the following providers, who process data on our behalf under data-processing agreements. Your data is also subject to their privacy policies:

• Supabase — stores your account and your saved words. Hosted in the EU (Stockholm, Sweden). Privacy policy
• Google Sign-In — verifies who you are when you sign in. Privacy policy
• Google Cloud Vision — optical character recognition (reads text from your images). Privacy notice
• OpenAI API — text structuring, translation, story generation, and summaries. Privacy policy. OpenAI states API data is not used to train its models by default, and retains API request data for up to 30 days for abuse monitoring before deletion (longer retention may apply where required by law).
• Google Cloud Text-to-Speech — generates Danish pronunciation audio from text. Privacy notice
• Vercel — hosts the app and runs the server-side functions that relay your requests to the providers above. Functions run in the EU (Stockholm). Vercel processes standard connection data (such as your IP address) as part of handling any web request. Privacy policy

Your account and saved words are stored in the EU. Google and OpenAI are based in the United States; where data is transferred there from the EU/EEA or UK, that transfer is made under an applicable safeguard such as the provider's EU-US Data Privacy Framework certification or Standard Contractual Clauses.

6. Permissions

• Camera — used only to photograph a page of text for translation. The camera is active only while the in-app camera is open.
• Photos / files — used only to let you pick an existing image to translate.

The app does not capture camera or photo content in the background.

7. How long we keep it

• While you use the app, your account and saved words are kept so the app can work.
• If you delete your account, they are deleted immediately (see section 8).
• If you do not use your account for 24 months — no sign-in, and no use of the app while signed in — we delete your account and your saved words automatically. Using the app at any point resets the 24 months. If you want to keep a copy, use Settings → Export backup, which needs no request to us (see section 9).
• Feedback and reports you send are kept while we work on them, and are deleted with your account if you delete it.
• Data on your device stays until you delete your account, clear the app's storage, or uninstall the app.

Deletion is immediate in our live database. Encrypted backups held by our hosting provider are overwritten on their own rolling schedule, normally within 30 days, after which no copy remains.

8. Deleting your data

You can delete your account and everything in it at any time: Settings → Account → Delete account. This removes your account, your email address, every saved word and any feedback or reports you sent from our servers, and the words and stories held on the device you delete from. It cannot be undone. Another phone or computer you were signed in on may keep its own offline copy, which no longer syncs; uninstalling the app there, or clearing its data, removes that copy too.

Full instructions, including how to request deletion if you cannot use the app, are at /delete-account.html.

9. Getting a copy of your data

You can download everything the app holds about you at any time: Settings → Export backup. This produces a JSON file containing your account email, every saved word with its translation and progress, and your saved stories. No request to us is needed.

10. Children

OrdLens is intended for a general audience and is not directed at children under 13 (or the minimum age in your country). It does not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.

11. Your rights

Under the GDPR and similar laws you have the right to access your data, correct it, delete it, obtain a portable copy, restrict or object to processing, and withdraw consent where processing is based on consent.

Access, portability and deletion are all available directly in the app (sections 8 and 9), with no request needed. For anything else, contact yukunling@gmail.com; we respond within 30 days.

If you are in the EU/EEA and believe your data has been handled improperly, you may complain to your national data protection authority. In Denmark this is Datatilsynet.

12. Security

Your saved words are protected by database access rules that allow each account to read and write only its own data. Traffic between the app and our servers is encrypted. No system is perfectly secure; if a breach affecting your data occurs, we will notify the relevant authority and, where required, you.

13. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by updating the "Last updated" date above.

OrdLens — Danish vocabulary learning. This page is hosted at /privacy.html.