This is a plain-language draft prepared by the Podalls team, not legal advice. Have it reviewed by a qualified adviser in your jurisdiction before relying on it.
Who is responsible
Podalls publishes Podalls Convert and Podalls Downloader and operates this website, and is the data controller for the limited processing described below.
Podalls Convert
Your documents stay on your computer. Opening, reading, editing, converting, compressing, merging, splitting and image conversion all run locally. Text recognition in scanned PDFs uses the OCR built into Windows, which also runs on your PC. No document, page, image or file name is transmitted anywhere, and there is no account to create, so we hold no records about you at all.
The app makes one kind of outbound request: about once a day it checks whether a newer version has been published, and it downloads the installer if you ask it to. Those requests go to GitHub, who host our releases. As with any web request, GitHub can see the connecting IP address; we receive no report of it, and nothing identifies you or your machine to us. You can turn the check off in Settings, or block it at the firewall — every feature keeps working either way.
There is no analytics, no crash reporting and no licence check inside the app. GitHub is the only host it is built to reach.
Podalls Downloader
The app connects only to the links you give it, and to GitHub to check for and download updates when that is on. Whatever you download is saved straight to your own computer; nothing passes through us, and there is no account, so we hold no records about you or what you download.
The sites behind the links you paste see a request from your computer, as they would from your browser. YouTube downloads use the bundled yt-dlp, which contacts YouTube in the same way. Magnet links join the BitTorrent network: while a torrent downloads, other people in it can see your IP address. The app does not share a torrent onward (seed) once it has finished. The update check works as described for Podalls Convert above, and can be turned off in Settings.
There is no analytics, no crash reporting and no licence check inside the app.
This website
The site sets no advertising or tracking cookies and runs no analytics product. Two things do process data when you visit:
- Cloudflare serves the site and, as the hosting provider, processes request data including IP addresses in order to deliver pages and absorb attacks.
- Sentry receives a report when a page errors, so that broken pages get fixed. A report can include the page address, browser version and a stack trace, and an IP address may be processed in transit.
The lawful basis for both is our legitimate interest in running a website that works and stays up. Neither is used to build a profile of you or to advertise to you.
How long anything is kept
We keep no records of app usage, because none are collected. Error reports are retained by Sentry for a limited period under their retention settings and are deleted automatically afterwards. Hosting logs are handled by Cloudflare under their own retention policy.
Which law applies
We are established in Malaysia and process personal data under the Personal Data Protection Act 2010. If you are in the European Economic Area or the United Kingdom, the GDPR may also apply to the website processing described above; the wording in this policy is written to satisfy both.
Your rights
You may request access to, or correction of, personal data we hold, ask us to stop processing it, or withdraw consent where we relied on it. Where the GDPR applies you may also request erasure or portability. In practice there is very little to request: the app sends us nothing.
Reach us through the issue tracker on GitHub and we will respond within 30 days. That tracker is public, so do not post personal details in it — say that you want to exercise your rights and we will arrange a private channel first. If you are not satisfied with our answer, you may complain to the Department of Personal Data Protection (JPDP), or to your own supervisory authority if you are outside Malaysia.
Children
Our apps are general-purpose tools and are not directed at children. We knowingly collect no data from anyone, of any age.
Changes
If this policy changes materially, the date at the top of this page changes with it, and the previous wording remains in this site's source history. Continued use after a change means the updated policy applies. The terms of use cover the rest of the relationship.