Privacy Policy

Account data: your name, email address and password (stored encrypted).

Learning data: your level, goals, lesson and vocabulary progress, streaks and the study notes you create.

Speaking data: when you use speaking practice, short audio recordings of your voice are processed to give pronunciation feedback.

Payment data: when you subscribe, your payment is handled by Stripe. We receive your subscription status and a customer identifier, but never your full card number.

Technical data: basic information such as device, browser and approximate region, used to keep the Service secure and working.

To create and manage your account; provide and personalize lessons, vocabulary and notes; process subscriptions and payments; generate AI explanations, translations and speech feedback; improve the Service; and communicate important updates.

We process your data to perform our contract with you (providing the Service), to comply with legal obligations, with your consent where required (for example, microphone access), and for our legitimate interests in operating and improving the Service.

We share the minimum data necessary with trusted providers that help us run the Service:

Supabase — authentication, database and file storage.

Stripe — subscription payments.

OpenAI and Groq — AI text and speech processing (explanations, translations, transcription).

ElevenLabs — generation of lesson audio.

Google Analytics — anonymous usage measurement.

These providers process data on our behalf under their own security and privacy commitments. Some operate outside Brazil, which may involve international transfers.

We use essential cookies to keep you signed in and to operate the Service securely. We also use Google Analytics, which sets analytics cookies, to understand how the Service is used and to improve it. We do not use cookies to sell your data.

We keep your data while your account is active. If you delete your account, we remove your personal data within a reasonable period, except where we must retain certain records to comply with legal obligations.

Under the LGPD (and the GDPR where applicable) you may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; withdraw consent; and request a copy of your data. To exercise these rights, contact us using the details below.

We use industry-standard measures — including encryption in transit, access controls and trusted infrastructure — to protect your data. No method of transmission or storage is completely secure, but we work hard to protect your information.

The Service is not directed to children under 16. If you believe a child has provided us personal data without proper consent, contact us and we will delete it.

Because some of our providers operate globally, your data may be processed in countries other than your own. We take steps to ensure your data remains protected wherever it is processed.

We may update this Privacy Policy from time to time. We will update the date above and, for material changes, notify you within the Service.