Privacy Policy
This policy explains what personal data Inglês na Real (inglesnareal.com) collects, what it is used for, who it is shared with and what your rights are under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
1. Who is responsible for your data
The data controller is Ingles na real. For anything about privacy, contact us at [email protected].
2. What we collect
- Account: your email and, if you sign in with Google, your Google account's name and photo. If you use email and password, the password is stored encrypted by Firebase (Google); we never see it.
- Profile and preferences: what you want to be called, your English level, your goals, language, the gender chosen for the characters and your content preferences for the conversations.
- Lessons: what you say and write in conversations with the characters (turned into text), the replies, the pronunciation feedback, the lessons you took and your progress.
- Your voice: when you speak in a lesson, the audio is sent for transcription and pronunciation feedback. We keep the text of the conversation, not the voice recording.
- Payments: the plan chosen, amounts, dates and payment status. Name, CPF and card details are given directly to Asaas, our payment processor; we do not keep your CPF or card number.
- Where you came from and ads: how you reached the site (for example, the ad you clicked and its campaign ids), Meta's click id, your IP address and your browser and device type.
- App usage: events such as screens viewed, buttons tapped, errors and app performance, tied to a random id of your browser.
3. What we use it for, and the legal basis
- Providing the lessons and your account (performance of contract): signing in, saving your progress, running the conversations and assessing your pronunciation.
- Charging and unlocking plans (performance of contract and legal obligation): processing payments and meeting tax obligations.
- Improving the app and fixing problems (legitimate interest): understanding which lessons work, where people get stuck and what fails.
- Measuring our ads (legitimate interest): knowing which ads bring people who use and subscribe to the app, so we spend better on advertising. See section 4.
- Security (legitimate interest): preventing fraud and abuse, such as too many attempts.
4. Ads and Meta (Instagram and Facebook)
When you arrive through one of our ads on Instagram or Facebook, we tell Meta about a few moments of your journey: signing up, starting the first free lesson, running out of free lessons, starting a payment and buying (with the amount). With these events we send your email and your account id scrambled (turned into a code by a process called hashing, which cannot be reversed; Meta can only compare it with codes of data it already has), plus your IP address, browser and the ad click id.
This is sent directly from our servers. We do not use Meta's pixel or cookies on the site. Nothing is sent to Meta about people who did not come from one of its ads. Meta handles this data under the Meta Privacy Policy. If you do not want your data used this way, write to the email in section 1.
5. Who we share it with
We do not sell your data. We share it only with companies that provide services for the app, each with only what it needs:
- Google (Firebase): sign-in and accounts.
- Cloudflare: hosting of the site and server, database, storage, videos and usage metrics.
- AI providers (Google Gemini, Cloudflare Workers AI and Inworld): generating the characters' lines, transcribing what you say, assessing pronunciation and producing the voices. They receive the audio or text of the conversation, not your email.
- Asaas: Pix and card payment processing.
- Meta: ad measurement, as described in section 4.
- WhatsApp: only if you contact our support.
- Authorities: when the law requires it.
6. International transfer
Some of these providers store or process data outside Brazil (for example, in the United States). In those cases the transfer is made with the safeguards the LGPD provides for, such as data-protection contract clauses.
7. How long we keep it
We keep your data while your account exists and for as long as needed for the purposes above. Payment records are kept for the period tax law requires. When you ask for your account to be deleted, we delete or anonymise your data, except what the law obliges us to keep.
8. Cookies and browser storage
We use your browser's storage to keep you signed in, remember your preferences, record how you reached the site (for the measurement in section 4) and keep a random browser id. We do not use third-party advertising cookies.
9. Your rights
Under the LGPD you may at any time ask for: confirmation that we process your data; access to it; correction of incomplete or wrong data; anonymisation, blocking or deletion of unnecessary data; portability; deletion of your account and data; information about who we share it with; and to object to processing based on legitimate interest, such as ad measurement. Write to [CONTACT EMAIL]. You may also complain to Brazil's data protection authority (ANPD).
10. Security
We use encrypted connections (HTTPS), restricted access to data and providers with recognised security practices. No system is 100% secure; if an incident could put you at risk, we will tell you and the ANPD as the law requires.
11. Minors
Inglês na Real is not intended for people under 18. If we learn that we collected data from a minor without their guardians' consent, we will delete it.
12. Changes to this policy
We may update this policy. The date at the top shows the latest version; if a change is important, we will tell you in the app.