Privacy policy

1. Who processes and how to reach us

The data controller is the company named in this page's footer (legal name, CNPJ and address). The official privacy channel is the e-mail in the footer; it has a response protocol and is the path to exercise any right.

2. What data we process

• Account: e-mail, date of birth (for the 18+ rule), display name and preferences.
• Progress: your lesson answers (study evidence), practice minutes, levels and achievements.
• Papo conversation: real-time transcription of your speech (see section 3), the session's annotated summary of errors and words, and — only with your opt-in — the teacher's memory facts (see section 5).
• Reminders: your device's push notification subscription.
• Technical: access logs for the app's private routes (see section 7).

3. Voice: where it lives and for how long

Audio is NEVER recorded. Your speech is streamed in real time to the voice provider (OpenAI Realtime), transcribed to compose the teacher's reply, and discarded by the provider: we store no audio and no full transcript. The provider's audio retention setting is kept at zero on our side.

We do not identify speakers (no voiceprint), do not clone voices, and do not use your voice to train models.

What remains from a session: minute accounting (for usage limits and your evolution) and an annotated SUMMARY (mistakes you made and new words), kept for up to 90 days and then anonymized/removed. The teacher's memory (section 5) remains until you erase it or delete your account.

4. Where the data goes (providers)

Your data is processed by these sub-processors, each under a data processing agreement:

• OpenAI — transcription and the Papo's voice conversation (Realtime), in the United States, with audio retention disabled.
• Microsoft Azure — speech synthesis (text to speech) for exercise listening.
• Supabase — authentication and the app database.
• Vercel — hosting and edge execution of the app.
• Asaas (Brazil) — subscription billing: receives name, email and CPF or CNPJ to issue PIX, boleto or card charges. The card is entered on the Asaas page; Parlozo stores neither card numbers nor CPF/CNPJ.
• Error/analytics tools (Sentry, PostHog) — NOT active yet; they will only come in with your prior consent, and this policy will be updated before that happens.

5. AI memory (opt-in and sensitive-data filter)

The teacher's memory stores facts YOU share in conversation (name, city, job, tastes) for future sessions. It is OPTIONAL: it only turns on if you tick its own consent box (unchecked by default), separate from the voice consent. You can switch it off at any time.

Even when on, an automatic server-side filter NEVER stores sensitive data: health, religion, sexual orientation, finances and documents never enter memory, in any conversation language.

You can view, edit and erase each fact — or all of them at once — under Profile → Teacher memory. Erasing a fact also removes the session summaries that reference it.

6. Your rights and how to exercise them

Under the LGPD (art. 18) and the GDPR (arts. 15–22), you may: confirm processing, access your data, correct it, port it, delete your account, withdraw consents and object to processing.

Two of them are SELF-SERVICE inside the app, no human needed: under Profile → Your data you can export ALL of your data as JSON and delete your account entirely. The other rights: the privacy channel in the footer, answered within 15 days.

Consents (voice, memory) can be withdrawn at any time in the profile; withdrawal does not affect the lawfulness of earlier processing.

7. Access logs and security

We keep for 6 MONTHS (Marco Civil, art. 15) one line per authenticated access to the app's private routes: date/time, route, method and browser — the IP address only enters as a hash (SHA-256), with no conversation content and no product data. After 6 months the line is deleted by a daily routine.

We use encryption in transit, role-level access control (RLS) and data minimization: each piece of data is only accessible to its owner and to the systems that need it.

8. Security incidents

If an incident occurs that may pose a relevant risk to you, we will notify the ANPD within 3 business days (72 hours as the reference in the other regimes where we operate) and inform affected users via their account e-mail, following our response plan.

9. Legal basis and changes

We process data to deliver the service you asked for (account, progress), under your consent (voice, memory) and to comply with legal obligations (access logs). This policy may change; the current version date is in the footer and material changes are announced in the app.