Privacy Policy

Information we process

Account and profile information: email address, username, protected password credentials when using a password, account identifiers, verification status, and profile information or images you provide. If you choose Google sign-in, we receive identity information such as your Google account identifier, email address, and name to authenticate you and create or link your account. We do not receive your Google password.

Learning and service information: activity such as saved texts, vocabulary, flashcards, quiz responses, progress, lesson bookings, credits, membership status, and interactions with learning features. Teacher profiles may include a name, image, biography, languages, lesson offers, and other information intended for public display.

Purchase and support information: order and subscription records, amounts, payment status, payment-provider references, and messages or attachments you send us. Payment providers handle payment details; we retain the transaction information needed to administer purchases and respond to billing enquiries.

Technical information: IP address, browser and device information, request timestamps, pages or features accessed, error and security logs, and cookie or browser-storage identifiers. IP addresses and online identifiers can be personal data; we do not assume that logs are anonymous.

Information comes from you, your use of the service, and providers involved in sign-in, payments, and delivery of requested features. Please avoid sending sensitive personal data or information about other people unless necessary and lawful.

Purposes and legal bases

We process data necessary to create and secure accounts, deliver learning features, manage bookings and subscriptions, process purchases, and provide support in order to perform a contract or take steps you request before entering one. Without the information necessary for a feature, we may be unable to provide it; optional profile information is not required for basic account access.

We may process records to meet legal or regulatory obligations and establish, exercise, or defend legal claims. Security, fraud prevention, troubleshooting, and proportionate service improvement may rely on legitimate interests, after considering necessity, reasonable expectations, and your rights.

Where consent is the appropriate legal basis, including optional analytics and advertising cookies, it must be specific and freely given, and may be withdrawn. Browsing the site, accepting the Terms, or acknowledging this Policy does not by itself provide that consent. Refusing optional processing does not prevent access to basic services.

Processing is subject to the Brazilian General Data Protection Law (LGPD) and any other data protection legislation that applies to the particular activity. A person’s location alone does not determine all applicable rights; where the GDPR or other laws apply, we also respect their requirements.

Sharing and service providers

We share information needed to operate the service with hosting, storage, content delivery, communications, technical support, authentication, and payment providers. Current integrations include cloud infrastructure, Google sign-in where offered, Stripe for payments, and Google/YouTube for relevant features. Optional measurement services are described in the Cookie Policy.

Teachers receive information needed to arrange and provide booked lessons. Information deliberately submitted for public display, such as a teacher profile, can be accessed by others. We may disclose records where legally required or necessary to protect rights, prevent fraud, or respond to a lawful request, subject to applicable safeguards.

If the business is reorganized or transferred, relevant data may be transferred for continuity of service, subject to applicable law, confidentiality, and notice of material changes. We do not sell personal data for money. Sharing with providers, including optional advertising measurement, is described here rather than treated as an absence of disclosure.

Some providers process information on our instructions; others determine their own purposes, including payment compliance and services you use through your own third-party account. Their privacy notices explain that independent processing. External links do not extend this Policy to another website.

International processing

Providers may store or process information outside Brazil, including in countries whose laws differ from those of your country. International transfers must rely on a mechanism allowed by applicable law, such as an adequacy decision or valid contractual safeguards, including ANPD standard contractual clauses where applicable. This Policy is not itself a transfer agreement or blanket consent to international transfers.

Contact us for information about recipients, destination countries, and the safeguards applicable to your data, including access to relevant safeguards subject to lawful confidentiality limits.

Retention and security

We retain personal data for as long as needed for the purpose for which it was collected. Account and learning records generally remain while the account is active; transaction, security, and support records may need to remain longer for legal obligations, fraud prevention, or the exercise of rights. Retention depends on the category of data, applicable statutory periods, and any actual dispute or investigation.

After the applicable purpose and retention period end, data should be deleted or anonymized. Limited backup copies may remain until their normal replacement cycle, with access restricted. Account deletion does not require deletion of records that must lawfully be preserved.

We use technical and organizational measures appropriate to the risks, including access controls and protected authentication. No service can guarantee absolute security. If a personal data incident requires notification, we will notify affected people and the competent authority as required by applicable law.

Your rights and how to exercise them

Subject to applicable conditions, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary, excessive, or unlawfully processed data, and portability in accordance with applicable regulation. You may request information about organizations with which data is shared and the consequences of refusing consent, withdraw consent, and request deletion of consent-based data subject to lawful retention exceptions.

You may object to processing where legal requirements are not met and request review of decisions based solely on automated processing that affect your interests, together with information about the criteria and procedures used as provided by law. Where applicable, other rights include restriction of processing and objection to processing based on legitimate interests or direct marketing.

Send requests to support@mightylanguages.com. We may request proportionate information to verify your identity or an authorized representative’s authority, and will respond within the applicable legal deadlines without charging for the exercise of your rights. We will explain any lawful limitation or refusal. Withdrawal of consent does not invalidate processing already lawfully performed.

You may also complain to the ANPD in Brazil, an applicable consumer protection authority, or another competent data protection regulator. You do not have to waive access to those authorities or the courts to use the service.

Cookies and third-party features

We use cookies and similar storage for authentication, security, and browser preferences. Optional measurement and advertising technologies are subject to your choices as explained in the Cookie Policy. Browser settings can also control cookies and stored website data.

Sign-in, payment, and embedded video providers may receive technical information when their features load or are used, and may use their own storage. These features have purposes distinct from our optional site analytics. Consult the provider’s privacy information before using an optional third-party feature.

Children and adolescents

Children’s and adolescents’ personal data requires particular care and must be handled in their best interests, with clear information appropriate to their age. Where parental consent or participation is legally required, it must be obtained through an appropriate process; a general acceptance of this Policy does not replace it.

A parent or guardian may contact support about a minor’s account, inappropriate content, privacy concerns, or deletion. If we identify processing without the required authorization or legal basis, we will take appropriate steps to restrict it, obtain any required authorization, or delete the data unless lawful retention is necessary.

Policy updates

We may update this Policy to reflect changes to the service, processing practices, or law. The revision date appears above. Material changes will receive appropriate notice, and new consent will be requested where required before a new consent-based purpose begins.