EveryDay BRPrivacy Policy
Your data, your call
Last updated: [[DATE]]
This policy explains what EveryDay BR collects, why, who receives it and how you control it. We wrote it to be read, not to be skipped.
1. Who we are
EveryDay BR is an app that teaches Brazilian Portuguese. It is published by [[LEGAL NAME]], an individual based in Brazil, who is the controller of your personal data and the person in charge of data protection (the “encarregado” under Brazil’s LGPD). Contact: support@everydaybr.com.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name you give us | So Zé can call you by name | Contract |
| Email and user ID from Apple or Google sign-in [[D-03]] | Your account, and restoring your progress on a new phone | Contract |
| Your answers during setup and your learning progress (trail, XP, streak, coins, achievements, words you missed, settings) | Running the app and keeping your progress | Contract |
| Purchases (product, date, store transaction) | Billing, restoring purchases, support | Contract; legal obligation |
| How you use the app (screens, activities finished) [[D-02]] | Understanding what works and improving lessons | Consent |
| Advertising ID and app events such as install and purchase [[D-02]] | Measuring our ads on Google, Meta and TikTok | Consent |
| Session replay (screens and taps, with typed text masked) [[D-02]] | Finding confusing screens and bugs | Consent |
| Crash reports and device model | Fixing errors | Legitimate interest |
Your voice
In speaking exercises, your phone’s speech recognition service — Apple on iPhone, Google on Android — turns what you say into text so Zé can check it. EveryDay BR receives only the text. We never record, store or share audio. Apple and Google handle the audio under their own privacy policies.
Notifications
Zé’s daily reminder is scheduled on your phone. No server sends it and the time you choose stays on the phone.
What we don’t collect
No precise location, no contacts, no photos, and we don’t sell your data for money.
3. Who receives your data
We share data only with the services that run the app for us, under contracts that limit their use:
- Supabase — account and progress storage. [[D-03]]
- RevenueCat — subscription and purchase management.
- Apple and Google — sign-in, payments and speech recognition.
- Google (Firebase, Google Ads) — usage analytics and ad measurement. [[D-02]]
- Meta and TikTok — ad measurement (installs and purchases). [[D-02]]
- Microsoft Clarity — session replay. [[D-02]]
Some of these companies are in the United States and other countries. When your data leaves your country, we rely on the safeguards the law requires, such as standard contractual clauses.
4. Advertising and your choices [[D-02]]
We ask before turning on analytics and ad measurement. On iPhone, Apple asks you whether EveryDay BR may track you across other companies’ apps; if you say no, we don’t use your advertising ID. You can change your mind any time in Perfil → Privacy or in your phone settings.
California residents
Sharing app events with Meta and TikTok for ad measurement may count as “sharing” under California law. You can opt out in Perfil → Privacy or by emailing us. We don’t knowingly sell or share data of anyone under 16.
5. How long we keep it
- Account and progress: while your account exists. Deleted within 30 days after you delete the account.
- Purchase records: up to 5 years, as tax and accounting laws require.
- Analytics and session replays: up to [[RETENTION]] months.
6. Your rights
Depending on where you live (including under Brazil’s LGPD, the EU and UK GDPR and California law), you can ask to access, correct, export or delete your data, withdraw consent and object to some uses. Delete your account in Perfil → Privacy → Delete account (see how), or email support@everydaybr.com for anything else. We answer within 15 days. You may also complain to your data protection authority — in Brazil, the ANPD.
7. Children
EveryDay BR is not directed to children under 13 [[M-25]], and we don’t knowingly collect their data. If you believe a child gave us data, email us and we’ll delete it.
8. Security
Data travels encrypted (HTTPS) and access is limited to what each service needs. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
9. Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows the latest version.