Privacy Statement

Last updated: 8 Aug, 2026

1) Who we are (Data Controller)

Portuguesepedia is a digital, subscription-based language learning service.

Data Controller (sole proprietorship): Pedro Cesar Coutinho Campos (Enskild näringsverksamhet) Personal/Organization number: 810220-0576 VAT number: SE810220057601 Website: portuguesepedia.com Contact (privacy requests): [email protected]

2) What personal data we collect

We may collect and process the following categories of personal data:

  • Account data: name, email address, password, country.
  • Authentication data: if you choose to sign in with Google, we receive basic account information from Google (such as your name and email address) to create or access your account.
  • Subscription and payment data: subscription status, billing details, invoices/receipts, Stripe customer/payment references. Note: we do not store your full card details. Card information is handled by Stripe, and you may choose to save a payment method with Stripe for recurring payments.
  • Learning activity data: the content you open, quiz and exercise results, completions, vocabulary you save for review, and your level.
  • AI feature data: the text you enter into our AI-powered features (for example questions you ask, answers you write, or passages you ask to have translated).
  • Voice data (spoken conversation practice only): if you use spoken conversation practice, the audio captured by your microphone during the session, together with the written transcript of that session. See section 6.
  • Usage and device data (analytics): pages viewed, interactions, device/browser info, approximate location, and similar analytics data.
  • Marketing data (pixels): interactions that help measure marketing performance (via the Meta Pixel), where enabled and consented.
  • Support communications: messages you send us via support/contact forms available inside your account.

3) Why we use your data (purposes)

We use personal data to:

  • Create and manage your account (including sign-in with Google, if you choose it).
  • Provide access to the platform and its features.
  • Provide AI-powered learning features, including explanations, translations, quizzes, summaries, vocabulary review, and spoken conversation practice.
  • Let you replay your own spoken conversation practice sessions.
  • Check and improve the quality of our AI-powered features.
  • Process subscriptions and payments.
  • Send service emails (e.g., account, subscription, and important updates).
  • Send newsletters and marketing emails (when you opt in, and when permitted by law).
  • Run analytics to understand how the platform is used and improve it.
  • Measure marketing performance (Meta Pixel, where enabled and consented).
  • Protect our forms and prevent spam and abuse (Google reCAPTCHA).
  • Prevent fraud and protect the security of the service.
  • Meet legal obligations (e.g., accounting and tax).

4) Legal bases (GDPR)

We rely on these legal bases under the GDPR:

  • Contract: to provide the service you signed up for. This includes account access, subscriptions, and the AI-powered features that form part of your plan, including spoken conversation practice and the replay of your own sessions.
  • Legal obligation: to comply with laws (e.g., bookkeeping, tax).
  • Legitimate interests: to operate, secure, and improve the service (where appropriate), including protecting our forms from spam and abuse, and reviewing a small number of practice sessions to check quality (see section 6).
  • Consent: for non-essential cookies/trackers and certain marketing activities (where required). You can withdraw consent at any time.

5) Cookies and tracking

We use cookies and similar technologies. We use Complianz Privacy Suite (GDPR/CCPA) Premium to manage cookie consent and preferences.

  • Necessary cookies: required for the site to function (login, security, basic features), including Google reCAPTCHA, which protects our forms from spam and abuse.
  • Analytics cookies: Google Analytics 4 (GA4), deployed through Google Tag Manager and governed by Google Consent Mode. Analytics collection stays off until you consent to Statistics cookies.
  • Marketing cookies/pixels: Meta Pixel to measure marketing performance. Meta Pixel is blocked by default and only loads after you give Marketing consent via our Complianz cookie settings (where consent is required). If you do not consent to Marketing cookies, Meta Pixel will not load.

For full details, see our Cookie Policy and manage your preferences via the cookie settings on the site.

6) AI-powered features

Some parts of Portuguesepedia are powered by artificial intelligence. This section explains what that means for your data.

6.1 Text-based AI features

Our AI assistant, translations, quizzes, summaries, and vocabulary suggestions are generated by AI models operated by third-party providers on our behalf (OpenAI and, for spoken playback of practice items, Microsoft Azure Speech). When you use these features, the text you enter and the relevant lesson content are sent to those providers so that a response can be generated and returned to you.

These providers process this content on our instructions and do not use it to train their models.

6.2 Spoken conversation practice

Spoken conversation practice is an optional feature available on the Plus plan. It lets you hold a spoken conversation in Portuguese with an AI tutor about a lesson you have just studied. You choose when to start a session, and it only runs while you have it open.

Before your first session we ask you to acknowledge a short notice explaining that you are talking with an AI system and how the audio is handled. You are talking with an AI, not a person.

What happens during a session. While a session is running, the audio from your microphone is sent to ElevenLabs, our conversation provider, where it is converted to text, used to generate the tutor’s reply, and answered in a synthesized voice. The lesson transcript, topic, and level are also sent so the conversation stays on topic.

What is stored, where, and for how long. ElevenLabs stores the audio recording and the written transcript of each session for up to 60 days, after which both are deleted. This storage takes place in the United States. We do not store the recording or the transcript on our own servers at any point.

What we store. On our side we keep only information about the session, not its content: the date, how long it lasted, which lesson it related to, how many turns it had, how it ended, and its cost. This is what powers your weekly allowance and our internal reporting.

Replaying your sessions. During the 60-day window you can replay your own sessions, with the transcript shown alongside. When you do, we check that the session belongs to you and then stream the recording directly from ElevenLabs to your browser. No copy is kept by us. After 60 days the recording and transcript are gone, and only the session details described above remain.

Human review. Pedro may listen to a small number of sessions to check that the tutor is behaving correctly and that the audio quality and Portuguese are right. This is how the feature is kept fit for purpose. Sessions are not shared with anyone else.

Automated analysis. ElevenLabs also runs an automated analysis of each finished session that produces a topic label and an indication of how the conversation went. We use this only to spot problems with the feature. It has no effect on your account, your level, or your results.

AI output is not always accurate. The tutor can make mistakes, including mistakes about the Portuguese language. Do not rely on it as a sole source of instruction.

Please do not share sensitive information. Practice sessions are for language learning. Avoid saying anything you would not want recorded, and do not share other people’s personal information during a session.

7) Who we share data with (processors)

We share personal data with service providers that help us run Portuguesepedia, including:

  • Stripe (payments and recurring billing)
  • Hetzner (hosting)
  • Cloudflare (DNS, CDN, and security/performance services)
  • BunnyCDN (delivery of static assets and audio/video streaming)
  • Google (Google Analytics 4 and Google Tag Manager for analytics; Google reCAPTCHA for form security; Google Sign-in for authentication)
  • Meta (Meta Pixel for marketing measurement)
  • Resend (delivery of our transactional and newsletter emails)
  • Google Workspace (our email mailbox, used when we correspond with you, e.g., support)
  • ElevenLabs (spoken conversation practice: speech recognition, generation of the tutor’s replies, synthesized speech, and storage of the session recording and transcript; also the synthesized voice used in some of our lesson audio)
  • OpenAI (AI assistant features: explanations, translations, quiz and summary generation, and vocabulary suggestions)
  • Microsoft (Azure Speech, used to read practice items aloud)

We also use FluentCRM, an email/CRM tool installed on our own website, to manage communications and mailing lists. The emails themselves are delivered through Resend.

Our AI providers may in turn use their own sub-processors to deliver the service. ElevenLabs publishes its current list of sub-processors in its Trust Center.

We share only what is necessary for each provider to perform their role.

8) International data transfers

Some of our service providers are located outside the EU/EEA or may process data outside the EU/EEA (for example, providers based in the United States, such as Stripe, Google, Meta, Resend, ElevenLabs, OpenAI, and Microsoft).

In particular, spoken conversation practice recordings and transcripts are stored in the United States for the retention period described in section 6.

Where international transfers occur, we use appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) and other legally recognized measures, including adequacy decisions where they apply.

9) How long we keep your data (retention)

  • Account data: kept while your account is active.
  • Learning activity data: kept while your account is active.
  • Spoken conversation practice recordings and transcripts: kept by ElevenLabs for up to 60 days, then deleted. Session details (date, length, lesson, duration, turns) are kept while your account is active.
  • Text submitted to AI features: retained by our AI providers only for the short period needed to deliver the response and to guard against misuse, in line with their standard terms.
  • Support communications: kept as needed to handle support and maintain records.
  • Billing and tax records: retained as required by law.
  • Analytics and marketing data: kept according to the settings and retention periods of the relevant tools and consent choices.

Accounts that have been inactive for a long period are deleted under our account hygiene process.

10) Your rights (EU/EEA users)

If you are in the EU/EEA, you have rights under the GDPR, including:

  • Access to your personal data
  • Correction of inaccurate data
  • Deletion (right to be forgotten), where applicable
  • Restriction of processing
  • Objection to processing (including some legitimate interest processing)
  • Data portability (in certain cases)
  • Withdrawal of consent (where processing is based on consent)

To exercise your rights, contact us at [email protected].

11) Account deletion

To request deletion of your account, email [email protected] from the email address associated with your account. Basic members can also delete their account directly from their account page.

Deleting your account removes your account data and your learning activity data from our systems.

One thing to be aware of. Recordings and transcripts of spoken conversation practice are held by ElevenLabs, not by us, and are not deleted at the moment you delete your account. They are deleted automatically at the end of the 60-day retention period described in section 6. If you want them removed sooner, contact us at [email protected] and we will arrange it.

We may keep certain records where required by law (e.g., accounting).

12) Security

We use reasonable technical and organizational measures to protect personal data, including access controls and encrypted connections (HTTPS). Credentials for our AI providers are held only on our servers and are never exposed to your browser. No method of transmission or storage is 100% secure.

13) Children

Portuguesepedia is intended for adults (18 and over). We do not knowingly target or collect data from children. If you believe a child has provided us personal data, contact [email protected].

14) Changes to this statement

We may update this Privacy Statement from time to time. The “Last updated” date will show when changes were made.

15) Complaints

If you are in the EU/EEA and believe we have not handled your personal data properly, you may lodge a complaint with your local data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY).