Privacy Statement

Last updated: 8 Sep, 2026

1) Who we are (Data Controller)

Portuguesepedia is a digital, subscription-based language learning service.

Data Controller (sole proprietorship): Pedro Cesar Coutinho Campos (Enskild näringsverksamhet) Personal/Organization number: 810220-0576 VAT number: SE810220057601 Website: portuguesepedia.com Contact (privacy requests): [email protected]

2) What personal data we collect

We may collect and process the following categories of personal data:

  • Account data: name, email address, password, country.
  • Authentication data: if you choose to sign in with Google or with Apple, we receive basic account information from that provider (such as your name and email address) to create or access your account. If you use Apple’s Hide My Email, we receive a private relay address instead of your own, and that relay address is what we hold and write to.
  • Subscription and payment data: subscription status, billing details, invoices/receipts, Stripe customer/payment references. Note: we do not store your full card details. Card information is handled by Stripe, and you may choose to save a payment method with Stripe for recurring payments.
  • Learning activity data: the content you open, quiz and exercise results, completions, vocabulary you save for review, and your level.
  • Teacher connection data: if you connect to a partner teacher through her Teacher Link, we record the connection (which teacher, when it started, when it expires), the name you choose to show her, and whether you have muted her.
  • Assignments: the content selections a partner teacher sends you, together with the note she writes with them.
  • AI feature data: the text you enter into our AI-powered features (for example questions you ask, answers you write, or passages you ask to have translated).
  • Voice data (spoken conversation practice only): if you use spoken conversation practice, the audio captured by your microphone during the session, together with the written transcript of that session. See section 6.
  • Usage and device data (analytics): pages viewed, interactions, device/browser info, approximate location, and similar analytics data.
  • Marketing data (pixels): interactions that help measure marketing performance (via the Meta Pixel), where enabled and consented.
  • Support communications and applications: messages you send us through our contact and support forms, and the information you submit if you apply to our partner teacher programme (your name, your email address, and the description of your teaching that you provide).

3) Why we use your data (purposes)

We use personal data to:

  • Create and manage your account (including sign-in with Google, if you choose it).
  • Provide access to the platform and its features.
  • Provide AI-powered learning features, including explanations, translations, quizzes, summaries, vocabulary review, and spoken conversation practice.
  • Let you replay your own spoken conversation practice sessions.
  • Check and improve the quality of our AI-powered features.
  • Process subscriptions and payments.
  • Connect you to a partner teacher, apply the price that connection carries, and let her send you material.
  • Review applications to our partner teacher programme.
  • Send service emails (e.g., account, subscription, and important updates).
  • Send newsletters and marketing emails (when you opt in, and when permitted by law).
  • Run analytics to understand how the platform is used and improve it.
  • Measure marketing performance (Meta Pixel, where enabled and consented).
  • Protect our forms and prevent spam and abuse (Google reCAPTCHA).
  • Prevent fraud and protect the security of the service.
  • Meet legal obligations (e.g., accounting and tax).

4) Legal bases (GDPR)

We rely on these legal bases under the GDPR:

  • Contract: to provide the service you signed up for. This includes account access, subscriptions, and the AI-powered features that form part of your plan, including spoken conversation practice and the replay of your own sessions. It also covers connecting you to a partner teacher when you open her link, and the discounted price that connection carries.
  • Legal obligation: to comply with laws (e.g., bookkeeping, tax).
  • Legitimate interests: to operate, secure, and improve the service (where appropriate), including protecting our forms from spam and abuse, and reviewing a small number of practice sessions to check quality (see section 6).
  • Consent: for non-essential cookies/trackers and certain marketing activities (where required). You can withdraw consent at any time.

5) Cookies and tracking

We use cookies and similar technologies. We use Complianz Privacy Suite (GDPR/CCPA) Premium to manage cookie consent and preferences.

  • Necessary cookies: required for the site to function (login, security, basic features), including Google reCAPTCHA, which protects our forms from spam and abuse.
  • Analytics cookies: Google Analytics 4 (GA4), deployed through Google Tag Manager and governed by Google Consent Mode. Analytics collection stays off until you consent to Statistics cookies.
  • Marketing cookies/pixels: Meta Pixel to measure marketing performance. Meta Pixel is blocked by default and only loads after you give Marketing consent via our Complianz cookie settings (where consent is required). If you do not consent to Marketing cookies, Meta Pixel will not load.

For full details, see our Cookie Policy and manage your preferences via the cookie settings on the site.

6) AI-powered features

Some parts of Portuguesepedia are powered by artificial intelligence. This section explains what that means for your data.

6.1 Text-based AI features

Our AI assistant, translations, quizzes, summaries, and vocabulary suggestions are generated by AI models operated by third-party providers on our behalf (OpenAI and, for spoken playback of practice items, Microsoft Azure Speech). When you use these features, the text you enter and the relevant lesson content are sent to those providers so that a response can be generated and returned to you.

These providers process this content on our instructions and do not use it to train their models.

6.2 Spoken conversation practice

Spoken conversation practice is an optional feature available on the Plus plan. It lets you hold a spoken conversation in Portuguese with an AI tutor about a lesson you have just studied. You choose when to start a session, and it only runs while you have it open.

Before your first session we ask you to acknowledge a short notice explaining that you are talking with an AI system and how the audio is handled. You are talking with an AI, not a person.

What happens during a session. While a session is running, the audio from your microphone is sent to ElevenLabs, our conversation provider, where it is converted to text, used to generate the tutor’s reply, and answered in a synthesized voice. The lesson transcript, topic, and level are also sent so the conversation stays on topic.

What is stored, where, and for how long. ElevenLabs stores the audio recording and the written transcript of each session for up to 60 days, after which both are deleted. This storage takes place in the United States. We do not store the recording or the transcript on our own servers at any point.

What we store. On our side we keep only information about the session, not its content: the date, how long it lasted, which lesson it related to, how many turns it had, how it ended, and its cost. This is what powers your weekly allowance and our internal reporting.

Replaying your sessions. During the 60-day window you can replay your own sessions, with the transcript shown alongside. When you do, we check that the session belongs to you and then stream the recording directly from ElevenLabs to your browser. No copy is kept by us. After 60 days the recording and transcript are gone, and only the session details described above remain.

Human review. Pedro may listen to a small number of sessions to check that the tutor is behaving correctly and that the audio quality and Portuguese are right. This is how the feature is kept fit for purpose. Sessions are not shared with anyone else.

Automated analysis. ElevenLabs also runs an automated analysis of each finished session that produces a topic label and an indication of how the conversation went. We use this only to spot problems with the feature. It has no effect on your account, your level, or your results.

AI output is not always accurate. The tutor can make mistakes, including mistakes about the Portuguese language. Do not rely on it as a sole source of instruction.

Please do not share sensitive information. Practice sessions are for language learning. Avoid saying anything you would not want recorded, and do not share other people’s personal information during a session.

7) Partner teachers and Teacher Link

Some Portuguese teachers take part in our partner teacher programme and use Portuguesepedia as a resource with their own students. A partner teacher has one Teacher Link. Opening it connects your account to hers.

You choose this. The connection is only made if you open her link, and you can end it at any time from your account page.

What your teacher can see. That you are connected, since when, until when, and a name. Nothing else. She cannot see which lessons you open, your results, your completions, your level, or how much time you spend. She cannot see whether you have a paid subscription or anything about your billing.

The name she sees is yours to choose. It starts as the display name on your account, and you can change it at any time from your account page, to a first name only or to anything else you prefer.

What the connection gives you. A discounted price on Plus for as long as it holds, and the ability for your teacher to send you selections of content with a short note. Those arrive in your notifications under a “Your teacher” tab. You can also mute a teacher, which stops the sending without ending the connection or changing your price.

What we store. The connection itself, the name you have chosen to show her, and the material she has sent you with her note. We also keep an internal record linking your payments to the connection, so we can see how the programme is doing. Your teacher never sees that record.

How long we keep it. Material your teacher has sent you exists for as long as the connection does. When the connection ends, by any route, it goes with it.

If you delete your account. Records of material exchanged with a partner teacher are anonymized rather than deleted: your identifier is removed and the record survives on her side without naming you. The same happens in reverse if she leaves. The internal payment record is deleted outright.

Legal basis. Contract. You create the connection yourself, and the price and the material are what it delivers.

If you apply to become a partner teacher, see “Support communications and applications” in section 2.

8) Who we share data with (processors)

We share personal data with service providers that help us run Portuguesepedia, including:

  • Stripe (payments and recurring billing)
  • Hetzner (hosting)
  • Cloudflare (DNS, CDN, and security/performance services)
  • BunnyCDN (delivery of static assets and audio/video streaming)
  • Google (Google Analytics 4 and Google Tag Manager for analytics; Google reCAPTCHA for form security; Google Sign-in for authentication)
  • Apple (Sign in with Apple, for members who choose it)
  • Meta (Meta Pixel for marketing measurement)
  • Resend (delivery of our transactional and newsletter emails)
  • Google Workspace (our email mailbox, used when we correspond with you, e.g., support)
  • ElevenLabs (spoken conversation practice: speech recognition, generation of the tutor’s replies, synthesized speech, and storage of the session recording and transcript; also the synthesized voice used in some of our lesson audio)
  • OpenAI (AI assistant features: explanations, translations, quiz and summary generation, and vocabulary suggestions)
  • Microsoft (Azure Speech, used to read practice items aloud)

We also use FluentCRM, an email/CRM tool installed on our own website, to manage communications and mailing lists. The emails themselves are delivered through Resend.

Our AI providers may in turn use their own sub-processors to deliver the service. ElevenLabs publishes its current list of sub-processors in its Trust Center.

We share only what is necessary for each provider to perform their role.

9) International data transfers

Some of our service providers are located outside the EU/EEA or may process data outside the EU/EEA (for example, providers based in the United States, such as Stripe, Google, Apple, Meta, Resend, ElevenLabs, OpenAI, and Microsoft).

In particular, spoken conversation practice recordings and transcripts are stored in the United States for the retention period described in section 6.

Where international transfers occur, we use appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) and other legally recognized measures, including adequacy decisions where they apply.

10) How long we keep your data (retention)

  • Account data: kept while your account is active.
  • Learning activity data: kept while your account is active.
  • Spoken conversation practice recordings and transcripts: kept by ElevenLabs for up to 60 days, then deleted. Session details (date, length, lesson, duration, turns) are kept while your account is active.
  • Text submitted to AI features: retained by our AI providers only for the short period needed to deliver the response and to guard against misuse, in line with their standard terms.
  • Teacher connection data: kept while the connection is live.
  • Material sent by a partner teacher: kept while the connection is live, then deleted with it.
  • Partner teacher applications: kept as long as needed to review the application and, where approved, to set up the account.
  • Support communications: kept as needed to handle support and maintain records.
  • Billing and tax records: retained as required by law.
  • Analytics and marketing data: kept according to the settings and retention periods of the relevant tools and consent choices.

Accounts that have been inactive for a long period are deleted under our account hygiene process.

11) Your rights (EU/EEA users)

If you are in the EU/EEA, you have rights under the GDPR, including:

  • Access to your personal data
  • Correction of inaccurate data
  • Deletion (right to be forgotten), where applicable
  • Restriction of processing
  • Objection to processing (including some legitimate interest processing)
  • Data portability (in certain cases)
  • Withdrawal of consent (where processing is based on consent)

To exercise your rights, contact us at [email protected].

12) Account deletion

To request deletion of your account, email [email protected] from the email address associated with your account. Basic members can also delete their account directly from their account page.

Deleting your account removes your account data and your learning activity data from our systems.

One thing to be aware of. Recordings and transcripts of spoken conversation practice are held by ElevenLabs, not by us, and are not deleted at the moment you delete your account. They are deleted automatically at the end of the 60-day retention period described in section 6. If you want them removed sooner, contact us at [email protected] and we will arrange it.

One further note. If you were connected to a partner teacher, records of material exchanged between you are anonymized rather than deleted, so that her own copy survives your account being removed. Your identifier is stripped from them and you are no longer named.

We may keep certain records where required by law (e.g., accounting).

13) Security

We use reasonable technical and organizational measures to protect personal data, including access controls and encrypted connections (HTTPS). Credentials for our AI providers are held only on our servers and are never exposed to your browser. No method of transmission or storage is 100% secure.

14) Children

Portuguesepedia is intended for adults (18 and over). We do not knowingly target or collect data from children. If you believe a child has provided us personal data, contact [email protected].

15) Changes to this statement

We may update this Privacy Statement from time to time. The “Last updated” date will show when changes were made.

16) Complaints

If you are in the EU/EEA and believe we have not handled your personal data properly, you may lodge a complaint with your local data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY).