Privacy Policy

1. Controller and contact

Daniel Cardoso, creator of Learning Portuguese, is responsible for the personal data processed through this service. For privacy questions or to exercise your rights, email contato@learningportuguese.pt or use the contact form.

2. Data we process

• Accounts: email address, account identifier, username, password hash, registration information and account preferences. Passwords are stored as hashes, not readable passwords.
• Learning activity: answers, results, completions, XP, badges, daily and weekly activity, and video playback progress where saving is available. The same activity may share a progress record across Guided Journey and other learning pages.
• Smart Review: saved vocabulary, flashcards, imported deck content, review answers, ratings and scheduling information. Import only content you are entitled to use and avoid including sensitive information or other people's personal data.
• Private lessons: booking requests, selected times, confirmation and cancellation history, lesson credits, and messages exchanged about a booking.
• Purchases and Membership: products or plans, payment status, transaction references, subscription identifiers and access dates supplied by the payment provider. Learning Portuguese does not store full payment-card numbers or security codes.
• Support: the name, email address and message you submit, together with related correspondence.
• Technical information: session identifiers and information needed to deliver and protect the site, such as IP addresses, request times, browser information and security or error logs.
• Preferences: your colour theme, translation language, audio volume and temporary navigation choices.

Visitors can use available content without an account. A temporary browser identifier connects their activity during the visitor session. Choosing to register or sign in from an activity can associate the supported activity and its progress with the account.

3. Why we use this information

• Providing requested services: accounts, saved learning, reviews, bookings and paid access are processed to perform our agreement with you or take steps you request before a purchase.
• Payments and records: transaction information supports fulfilment and applicable tax, accounting and other legal obligations.
• Security and reliability: our legitimate interests include protecting accounts, preventing misuse, investigating errors and keeping the service working.
• Contact and rights requests: we use the information needed to answer your request, provide support and comply with data-protection obligations.
• Consent: where an optional use requires consent, we will ask before starting it. You may withdraw consent without affecting processing that was lawful before withdrawal.

With your optional consent, Google Analytics measures visits, pages viewed and engagement to help improve the website. Google receives browser and device information, approximate location and a cookie identifier. We do not send account names, email addresses, answers or booking identifiers to Analytics. Advertising personalisation and Google signals are disabled. No Meta advertising tag is used. You can accept, reject or withdraw analytics consent through Cookie settings.

4. Automated learning features

Answers, progress, XP, badges and review schedules can be calculated automatically from your activity. These features guide and encourage study; they do not certify language ability or make decisions with legal or similarly significant effects. Rewards have no cash value.

5. Service providers and external destinations

Information is shared as needed to operate a feature, fulfil a purchase, answer a request or meet a legal obligation.

• Hosting and email providers operate the website, its database and support correspondence. The website uses WordPress.
• Formspree receives and processes messages submitted through the contact form.
• Stripe processes payments made through Stripe checkout and provides transaction information needed to administer purchases and access.
• YouTube supplies embedded videos. Loading a player connects your browser to YouTube.
• ClassGap, Amazon, Google Play Books and Gumroad handle services or purchases you choose on their platforms. Visiting a link does not transfer your Learning Portuguese account or learning record to that platform.

External providers describe their processing in their own privacy notices, including Formspree, Stripe and Google and YouTube.

6. International processing

Some providers process information outside Portugal or the European Economic Area. Where a transfer is subject to data-protection requirements, the applicable basis may include an adequacy decision or appropriate contractual safeguards. Contact us for information about safeguards relevant to your data.

7. Cookies and browser storage

Cookies and browser storage support account sessions, temporary visitor activity, security and the preferences you select. See the Cookie Policy for the technologies used and how to manage them.

8. How long information is kept

Account and learning information is normally kept while your account is in use so that you can return to your studies. Visitor access expires after eight hours; expiry ends access to the temporary session and does not itself mean every related server record has been deleted.

Support and booking records are kept for as long as needed to handle the request, provide the service and resolve relevant disputes. Account-access security records include sign-in or authenticated-access times, IP addresses, approximate country/region/city derived locally from the IP address, and browser/device categories. They are used to investigate unusual access, are visible only to authorised administrators, and are separate from optional Analytics. These records are retained for up to 30 days (with daily cleanup) and limited to the latest 100 entries per account. Approximate IP location may be inaccurate and is not proof of identity. IP addresses are not sent to the geolocation database provider. Other security records are kept according to their protection and investigation purpose. Transaction records may need to be retained for statutory accounting periods. Information no longer needed should be deleted or anonymised; backup copies may remain until replaced under the backup cycle.

9. Your data-protection rights

Subject to the conditions in applicable law, you can request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. We may need proportionate information to verify your identity before acting on a request.

You may also complain to Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or another competent supervisory authority.

10. Deleting an account

Request account deletion through Contact or by emailing contato@learningportuguese.pt. Deleting an account can remove access to saved progress, decks and booking history. Limited records may still be retained where a legal obligation or legitimate need requires them.

An account-deletion request is not a substitute for cancelling recurring billing. Cancel through the purchase provider or contact us for help with a website purchase, and check that cancellation has been confirmed.

11. Younger learners

The service is primarily intended for adult and older learners. A parent or legal guardian should supervise children's use and provide authorisation where required. Contact us if you believe a child has supplied personal data without the necessary authorisation.

12. Security and updates

We use technical and organisational measures intended to protect personal data, although no online service can guarantee absolute security. Changes to our processing will be reflected in this policy. The date above identifies this version.