Privacy Policy
Last updated: 28 July 2026
This policy explains how Learning Portuguese by Daniel Cardoso handles personal data across the website, Android app, accounts, Lessons, My Progress, memberships, media, downloads and support services.
1. Controller and contact
The controller is Daniel Cardoso, creator of Learning Portuguese. Privacy questions and data-rights requests can be sent to contato@learningportuguese.pt or through the website contact form.
2. Data processed
- Account and identity: display name, username, email address, password hash, profile image, registration date and account preferences.
- Google sign-in: name, email address and profile image supplied by Google when you choose Google Login and approve the requested access.
- Learning activity: lesson completions, answers and scores, saved lessons, XP events and totals, streak dates and timezone, daily and weekly mission progress, unlocked badges and reset history.
- Membership and transactions: plan, status, renewal or expiry date, provider, Stripe customer/subscription identifiers or verified Google Play purchase information. Full card details are not stored by Learning Portuguese.
- App and preferences: Android-app access, colour theme, vibration preference, daily-reminder choice and reminder time. Android reminders are scheduled locally on the device after permission is granted; the device also stores the local alarm and vibration settings.
- Support and feedback: name, email, message, feedback content and related correspondence.
- Technical and security: IP address, approximate location, date/time, browser, operating system, app or web access, device information where available, language, timezone, screen information, login/security events and error logs.
- Analytics and marketing: page visits, interactions, traffic source, device/browser identifiers and advertising events, but only when the relevant optional cookie choice permits them.
3. Purposes and legal bases
- Provide accounts, learning features, progress sync and memberships: performance of a contract or steps requested by you.
- Process and administer payments: performance of a contract and legal accounting obligations.
- Protect accounts, prevent misuse and maintain the service: legitimate interests in security and reliability.
- Answer support or rights requests: requested service and legal obligations.
- Analytics and advertising measurement: consent, which can be refused or withdrawn through Cookie settings.
- Local Android notifications and vibration: your device permission and settings, which you can change in the app or Android settings.
4. Automated progress features
XP, streaks, missions and badges are calculated automatically from recorded learning activity. They motivate learning and unlock visual achievements; they do not have legal or similarly significant effects and do not have monetary value.
5. Recipients and service providers
Data is shared only where needed to provide a feature. Providers may include Hostinger and WordPress services (hosting and site operation), Google (Login, Site Kit/Analytics where consented, Google Play purchases and external services), Stripe (website memberships and payments), Meta (advertising measurement where consented), YouTube (video), IP-geolocation/security services, Classgap (private lessons), and book or download platforms such as Amazon, Google Play Books and Gumroad. External services apply their own privacy policies.
6. International transfers
Some providers may process information outside Portugal or the European Economic Area. Where applicable, transfers rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism used by the provider.
7. Cookies, local storage and app storage
Essential cookies and storage support login, security, progress and preferences. Analytics and marketing technologies are disabled until the relevant choice is made. Details and controls are available in the Cookie Policy.
8. Retention
Account and learning data are normally kept while the account remains active. Support records are kept as needed to resolve the request. Security records are retained only as long as reasonably necessary for protection and dispute handling. Transaction and accounting records may be retained for legally required periods. Optional analytics and advertising data follow the provider and consent settings described in the Cookie Policy.
9. Your rights
Under applicable data-protection law, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent at any time without affecting earlier lawful processing. You may complain to Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
10. Account deletion
You can request deletion through the Delete Account page. Deleting the account does not itself cancel a Stripe or Google Play subscription; cancel recurring billing with the relevant provider first. Limited transaction, legal or fraud-prevention records may be retained where required.
11. Children
The service is designed primarily for adult and older learners. Children should use it only with appropriate permission and supervision from a parent or legal guardian. Please contact Learning Portuguese if you believe a child supplied personal data without appropriate authorisation.
12. Security and changes
Reasonable technical and organisational safeguards are used, although no online service is completely risk-free. This policy will be updated when data practices or services materially change; the date above identifies the current version.