Back to site

Privacy Policy

This policy explains what personal data LangNow collects, what we use it for, who we share it with, and how you can exercise your rights, in accordance with Brazil's General Data Protection Law (Law 13,709/2018 — LGPD). Effective as of September 12, 2026.

1. Who processes your data

LangNow is a product of PrimeCode Tecnologia, Brazilian company registration (CNPJ) 67.627.746/0001-09, headquartered in Porto Alegre, Brazil, which acts as the controller of the personal data described here. For any matter related to this policy, including exercising your rights, write to contato@langnow.club.

2. What data we collect

We only collect what each feature of the service needs. By moment of use:

  • Account creation: email and password. Your password is stored by our authentication provider only in encrypted form (hashed) — not even we can access it. If you sign in with Google (once that feature is available), we receive your name, email and profile photo from Google.
  • Completing your signup: name, phone number and country.
  • Receiving a lesson PDF from the Academy (no account needed): the email you enter, the lesson requested, the date of the request and whether you ticked the box to receive news. We use the email to send the PDF you asked for. We only send tips and PDFs of new lessons if you tick the box (it is unticked by default), and every message includes an unsubscribe link. To limit abuse, we keep only an encoded version (hash) of your IP address, never the IP itself. You can ask for this data to be deleted at any time through the contact given in this policy.
  • Free e-book from the /guia page (no account needed): the name and email you enter, the date of the request and whether the e-book download link was opened. We use the email to send the e-book and, as the form states, a few emails with study tips; every message includes a one-click unsubscribe link. The name is only used to personalize the messages. To limit abuse, we keep only an encoded version (hash) of your IP address, never the IP itself. You can ask for this data to be deleted at any time through the contact given in this policy.
  • Profile (optional): nickname and photo. Your nickname forms your public referral link (langnow.club/your-nickname). Anyone who opens that link sees your name, nickname and photo in the "referred by" message.
  • Study activity: the words you've studied and each one's status, daily goal, study days, streak, active category, personal vocabulary and preferences (languages, theme, card mode). This data is synced so your progress looks the same on all your devices.
  • Pronunciation assessment: when you record a sentence, your voice recording is sent for analysis and stored in private storage, along with the recognized transcript, the score and the raw assessment result. Only you can access your recordings, through temporary links.
  • Mini Drive: the files you save (screenshots, images, PDFs, text files and documents), with the name, size, tags and notes you write. They are kept in private storage, visible only to you and with no public link; images are compressed on your device before upload, which also strips location data embedded in the photo. Files may contain personal data that you yourself include — only upload what you want to keep. LangNow staff (system administrators) may open your files when necessary — to provide the support you request, to investigate a report or abuse, or to comply with a legal obligation. This access is read-only, and every opening is logged (who, when and why).
  • Payment and subscription: when you pay by Pix or card, we ask for an identification document — CPF (Brazilian tax ID) in Brazil, or a passport number outside Brazil — and your billing address. The document guarantees one account per person and is required by our payment processor; it is recorded once and cannot be changed by you afterward. Your CPF or passport, email, phone, postal code and address are sent to our payment processor to create the charge. Card data is tokenized in your own browser directly with the processor — your card number never passes through our servers and is never stored by us. We keep a record of the order (amount, payment method, status and the processor's identifiers) and of the subscription.
  • Payment by someone else (payment link): the person paying enters their own details — document, address and card — on the payment processor's page. We keep the payer's name, document and email on the order, to reconcile the payment and prevent fraud; this data does not become part of the student's account.
  • Referral program and wallet: who referred whom, commissions, bonuses, balance and statement. To request a payout, your payout details (Pix key — Brazil's instant payment system) and the version of the terms you accepted.
  • Global Partners program: the information provided in your application, including social media links (Instagram, YouTube, TikTok or other).
  • In-app notifications: alerts stored on your account, such as "someone joined through your link."
  • Technical data: the providers that host the service automatically log IP address, browser, date and time of requests, for security and operation. We use advertising (Google AdSense) on the site's public pages, such as the LangNow Academy — only for people who authorize the Marketing category (section 3). We currently don't use behavioral analytics tools.

3. Cookies and storage on your device

To work, the app stores in your browser's local storage (localStorage and sessionStorage): your login session, a copy of your progress and preferences, the referral code of whoever invited you (for up to 90 days after you open an invite link), where to take you after logging in, the access keys to your account's content library, and your cookie choice. If you install the app (PWA), your browser also caches the app's files to open faster. This storage is essential: the service does not work without it, so it does not depend on consent.

On your first visit, we show a notice so you can choose which optional categories you allow:

  • Essential — sign-in, security and site preferences. Always on.
  • Analytics — understand, in aggregate, how the site is used.
  • Marketing — measure campaigns and show more relevant ads.

We currently use no analytics tools. We use Google AdSense to show ads on the site's public pages — loaded only for people who allow the Marketing category. Google may use cookies to personalize ads based on your browsing; you can adjust or turn off this personalization at adssettings.google.com. If we start using an analytics tool as well, this policy will be updated with the provider's name. You can change your choice at any time through the "Cookie preferences" link in the site footer. Clearing the site's data in your browser removes all of this, including your choice — your progress comes back from the cloud on your next login, and the notice appears again.

4. What we use the data for

  • Provide the service: keep your account running, deliver the content library, record and sync your study activity.
  • Assess your pronunciation and generate the correction tip.
  • Store and organize the files you upload to Mini Drive.
  • Process payments, subscriptions and renewals.
  • Run the referral program: attribute referrals, calculate and pay commissions and bonuses.
  • Prevent fraud and duplicate accounts (one account per document).
  • Communicate about your account: password recovery, payment confirmation, referral program alerts.
  • Comply with legal, tax and regulatory obligations.
  • Improve the product, based on aggregated data that doesn't identify you.

The legal bases are performance of our contract with you (LGPD art. 7, V), compliance with a legal obligation (art. 7, II), legitimate interest in security and fraud prevention (art. 7, IX) and, where applicable, your consent (art. 7, I) — for example, for on-device notifications, which will only exist if you authorize them in your browser and which can be turned off at any time, and for optional analytics and marketing cookies (section 3).

5. Who we share it with

We don't sell personal data. We share browsing data for advertising only with people who allow the Marketing category (section 3), with the partner listed below. We use processors that handle data on our behalf, each only with what its function requires:

  • Supabase — database, authentication, file storage and server functions. Servers in the United States.
  • Vercel — hosting for the site, the app and server functions.
  • Microsoft Azure (Speech service) — receives your voice recording to generate the pronunciation assessment. Brazil South region.
  • OpenAI — receives the target sentence, the text the speech recognizer understood and the score, to generate the correction tip in Portuguese. It doesn't receive your audio or data that identifies you.
  • Cloudflare (R2) — private storage for voice recordings, the content library's audio and Mini Drive files.
  • Pagar.me / Stone — payment and subscription processing.
  • Asaas — Pix transfers for commission payouts.
  • Resend — transactional email delivery.
  • Google — YouTube, on the Global Partners page: the presentation video thumbnail comes from YouTube servers (which sends your IP address to them), and the player, in its cookie-free version (youtube-nocookie.com), only loads when you click to watch. Once available, also Google sign-in. On the site's public pages, such as the LangNow Academy, we use Google AdSense to show ads to people who allow the Marketing category (section 3) — Google may use cookies to personalize these ads based on your browsing; see or turn off this personalization at adssettings.google.com.
  • Flagpedia (flagcdn.com) — country flag images in the sign-up form; displaying them sends your IP address to that service.

We may also share data when required by law, court order or a competent authority.

6. International transfer

Some of the processors above store or process data outside Brazil, mainly in the United States. These transfers rely on those providers' contractual clauses and data protection commitments, as set out in LGPD art. 33.

7. How long we keep it

We keep your data for as long as your account exists. Records of orders, payments, subscriptions and paid commissions may be kept for the period required by tax law and statutes of limitation, even after your account is deleted. Voice recordings are kept for as long as the account exists; you can request their deletion at any time. Mini Drive files are kept for as long as the account exists; when you delete a file it is removed from storage, and when the account is deleted all of your files are erased.

8. Your rights

Under LGPD art. 18, you can request at any time: confirmation that we process your data; access to it; correction of incomplete or outdated data; anonymization, blocking or deletion of unnecessary data; portability; information about who we share it with; withdrawal of consent; and objection to processing you consider improper. To exercise any of these, including deleting your account, write to the email in section 1. We respond within 15 days.

9. Security

Access to the database is restricted by rules applied per user (each person only sees their own data), passwords are never stored in plain text, the content library is distributed encrypted, traffic uses HTTPS, voice recordings and Mini Drive files sit in private storage behind temporary links, and your identification document is validated and protected against tampering. No system is completely secure; if an incident occurs that could pose a meaningful risk to you, we will notify you and Brazil's National Data Protection Authority (ANPD), as required by the LGPD.

10. Children and teenagers

The service requires an identification document and payment, and is intended for people 18 and older. If we identify an account belonging to a minor created without guardian authorization, it will be removed.

11. Changes to this policy

The version and last-updated date appear at the top of this page. Significant changes will be communicated in the app or by email. Continued use of the service after that communication indicates awareness of the updated version.