Privacy policy

1. Who is responsible for your data

Practice-BR is a service published by Daisy Oliani, sole trader (entrepreneur individuel), 43 Clos des Cascades, 93160 Noisy-le-Grand, France — SIRET 85 194 793 700 013.

Daisy Oliani is the data controller for the processing described here, within the meaning of the General Data Protection Regulation (GDPR). For anything related to your personal data, write to contato@practicebr.com.

2. What we collect

• Sign-up: your email address, first name (optional), language, Portuguese level and your role (student or teacher).
• Password: stored only in hashed form — not even we can read it.
• Platform use: your answers to exercises (including the texts you write), your scores, the dates of your attempts, your teacher's comments and the ratings you give to activities.
• Audio: if you answer out loud, the recording is used only to produce the transcript and is deleted immediately afterwards. Only the transcribed text is kept.
• Payment: your Stripe subscription identifiers and its status. Your card details go straight to Stripe and never pass through our servers.
• Notifications: if you allow them in your browser, we store the technical address needed to send them.
• Technical logs: server access logs, used for security and to investigate errors.

3. Why we use it (legal bases)

• Performance of the contract: creating your account, showing activities, marking exercises and tracking your progress.
• Legal obligation: billing your subscription and keeping accounting records.
• Legitimate interest: keeping the platform secure and preventing fraud and abuse.
• Consent: sending notifications and reminders — which you can turn off at any time in your preferences.

If you are the student of a teacher on the platform, that teacher can see your activities, your answers and your scores — that is how they follow and correct your work.

4. Who we share it with

We do not sell or hand over your data for advertising. We rely on a few processors, each receiving only the data needed for its job:

Transfers outside the European Union: these providers run servers in the United States, so your data is processed there. We only work with providers offering the contractual safeguards required by the GDPR for such transfers. Sentry is the exception: error data is stored in the European Union, in its Frankfurt region.

5. Artificial intelligence

Your written and spoken answers are marked automatically by artificial intelligence. Two things matter here:

• We send the AI only the text of your answer and the marking criteria for the question. Neither your name nor your email address is sent.
• The AI's score is not the final word: your teacher sees the correction, can comment on it and can override what the machine got wrong. If you want a human to review a correction, ask your teacher or write to us.

6. Cookies

We only use strictly necessary cookies: the ones that keep you signed in and the ones that protect forms against fraud. No Google Analytics, no social media pixel, no advertising cookie — and the platform's fonts, icons and scripts are served from our own domain, so opening a page here tells no other company about it. That is why there is no cookie banner.

7. How long we keep it

For as long as your account is active, so that you and your teacher can follow your progress over time. Once it has gone unused for long enough, the data no longer serves any purpose — so we delete it.

• Account with no activity: deleted 3 years after your last activity on the platform.
• Free trial not taken further: deleted 12 months after the trial ends.
• Active subscription: the account is kept for as long as the subscription runs — the relationship hasn't ended.
• Accounting records: kept for 10 years, as accounting and tax law require. That is a legal obligation, and a deletion request cannot override it.

You get a warning first. Deletion for inactivity never comes as a surprise: we email you 30 days ahead. Coming back and doing a single activity keeps the account and resets the clock. And for as long as the account exists, you can download all of your data from My data.

You don't have to wait for any of these deadlines, of course: you can ask us to delete your account at any time, and it happens immediately.

8. Your rights

At any time, you can:

• find out what data we hold about you and get a copy of it;
• have anything inaccurate corrected;
• ask us to delete your account and your data;
• object to a specific use, or ask for it to be restricted;
• withdraw your consent to notifications, without this affecting the rest of the service.

To exercise any of these, write to contato@practicebr.com. We reply within one month. If you believe your data is not handled properly, you have the right to lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the supervisory authority of the country where you live.

9. Minors

If the student is under 15, the account must be created and authorised by a parent, legal guardian or school. If we find that a minor's account was opened without that authorisation, we delete it.

10. Security

All traffic is encrypted (HTTPS), passwords are stored as hashes and access to the database is restricted. No system is perfect: if an incident puts your data at risk, we will inform you and notify the competent authority within the legal deadline.

11. Changes

If this policy changes in any significant way, we will let you know by email before the change takes effect. The date at the top of the page always shows the version in force.