Privacy Policy
Last updated: July 20, 2026
This Privacy Policy describes how the estudeia platform (“we”, “the platform”), available at estudeia.com.br, collects, uses, stores and protects users’ personal data (“you”), in accordance with Brazilian Law No. 13.709/2018 (General Data Protection Law — LGPD).
1. Data controller
The controller of the personal data processed on this platform is the party responsible for estudeia. To exercise your rights or ask questions about privacy, contact us at contato@estudeia.com.br.
2. What data we collect
| Category | Data | Source |
|---|---|---|
| Identification and account | Name, e-mail address and profile picture | Provided by Google when you sign in with your Google account |
| Study data | Decks and flashcards, study plan, mock exams and answers, mistake log, watched lessons, XP, level, streak, leaderboard, groups and duels | Generated by your use of the platform |
| Payment data | Record of Pix charges (status, amount, date and transaction identifier). We do not collect or store card data. | Processed by Mercado Pago |
| Technical data | IP address, device/browser type and access logs, used for security and abuse limiting | Collected automatically |
3. Why we use your data
- Authenticate your access and maintain your account and study progress;
- Generate and display flashcards, study plans, mock exams, lessons, leaderboard, groups and duels;
- Process Pix payments and unlock paid features;
- Generate content with artificial intelligence (study plan and mock exams) from the exam syllabus you provide;
- Ensure platform security, prevent fraud and abuse, and limit misuse;
- Comply with legal and regulatory obligations.
4. Legal basis for processing
We process your data based on performance of a contract (to provide the service you hire), legitimate interest (platform security and improvement), compliance with legal obligations and, where applicable, your consent.
5. Sharing with third parties
We do not sell your data. We share data only with providers necessary for the service to work:
- Google — authentication (Google sign-in), AI content generation (Google Gemini) and video lesson search (YouTube Data API). See the Google Privacy Policy.
- Mercado Pago — Pix payment processing. See the Mercado Pago Privacy Policy.
- Hosting infrastructure on a dedicated server, where data is stored securely.
We may also share data when required by law or by a competent authority.
6. How long we keep it
We keep your data while your account is active. Payment records may be retained for the period required by tax legislation. After account deletion, personal data is erased or anonymized, except where retention is legally required.
7. Your rights (LGPD)
At any time you may request: confirmation that processing exists; access to your data; correction of incomplete or outdated data; anonymization, blocking or deletion of unnecessary data; portability; information about sharing; and withdrawal of consent. To exercise these rights, write to contato@estudeia.com.br.
8. Security
We adopt technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed password storage, token-based authentication and access limiting. No system is completely immune to incidents, but we continuously work to reduce risks.
9. Minors’ data
The platform is intended for people aged 18 or over. We do not knowingly collect data from minors without guardian consent.
10. Changes to this policy
This Policy may be updated at any time. The last update date is shown at the top. Relevant changes may be announced on the platform.
11. Use of YouTube API Services
The estudeia lesson track uses the YouTube API Services to search for and display videos. By using this feature, you agree to the YouTube Terms of Service, and data processing by Google follows the Google Privacy Policy.
- What we access: YouTube search results (video title, channel name, thumbnail and video identifier), used so you can build your lesson track by subject.
- Storage: we temporarily cache search results for up to 7 days to reduce repeated calls to the API; the videos you add to your track are associated with your account.
- Display: videos are played exclusively through the official YouTube embedded player.
- Deletion and revocation: you can remove videos from your track at any time and, when you delete your account, this data is erased. To revoke your Google account access, use the Google Account permissions page.
12. Contact
Questions about this Policy or about the processing of your data can be sent to contato@estudeia.com.br.
← Back to estudeia