Privacy Policy

Last updated: August 11, 2026

Talgio Ltda ("Talgio", "we", "our", or "us") operates the Guaranive mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By creating an account or using the App, you agree to the collection and use of information as described here. If you don't agree, please don't use the App.

1. Information We Collect

• Account information: your email address, password (stored securely and never visible to us in plain text, via Supabase Auth), and display name.
• Learning data: your course progress, XP, streaks, completed lessons, and spaced-repetition review state — used to personalize and resume your learning.
• Voice recordings: if you use the pronunciation-practice feature, we record your microphone audio for the duration of that exercise, upload it to secure cloud storage, and use it solely to score your pronunciation against a native reference recording. Your recordings are automatically deleted no later than 90 days after upload.
• AI tutor conversations: if you use the AI tutor chat, the lesson context and the messages you type are sent to our AI provider to generate a reply. Your account identity (email, name, user ID) is not included in that request.
• Device and usage data: basic app usage analytics and crash diagnostics (device model, OS version, stack traces) collected automatically to help us fix bugs and understand feature usage in aggregate.
• Language preference: your chosen interface language (Portuguese or Spanish).

We do not collect your location, contacts, or camera input, and we do not access your microphone outside of the pronunciation-practice feature you explicitly start.

2. How We Use Your Information

• To create, secure, and manage your account.
• To provide, personalize, and improve the App's lessons, tutor, and pronunciation scoring.
• To diagnose and fix technical issues.
• To send you account-related email (such as a welcome message when you sign up).
• To understand, in aggregate, how the App is used so we can improve it.

We do not sell or rent your personal information, and we do not use it for third-party advertising.

3. Who We Share Data With

We use the following service providers to operate the App. Each processes only what's needed for its specific function:

• Supabase — authentication, database, and file storage. supabase.com/privacy
• OpenAI — powers the AI tutor chat feature; receives lesson context and your typed messages, not your account identity. openai.com/privacy
• Our pronunciation-scoring service — a service we operate (hosted on Railway) that receives your recording's URL solely to compute a pronunciation score; it does not store your recording.
• Firebase (Google) — crash reporting (Crashlytics) and basic usage analytics. firebase.google.com/support/privacy
• Our transactional email provider — sends account-related emails (e.g. welcome email) on our behalf.

We may also disclose information if required by law, or to protect the rights, safety, or property of Talgio, our users, or the public.

4. Data Retention

• Account and learning data: retained for as long as your account is active.
• Voice recordings: deleted no later than 90 days after upload, regardless of account status.
• Crash and analytics data: retained per our providers' default retention windows (typically 90 days to 14 months, depending on the data type).

When you request account deletion (see below), we delete your account data and any remaining voice recordings within a reasonable time, except where we're required to keep limited records for legal or security purposes.

5. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated data.
• Withdraw consent for optional data uses at any time.
• Opt out of analytics collection by uninstalling the App.

The App does not yet offer self-service account deletion — to exercise any of these rights, contact us at the email below and we'll handle your request directly.

6. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

7. International Data Transfers

Talgio is based in Brazil. Some of our service providers process data outside Brazil (including in the United States). Where this happens, we rely on our providers' standard safeguards for cross-border data transfers.

8. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS) for all data in transit and secure credential storage via Supabase Auth. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the date at the top of this page when we do. Continued use of the App after a change means you accept the updated policy.

10. Governing Law

This Privacy Policy is governed by the laws of Brazil, including the Lei Geral de Proteção de Dados (LGPD).

11. Contact

Talgio Ltda
Questions about this Privacy Policy, or requests to exercise your data rights:
[email protected]