Legal
Privacy Policy
This policy explains how the Lexuri validation beta (“Lexuri”), operated by Natan Oliveira in Brazil, handles personal data. The beta exists to test whether learning English through music improves engagement and retention. It is not currently a paid service.
natanoliveiraad855@gmail.com
1. Data We Collect
1.1 Account and consent data
- Name and email address
- Password credential managed by Supabase Auth; Lexuri does not receive the plain-text password
- Acceptance date and version for the Terms and this Privacy Policy
- Optional marketing preference and the date it was last changed
1.2 Learning and validation data
- Selected English level and language preferences
- Saved words, translations, review answers, takeaways, personal examples, and generated verses
- Song and album progress, review dates, scores, streaks, badges, and pronunciation results
- Feedback you choose to submit
Lexuri uses the timestamps and completion records above to calculate learning progress and evaluate the beta. It does not use third-party advertising trackers.
1.3 Text and audio sent to AI
- Words, expressions, answers, and takeaways sent for translation, feedback, or generation
- Short speaking recordings sent for transcription and clarity feedback
- A final song recording stored privately only after you explicitly choose to save it
Short speaking recordings are processed in memory and are not saved by Lexuri. Final recordings are kept in a private Supabase Storage bucket and served through temporary signed links.
1.4 Technical data
- Authentication cookies required to keep you signed in
- IP address, browser information, request path, and error details that may appear in hosting logs
- Local browser preferences, such as the selected language and collapsed panels
2. Why We Process the Data
| Purpose | LGPD basis |
|---|---|
| Create the account and deliver the requested learning experience | Contract execution (Art. 7, V) |
| Process optional microphone recordings | Consent (Art. 7, I) |
| Send optional product tips | Consent (Art. 7, I) |
| Protect the beta from abuse and understand aggregate completion/retention | Legitimate interest (Art. 7, IX), balanced against user rights |
| Comply with legal requests and protect rights | Legal obligation or regular exercise of rights (Art. 7, II and VI) |
3. Service Providers
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database, and private recording storage | Account and learning data; saved final recordings |
| OpenAI | Translation, language generation, answer assessment, and audio transcription | Only the text or audio needed for the requested feature |
| Vercel | Application hosting and request delivery | IP address and technical request logs |
| YouTube / Google | Embedded music video playback | Playback and technical data subject to YouTube's own controls |
These providers may process data outside Brazil under their own contractual and security safeguards. OpenAI states that API data is not used for model training unless the customer opts in. Its current data-control documentation lists no abuse-monitoring or application-state retention for audio transcription, while text requests may be retained in abuse-monitoring logs for up to 30 days. See the OpenAI API data controls.
4. Retention and Account Deletion
- Account and learning data remain while the account is active.
- Saved final recordings remain until you replace them or delete the account.
- Feedback is retained while useful for the beta or until a valid deletion request.
- Hosting and provider logs follow each provider's documented retention cycle.
Deleting the account in Settings removes the Supabase Auth user, associated application rows, linked feedback and analytics records, and saved recordings. Limited copies may remain temporarily in provider backups or security logs according to provider policy or legal requirements.
5. Cookies and Local Storage
Lexuri uses essential authentication cookies and local browser storage for app preferences. It does not use advertising cookies or third-party ad trackers.
6. Your LGPD Rights
- Access and information: request confirmation and a copy of your data.
- Correction: update your name in Settings.
- Deletion: permanently delete the account and associated application data in Settings.
- Portability: request a structured export by email.
- Consent: change the optional marketing preference in Settings and decline microphone use without losing non-audio features.
- Opposition or complaint: contact us or the Brazilian data protection authority.
Send requests to natanoliveiraad855@gmail.com. You may also contact the ANPD.
7. Security
- TLS/HTTPS in transit
- Row-Level Security for user-owned database records
- Private storage and short-lived signed URLs for saved recordings
- Server-only API and service-role keys
- Per-user daily quotas for paid AI operations
No internet service can guarantee absolute security.
8. Students Under 18
Lexuri is not available to children under 13. Users aged 13–17 may participate only with authorization from a legal guardian and, for a school-organized test, under the arrangements communicated by the teacher or school. The best interests of the student must prevail.
9. Changes and Contact
Material changes will receive a new document version and, when necessary, renewed acceptance. Questions or complaints can be sent to natanoliveiraad855@gmail.com.