Privacy Policy

Last updated: April 22, 2026

This Privacy Policy describes how English Right Now ("we", "us") collects, uses, shares, and protects personal information when you use our platform. We are committed to processing data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD).

1. Information We Collect

We collect: (a) information you provide directly (name, email, password, profile details, messages you send through support); (b) transaction data (purchases, subscription status, billing records, without storing full card details); (c) usage data (pages viewed, lessons watched, progress, device and browser information, IP address); (d) cookies and similar technologies for authentication and analytics.

2. How We Use Your Information

We use personal information to: (a) provide and maintain your access to purchased courses; (b) authenticate and secure your account; (c) process payments and prevent fraud; (d) communicate about orders, course updates, and support requests; (e) analyze usage to improve the platform; (f) comply with legal obligations.

3. Legal Basis for Processing

Under GDPR and LGPD, we rely on: (a) performance of a contract (to provide purchased services); (b) consent (for optional marketing communications); (c) legitimate interests (platform security, fraud prevention, product improvement); (d) legal obligation (tax, accounting, regulatory requirements).

4. Sharing with Third Parties

We share information only with service providers necessary to operate the platform: Supabase (authentication and database hosting), Stripe or other payment processors (payments), Brevo (email delivery), Cloudflare R2 (video and file storage), and analytics providers. These providers act as data processors under written agreements. We do not sell personal data.

5. International Data Transfers

Some of our service providers are located outside your country of residence. When we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognized by applicable law.

6. Cookies and Tracking

We use essential cookies for authentication and session management. With your consent, where required, we may use analytics cookies to understand aggregate usage patterns. You can manage cookie preferences in your browser settings; disabling essential cookies will prevent you from using core features.

7. Data Security

We apply technical and organizational measures to protect personal data: encryption in transit (TLS), encryption at rest where applicable, access controls, audit logs, and regular security reviews. No system is perfectly secure; in the event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by law.

8. Data Retention

We retain personal data for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, and dispute-resolution requirements. Transaction records are retained according to applicable tax and commercial law (typically 5 to 10 years). You can request deletion of non-essential data at any time.

9. Your Rights

Under applicable data protection laws, you have the right to: (a) access the personal data we hold about you; (b) correct inaccurate data; (c) request deletion of your data (subject to legal retention requirements); (d) object to or restrict certain processing; (e) data portability; (f) withdraw consent at any time; (g) lodge a complaint with a data protection authority. To exercise these rights, contact us through the support channel.

10. Children's Privacy

The platform is not directed to children under 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a minor without verifiable parental consent, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated by email or prominent notice in the platform. The "Last updated" date at the top reflects the latest version.

12. Contact

Questions or requests related to privacy can be sent through the support channel available inside the platform.