Legal document
Privacy Policy
This is an English translation of the Política de Privacidade. Lanna is operated by a Brazilian company and this policy follows the Brazilian General Data Protection Law (LGPD). If the two versions differ, the Portuguese version prevails.
In short
This summary helps you read the policy, but it does not replace the full text below.
- We use your data to make Lanna work: your account, your materials, your progress and, if you are in a class, your teacher's follow-up.
- We do not sell your data.
- Part of the work is done by partner services, such as artificial intelligence, hosting and payment providers, most of them in the United States.
- Analytics cookies are only used if you tap Accept on the cookie notice. You can change this at any time.
- If you are in a class, the teacher sees your progress and your answers in the activities.
- You can see, correct, take and delete your data. You can delete your account at any time in Account › Danger zone.
1. Who takes care of your data
The controller of your personal data, that is, who decides how it is processed on Lanna (the website lannaapp.com and the iOS app), is:
- Responsible party: Renyer Santos (individual)
- City: São Paulo, Brazil
Data protection officer (encarregado): Renyer Santos, at support@lannaapp.com.
This policy follows the Brazilian General Data Protection Law (LGPD, Law 13,709/2018) and the Brazilian Internet Civil Framework (Law 12,965/2014). It complements the Terms of Use.
2. Who this policy applies to
Everyone who uses Lanna: students, teachers, school representatives and website visitors. When a teacher or school uses Lanna with their students, this policy also explains what they can see (section 6). If you live outside Brazil, you can exercise the same rights described here, and any additional rights your local law gives you.
About student data: Lanna is the controller of all users' account and study data. The teacher or school is an independent controller of what they obtain or produce through their classes (for example, lesson recordings and notes) and is responsible for how they use it. Schools with their own contract may sign an agreement in which Lanna acts as processor of their class data. This is the same rule as section 12 of the Terms of Use.
3. Data we process, why and on what legal basis
We only collect what each purpose requires. The legal bases are those of article 7 of the LGPD.
| Data | Why | Legal basis |
|---|---|---|
| Account: name, e-mail, password (stored only as a hash), native language, language you study or teach, level, profile (student or teacher), approximate number of students (teachers); if you sign in with Google, also your Google name, photo and account ID; date and version of the terms you accepted. | Create and keep your account, let you sign in, personalize the app and record your acceptance. | Performance of a contract (art. 7, V); record of acceptance: regular exercise of rights (art. 7, VI). |
| Study: materials you create (topics, texts, audio files, YouTube links and their transcripts), saved words and translations, flash cards and reviews, answers in exercises, writing and grammar, recorded mistakes, AI chat conversations, XP, streak, achievements, goals and listening time. | Provide the service: generate and show materials, correct activities, schedule reviews, show your progress and suggest what to study. | Performance of a contract (art. 7, V). |
| Voice: recordings made in the Pronunciation and Speaking modes and in speaking activities during lessons (section 4). | Transcribe and assess your speech, reply in the conversation and let you listen to your recording again. | Performance of a contract (art. 7, V). We do not use your voice to identify you. |
| Classes: classes you belong to, assignments and submissions, announcements read, teacher feedback, certificates, answers in presentation activities, lesson chat messages; e-mails of people invited by a teacher. | Make classes work and let the teacher follow and guide students; send the invitation to the invited person. | Performance of a contract (art. 7, V); invitations: legitimate interest (art. 7, IX). |
| Live lessons: image and voice streamed in real time, name and participation; the recording, when the teacher decides to record. | Run the lesson and, if recorded, let the class watch it again. | Performance of a contract (art. 7, V); recording: legitimate teaching interest (art. 7, IX), with an on-screen notice to participants. |
| Payments: plan, subscription status and dates, Stripe customer and subscription IDs, coupons used. Card and boleto details (including the Brazilian taxpayer ID, CPF, when required) stay with Stripe; Lanna does not receive them. | Charge, unlock the plan, show your subscription and meet tax and accounting obligations. | Performance of a contract (art. 7, V); legal obligation (art. 7, II). |
| Referrals: the teacher who referred you, the coupon used, the resulting subscriptions and commissions. | Calculate and pay commissions and prevent fraud in the program. | Performance of a contract (art. 7, V); legitimate interest (art. 7, IX). |
| Communications: e-mails sent (type and date), your notification preferences and, in the iOS app, the device identifier for push notifications. | Send essential messages (account, security, payment, classes) and, unless you turn them off, study reminders and news. | Performance of a contract (essential); legitimate interest, with an opt-out (optional); consent for push notifications, through the device permission (art. 7, I). |
| Technical and security: IP address, access date and time, browser and device, error logs and sign-in attempts. | Keep the service secure, prevent fraud and abuse, diagnose failures and keep the access logs required by law. | Legitimate interest (art. 7, IX); legal obligation (art. 7, II; Internet Civil Framework, art. 15). |
| Usage analytics (only with your consent): pages viewed, clicks and in-app events, device, browser and approximate location from the IP address. | Understand how Lanna is used, measure campaigns and improve the product. | Consent (art. 7, I), given through the cookie notice (section 10). |
| Support: messages you send us and bug reports (in the beta program, also screenshots and audio you choose to send). | Answer and fix problems. | Performance of a contract (art. 7, V); legitimate interest (art. 7, IX). |
| AI usage: an internal log of which AI features were used, when and how much. | Control costs and the limits of each plan. | Legitimate interest (art. 7, IX). |
We do not ask for sensitive personal data (such as health, religion or sexual orientation). Please avoid including it in your texts, messages and recordings.
4. Voice recordings and live lessons
- Pronunciation: your recording is sent to the transcription service, compared with the expected sentence and deleted from our server right after. We keep the recognized text and the score when they appear in your mistakes history.
- Speaking: each turn is transcribed and the recording is kept so you can listen to it again, together with the conversation. It is deleted when you delete your account.
- Microphone and camera: used only after you grant permission in the browser or on your device, and only while you use a voice feature or a live lesson.
- Live lessons: audio and video travel in real time through LiveKit's infrastructure and are not recorded by Lanna on its own. The teacher may decide to record the lesson: the recording captures the teacher's screen, which includes the slides, the cameras and the audio of whoever appears. While the lesson is being recorded, participants see the notice “This class is being recorded”. The recording is available to the class (or to the student, in a one-to-one lesson) and is deleted automatically after 90 days, or earlier if the teacher deletes it.
5. Artificial intelligence
To generate sentences, translations, exercises, corrections, chat replies, synthetic voice, transcripts and images, we send the AI providers listed in section 7 only what each task needs: for example, the material's text, your answer, your message or your voice recording.
- We use these services through their business interfaces (APIs), and each provider handles the data under its own terms. OpenAI, for example, states that it does not use data received through its API to train its models unless authorized, and may keep it for a limited period for security and abuse prevention.
- We do not send your e-mail or payment data to AI providers. What goes is the content the task needs, which only contains personal data if you include it in your text or speech.
- Pronunciation scores, corrections and suggestions are generated automatically and can be wrong. They have no legal effects, but you can ask the class teacher or us to review any automatic assessment (LGPD, art. 20).
6. What teachers and other people see
Your class teacher
When you join a class, its teacher (and, on the School Plan, whoever manages the seats) can see:
- your name, e-mail, photo, level, plan and sign-up date;
- a summary of your study on Lanna: XP and level, study days, listening time, number of saved words and recent activities with material titles, including materials you study on your own;
- the progress of the class assignments and which activities you completed;
- your answers and mistakes in writing and pronunciation in the class materials, so they can correct them and give feedback;
- your answers in presentation activities, your participation and messages in live lessons, and whether you read the class announcements.
You can leave a class at any time; from then on the teacher no longer sees your new data. Teachers may only use this data for teaching (section 12 of the Terms of Use).
Other people
- Classmates: can see your name and photo in the class and in live lessons, and the messages you send in the lesson chat.
- Leaderboard: your name, XP, level and streak appear on the leaderboard to other people learning the same language.
- Certificates: a certificate issued to you has its own link, which shows your name, the class and the teacher to anyone who has the link.
- Teacher public profile: only exists if the teacher turns it on, and shows the information they choose to publish.
- Lanna team: people on our team have restricted access to data, only when needed for support, security and maintenance.
8. International transfers
Most of the services in section 7 are in the United States or use global networks, so your data is transferred outside Brazil. We do this under article 33 of the LGPD: the transfer is necessary to perform our contract with you (art. 33, IX), and the providers commit contractually to protect the data, through contractual clauses, including the standard contractual clauses approved by the Brazilian data protection authority (ANPD Resolution CD/ANPD 19/2024) where applicable. For analytics tools, the basis is your consent.
9. How long we keep data
| Data | How long |
|---|---|
| Account and study data | While the account exists. When you delete your account, we delete it right away (see below). |
| Pronunciation voice recordings | Not kept: they leave the server right after transcription. |
| Speaking voice recordings | While the account exists. |
| Live lesson recordings | 90 days (the teacher may delete them earlier). Also deleted if the teacher deletes their account. |
| Lesson chat messages | While the class exists; yours are deleted if you delete your account. |
| Access logs (IP, date and time) | 6 months, as required by article 15 of the Brazilian Internet Civil Framework. |
| Payments | At Stripe, for the period required by law and payment rules; tax and accounting records for the legal period (usually 5 years). |
| Usage analytics (with consent) | For the retention period configured in each tool. This data does not include the content of your studies. |
| Referral commissions | Records of amounts, without contact details, for the legal accounting period. |
What happens when you delete your account
- You delete it in Account › Danger zone › Delete account and it starts right away: your subscription is cancelled, your sessions end and your materials, words, reviews, progress, achievements, messages, voice recordings and notifications are deleted.
- The account record becomes an anonymous record, with no name, e-mail, photo or payment data, so that shared records (classes, assignments, commissions and costs) stay consistent.
- If you are a teacher, your classes are archived: students keep the copies of the materials they already received, along with the assignments, announcements and certificates issued.
- Synthetic voice files of your materials (generated by AI, not your voice) may remain in storage with no link to you, because students' copies may use them.
- Deleted data may remain for a limited time in the providers' backups until it is overwritten, and is not used for any other purpose.
- We may keep what the law requires (for example, access and tax records) for the legal period.
11. Children and teenagers
- People aged 18 or older may use Lanna freely.
- Teenagers aged 13 to 17 may use it with the permission and supervision of a parent or legal guardian.
- Children under 13 may only use Lanna in a class run by a teacher or school that has obtained the specific and prominent consent of at least one parent or legal guardian (LGPD, art. 14). The teacher or school keeps that consent.
We always process children's and teenagers' data in their best interest, with no targeted advertising and collecting only what the lessons need. Parents and guardians can ask for access, correction or deletion of the data at support@lannaapp.com. If we learn that a child's account was created without the required consent, we will delete it.
12. Your rights and how to exercise them
The LGPD (art. 18) gives you the rights below. Many you can exercise directly in the app; the rest, by e-mail.
- Confirmation and access: you can see your data in the app and ask for a full copy by e-mail.
- Correction: change your e-mail and password in Account; for other data, write to us.
- Portability: ask by e-mail for a copy of your data in a structured format (such as JSON or CSV).
- Deletion: delete your account in Account › Danger zone, or ask by e-mail. You can also ask for unnecessary or excessive data to be anonymized, blocked or deleted.
- Consent: change your cookie choice with the Cookies link (Account › Legal or website footer); turn off push notifications in the device settings and optional e-mails in Account › Preferences or with the “Unsubscribe” link.
- Information: learn who we share your data with (section 7) and what happens if you do not give a consent.
- Objection: you can object to processing based on legitimate interest.
- Review of automated decisions: ask for a review of automatically generated scores and corrections (art. 20).
- Complaint: you can complain to the Brazilian data protection authority (ANPD) at gov.br/anpd, or to the authority of your country.
How to ask: send an e-mail to support@lannaapp.com from your account e-mail. We may ask you to confirm your identity. We reply within 15 days.
13. Security
- All communication between your device and Lanna is encrypted (HTTPS/TLS).
- Passwords are stored only as a hash (bcrypt), never in plain text.
- Sessions use signed tokens that expire, and deleting your account ends every session.
- Access is controlled by profile: a teacher only sees their own classes, and each student only sees their own data.
- There are limits on sign-in attempts and sensitive actions, and internal access to data is restricted.
- We use established infrastructure providers, with their own security controls.
No system is completely immune to failures. If a security incident could bring you relevant risk or harm, we will notify the ANPD and the people affected, as required by article 48 of the LGPD.
14. Changes to this policy
We may update this policy to reflect changes in Lanna or in the law. When a change is significant, we will tell you by e-mail or in the app before it takes effect. The date of the last update is always at the top of this page.
15. Contact
Privacy questions, requests or complaints:
- Support e-mail: support@lannaapp.com
- Data protection officer: Renyer Santos, at the same e-mail
- Brazilian data protection authority (ANPD): gov.br/anpd