Privacy Policy
This policy explains what data the ¡Vamos! app (the “App”) processes, why, who it is shared with, and your rights. It describes what the App actually does today. If that changes, we will update this page. The Portuguese version is the primary one.
1. Controller
Joao Paulo de Araujo Aquino, NIF/NIE Z1454771A, Calle Pascual i Genis, 15 5-17, 46002 Valencia, Spain. Privacy contact: joaopaulo@acedigitallabs.com.
2. Summary
- You can use the App without an account. Your progress then stays only on your device.
- An account is optional and only saves your progress to the cloud. We ask only for an email and password (or a sign-in link sent by email).
- No advertising, ad tracking, analytics or crash-reporting tools, and no sale of data.
- Subscriptions are processed by Apple or Google. We never receive your card details.
3. Data we process
| Data | When | Purpose and legal basis | Where |
|---|---|---|---|
| Learning progress: the goal and daily minutes you chose at the start, XP, streak, last practice day, hearts, completed lessons, seals and stamps, any interrupted lesson, and the items you got wrong (for review). | Whenever you use the App | Providing the service (contract). | On your device (app or browser local storage). If you have an account, also in the cloud (Supabase). |
| Account data: email, password (stored only as a hash), user ID, created and last sign-in dates. | Only if you create an account | Authentication and progress sync (contract). | Supabase (EU, Ireland). |
| Technical security data: IP address and browser or device information in the provider's authentication and access logs. | When you sign in, sign up or sync | Security and abuse prevention (legitimate interest). | Supabase, for a limited time. |
| Purchase data: an anonymous ID generated by the App, products bought, subscription and trial status and dates, store country/currency. | If you open the subscription screen or subscribe | Selling and verifying Premium (contract) and tax duties (legal obligation). | RevenueCat (USA) and Apple / Google. |
| Device region (country code) | On the subscription screen | Showing prices in the right currency. Used on the device only and never sent to us. | Device only. |
We do not collect your name, phone number, location (GPS), contacts, photos, microphone, advertising ID or sensitive data. Sentence audio is recorded and bundled with the App. If a sentence has no recording, the App may use your device's Spanish text-to-speech voice (an operating-system feature that runs on the device). The App also downloads a public configuration from our server (for example, how many regions are free) without sending any of your data.
4. Processors
- Supabase: database and authentication, hosted in the EU region (Ireland, eu-west-1). It also sends the confirmation and sign-in emails.
- RevenueCat, Inc. (USA): subscription management.
- Apple (App Store) and Google (Google Play): payment, billing, renewals and refunds, under their own privacy policies.
- GitHub Pages: hosts this website and the web demo, and may log IP addresses in technical logs.
Transfers outside the European Economic Area (for example, to the USA) rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable. We do not sell data or share it for advertising.
5. Retention
- Local data: until you delete the App or clear your browser data.
- Cloud account and progress: while the account exists. Deletion in the App is immediate. Email requests are handled within 30 days.
- Purchase records: as long as tax and accounting law requires.
- Technical logs: for the provider's retention period.
6. Deleting your data
Without an account: uninstall the App (or clear the site data in your browser) and everything is gone from the device. With an account: in the App, open Configurações → Sua conta → Apagar conta (Settings → Account → Delete account). The account and its cloud progress are deleted immediately. If you can no longer use the App, email joaopaulo@acedigitallabs.com. See How to delete your account. Deleting the account does not cancel a subscription: cancel it in the App Store or Google Play.
7. Minimum age
The App is meant for people aged 14 or over (the digital-consent age in Spain under the LOPDGDD), or the minimum age required in your country if that is higher. If you are younger, use the App only with your parent's or guardian's permission and supervision. If we learn that we collected a child's data without that permission, we will delete it.
8. Your rights (GDPR / LOPDGDD)
You have the right of access, rectification, erasure, objection, restriction and portability, and the right not to be subject to solely automated decisions. Email joaopaulo@acedigitallabs.com; we reply within one month. You may also complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.
9. Brazil (LGPD)
You may request confirmation of processing, access, correction, anonymisation, blocking or deletion, portability, information about sharing, and review of automated decisions (LGPD art. 18). You may also complain to the ANPD. The legal bases we use are contract, legal obligation and legitimate interest.
10. California (CCPA/CPRA)
You may know what personal information we collect, request its deletion or correction, and not be discriminated against for exercising these rights. We do not sell or “share” personal information (in the CCPA sense) and do not use sensitive personal information. Requests: joaopaulo@acedigitallabs.com.
11. Security
Connections use HTTPS. Database security rules mean each user can access only their own data. Passwords are hashed. No system is 100% secure: if a significant incident happens, we will notify you and the authorities as the law requires.
12. Changes
If we make material changes, we will announce them in the App or on this page, with a new effective date.