Privacy Policy
Last updated: 11 November 2026
Azuletra is an app for learning European Portuguese. It is built to collect as little as possible: you don't need a name, email or phone number to use it, and your voice recordings are never stored. This policy explains what data we process, why, who we share it with, and how you can control it. The Portuguese version is the reference text; this is a faithful translation.
1. Who is responsible
The controller of your data is Pedro Araújo, an individual,
Rua de Agramonte, Porto, Portugal.
Privacy contact: privacy@azuletra.com.
2. What data we process
| Data | Why | How long |
|---|---|---|
| Account identifier — a random code created when you open the app. No name or email. | To save your progress and know your answers are yours. | Until you delete your account. |
| Email, or the Google or Apple account you choose (email and, for Google, name and profile picture) — only if you choose to save your progress to an account. | To let you sign in on another device and recover your progress, and to email you a sign-in code. | Until you delete your account. |
| Learning preferences — level (for example, A1), chosen goal/theme, instruction language. | To show you the right level and instructions in your language. | Until you delete your account. |
| Answers and progress — your exercise answers, whether they were right, tiles completed, mistakes to review, and the days you studied. | To grade exercises, show your progress and streak, and bring your mistakes back for review. | Until you delete your account. |
| Texts you write in writing exercises and the recognised text from speaking exercises (what the speech service "heard"), with the scores and comments you received. | To give you feedback on your writing and pronunciation. | 12 months, then deleted automatically. |
| Problems you report — the kind of problem, the exercise or page you were on and, if you write one, your note. | To fix mistakes in translations, audio and texts. | 12 months, then deleted automatically. |
| Use of automatic checks — the time of each feedback on your writing, speaking or an open answer. | To apply the free plan's daily limit and prevent abuse. | 2 days, then deleted automatically. |
| Voice recordings | To assess your pronunciation there and then. | Never stored. They are sent for assessment and discarded straight after. |
| Technical data — IP address and logs of requests to our servers. | Security, abuse prevention and fixing errors. | Our providers' short log periods (days, not months). |
Some settings stay only on your device and never reach us: light/dark theme, text size, your word notebook, where you stopped in a lesson, and your answers to the welcome questions. They disappear when you uninstall the app.
We do not use advertising, analytics tools, cross-app tracking, or sell data. We do not use your data to make automated decisions with legal or similarly significant effects on you.
3. Legal basis
- Performance of a contract (GDPR Art. 6(1)(b)): to provide the service you asked for — the account, the lessons, grading and feedback.
- Legitimate interest (Art. 6(1)(f)): to keep the service secure, prevent abuse and fix errors.
- Consent: microphone access is requested by your phone's system and you can withdraw it at any time in your device settings. Without it, only the speaking exercises stop working.
4. Who we share data with
We use a few service providers who process data on our behalf under data processing agreements (processors):
| Provider | What it does | Where |
|---|---|---|
| Supabase | The app's database, accounts and servers. | European Union (Paris, France). |
| Microsoft Azure (speech service) | Receives the recording from a speaking exercise, assesses pronunciation and returns the recognised text and scores. | European Union (Ireland). |
| Anthropic (Claude models) | Receives the text you wrote, or the recognised text of your speech, together with the exercise, and writes the feedback. Also checks open answers that code cannot grade. It never receives your email or your recording. | United States. |
| Zoho (ZeptoMail) | Sends the sign-in code email, if you sign in with email. | European Union. |
| Cloudflare | Hosts this website (azuletra.com). | Global network. |
If you choose to sign in with Google or Apple, those companies process your account data under their own privacy policies. The Apple App Store and Google Play process app-download data as independent controllers.
Transfers outside the EU. Where a provider processes data in the United States (Anthropic and, for support, some of the others), the transfer relies on the EU-US Data Privacy Framework where the company is certified, or on the European Commission's standard contractual clauses. You can ask us for a copy of these safeguards.
Under those services' commercial terms, the texts sent for feedback are not used by our providers to train their models. We share data with no one else unless the law requires it.
5. Your rights
You have the right to access your data, correct it, erase it, receive a copy in a machine-readable format (portability), restrict processing, and object to processing based on legitimate interest.
- Delete your account: in the app, Settings → Account → Delete account. This permanently deletes the account and all data linked to it on our servers. Without the app, see azuletra.com/en/delete-account.
- Other requests: email privacy@azuletra.com. Because an account can be anonymous, we may ask you to make the request from the app or give us your account identifier, so we can be sure the data is yours. We reply within one month.
- You can also lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or with the authority where you live.
6. Security
Connections are encrypted (HTTPS). In the database, each account can only read and write its own data. Your session is kept in your phone's secure storage. If a data breach puts you at risk, we will notify the CNPD within 72 hours and, where the law requires, tell you.
7. Minimum age
Azuletra is for people aged 16 or over. We do not knowingly collect data from anyone under 16. If you know a minor has given us data, contact us and we will delete it.
8. Changes
If we change this policy in a significant way, we will tell you in the app before the change takes effect. The date at the top shows the latest version.