Privacy Policy

This Privacy Policy explains how Educaholic Ltd (CNPJ 42.646.519/0001-91) (“Educaholic”, “we”, “us”, or “our”) collects, uses, stores, and shares your information when you use our website and application (the “Service”). Educaholic is an AI-powered learning product that helps working professionals build personalized learning paths. By using the Service, you agree to the practices described here.

If you have any questions about this policy or your data, contact us at contato@educaholic.com.

Information we collect

We collect the following categories of information. This includes the Google user data we collect when you choose to sign in with Google:

• Google user data. When you sign in with Google, through our authentication provider, Clerk, we collect the following Google user data from your Google account: your name, your email address, your profile picture, and your Google account identifier (the unique ID Google uses to identify your account). We collect only your basic Google profile and email address; we do not collect or access your Gmail, Google Drive, contacts, calendar, or any other Google service data.
• Information you provide. The content you enter while using the Service: your messages to our AI guides, and the professional details you choose to share (such as your role, field, experience level, and learning goals) so we can personalize your learning paths.
• Learning and usage data. The learning paths you create, your progress through activities, and operational metadata such as model-usage and cost records used to apply plan limits and keep the Service running.
• Cookies and session data. Authentication cookies set by Clerk to keep you signed in and to secure your session. We do not use advertising or cross-site tracking cookies.

How we use your information

We use the information above only to operate and improve the Service:

• To authenticate you, create and secure your account, and identify you across sessions (this is the primary use of your Google user data).
• To display your name and profile picture within the application interface.
• To personalize your learning experience and generate the learning content, guides, and recommendations you ask for.
• To send you account- and service-related communications at the email address associated with your account.
• To enforce plan limits, prevent abuse, and maintain the security and integrity of the Service.

Specifically, we use the Google user data described above as follows: your name and profile picture to display your identity within the application; your email address to identify your account and to send you account- and service-related communications; and your Google account identifier to authenticate you and recognize your account across sessions. We do not use your Google user data to train AI or machine-learning models.

We do not use your Google user data for advertising, and we do not sell your Google user dataor any other personal information. We share Google user data only with the service providers that operate the Service, as described in “How we share your information” below.

How we store your information

Your identity and sign-in credentials are managed by our authentication provider, Clerk, which stores your Google profile information (name, email, and profile picture) on your behalf. In our own application database we store only an internal identifier that maps to your Clerk account, together with the learning data you create while using the Service. We do not duplicate your Google profile fields in our own database. Data is stored on infrastructure operated by our hosting and database providers (see below).

How we share your information

We do not sell, rent, or trade your Google user data, and we do not share it with third parties for their own purposes. We share your Google user data only with the service providers (sub-processors) that operate the Service on our behalf, and only as needed for them to perform their function:

• Clerk— authentication and identity management. Clerk is the provider that receives and processes your Google user data (name, email, profile picture, and Google account identifier) on our behalf to sign you in and manage your account.
• OpenAI— AI processing. The messages and learning inputs you submit are sent to OpenAI to generate responses and content. We do not share your Google user data with OpenAI.
• Vercel— application hosting and delivery (the infrastructure the sign-in flow runs on).
• Neon— managed database hosting. Our database stores only the internal identifier mapped to your account and your learning data, not your Google profile fields.

We do not sell your Google user data. We do not transfer or disclose your Google user data to any third party for purposes other than those described in this Privacy Policy. We may disclose information only where required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.

Google API Services User Data Policy (Limited Use)

Educaholic’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features of the Service (signing you in and managing your account, as described in this policy).

We do not use, transfer, or sell Google user data for any other purpose. In particular, we do not use Google user data, and we do not transfer it to any third party, for any of the following:

• targeted, personalized, retargeted, interest-based, or any other form of advertising;
• selling it to data brokers or providing it to information resellers;
• determining credit-worthiness or for lending purposes;
• creating or contributing to databases for resale or for purposes unrelated to the Service;
• training, developing, or improving artificial-intelligence or machine-learning models.

Data retention and deletion

We retain your personal information, including your Google user data, only for as long as your account is active or as needed to provide the Service to you, unless a longer retention period is required or permitted by law. When the retention period for a given type of data expires, or when it is no longer needed for the purposes described in this policy, we delete or anonymize it.

You may request deletion of your account and your associated data, including your Google user data, at any time by emailing us at contato@educaholic.com. When you delete your account, we delete or anonymize your learning data and your Google user data is removed from our authentication provider, Clerk, except where we are required to retain certain information to comply with our legal obligations. You can also revoke Educaholic’s access to your Google account at any time through your Google Account permissions page.

How we protect your data

We have security procedures in place to protect the confidentiality of your data, including your Google user data. Your information is protected with encryption in transit (TLS/HTTPS) and encryption at rest, and your Google user data is held by our authentication provider, Clerk, under its security controls. We restrict access to personal data to the systems and personnel that need it to operate the Service. While no method of transmission or storage is completely secure, we work continuously to protect your information and to limit access to it.

International data transfers

The Service and our providers are operated primarily from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our providers operate.

Children’s privacy

The Service is intended for working professionals and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we change how we use your Google user data or make other material changes, we will update the “Last updated” date above and, where appropriate, notify you within the Service or by email.

Contact us

For any questions, requests, or concerns about this Privacy Policy or your personal data, contact us at contato@educaholic.com.