Privacy & Cookies Policy

Angels for Education is a digital learning ecosystem where faith, language and adventure walk together. The platform is operated by ANGELS FOR EDUCATION (trade name Anjos da Educação), a Brazilian non-profit association, CNPJ 66.681.831/0001-84, headquartered at Av. Presidente Juscelino Kubitschek, 1455, Suite 41, Vila Nova Conceição, São Paulo, SP, 04543-011, Brazil.

This policy explains how we handle personal data collected through the platform, in line with Brazil's General Data Protection Law (Law 13,709/2018, LGPD) and other applicable laws, and how we use cookies and browser storage.

• Schools are the controllers of their students', educators' and families' data: they decide who uses the platform and for what.
• Angels acts as processor, handling that data on the school's behalf and under its instructions.
• Angels is a controller only for the data needed for security, support and platform improvement.

We do not collect data about religious belief or any other sensitive personal data. Biblical formation content is teaching material and does not record any user's faith.

We do not sell personal data, and we do not use it to build advertising profiles.

The platform is used in school contexts with students who are minors. All processing follows the best interests of the child and adolescent (LGPD art. 14 and Brazil's Child and Adolescent Statute).

• Student records are created and managed by the school, which is responsible for obtaining parental or guardian consent where required.
• For students, we process only their name and school and class linkage.
• In this version, students do not access the platform: they do not sign in, do not use the AI Assistant and do not appear in rankings.
• Uploaded images show students' work (notebooks, models, paintings, texts), never faces or details that identify them.

• Available to educators only.
• Built and operated by Angels itself; conversations are not sent to external AI providers.
• Answers only about Angels materials.
• Conversations are kept in the educator's history while their account is active. After the account is deactivated, they are kept for up to 12 months and then deleted. Educators can ask for earlier deletion at any time.
• Conversations are not used to train AI models.

Data is visible within each school according to the user's role: educators see their classes, managers see their school, and families see the students linked to them. Angels administrators see only what is needed to administer schools and handle support.

We share data only with service providers that operate parts of the platform (e-mail delivery, hosting and authentication with Google or Microsoft), always limited to what is necessary, and when required by law.

Some providers, such as hosting and authentication, may store data outside Brazil. In those cases the transfer follows LGPD art. 33, with contractual safeguards that ensure equivalent protection.

We use Lovable Cloud (Supabase, on Amazon Web Services) for the database, authentication and sessions, and Amazon Web Services for file storage, with servers in the United States; Lovable for e-mail delivery, with servers outside Brazil; Cloudflare for site hosting, through a global network of servers in several countries; and Hetzner for the AI Assistant, with servers in Finland.

Access to private areas requires an authenticated session, and school linkage is verified on the server before any school area is opened. First-access passwords are temporary, single-use and must be replaced by the user. We apply rate limiting and monitoring to prevent abuse.

If a security incident may create a relevant risk, we will notify the ANPD (Brazil's data protection authority), the schools and the affected individuals, as required by law.

• Account data: while the account and school linkage are active.
• AI Assistant conversations: while the educator's account is active, and up to 12 months after it is deactivated.
• Access logs: for the period required by law.

When an account is removed by the school or an administrator, we delete its data or keep only the minimum records required for security and legal purposes; AI Assistant conversations follow the 12-month period above. When you ask us to delete your data, we delete it, including AI Assistant conversations, without waiting for that period.

Under the LGPD (art. 18) and, where applicable, other data protection laws, you may:

• confirm whether we process your data and access it;
• correct incomplete or outdated data;
• request anonymization, blocking or deletion of unnecessary data;
• request data portability;
• know who we share your data with;
• withdraw consent, where consent is the legal basis;
• object to processing based on legitimate interest.

Students and families should contact their school first; schools and educators can contact us directly. We respond within 15 days. You may also file a complaint with the ANPD or with the data protection authority in your country.

Cookies are small files that a website stores in your browser. We also use equivalent browser storage (such as local storage) to keep your session and preferences.

• Essential (session and authentication): keep you signed in, protect against misuse and make private areas work. Without them the platform cannot function.
• Preferences: remember your choices, such as light/dark theme and language.

We do not use advertising or tracking cookies, and we do not sell data collected through them.

When you sign in with Google or Microsoft, those providers set their own cookies during authentication, governed by their own policies. They are used only to identify you for sign-in.

You can clear or block cookies in your browser settings. Blocking essential cookies will sign you out and prevent access to private areas of the platform.

Data Protection Officer: DPO Department
E-mail: angels@angelsforedu.org

See also our Terms of Use.