Student privacy
Version: 2026-09-12.2
Last updated: September 12, 2026
This policy describes how Engliv processes visitor, student and learner data, its purposes and how to exercise rights under Brazil’s LGPD. Teachers, assistants and administrators have a separate Team Privacy Notice for professional access.
Who controls your data
ENGLIV LTDA - ME, trading as ENGLIV, registered under Brazilian CNPJ number 41.009.284/0001-64, at Avenida Prefeito Antonio Francischini, 1421, Centro, São Sebastião da Amoreira - PR, postal code 86240-000, Brazil, is the controller of your personal data. For any question or request about your data, contact us at contato@engliv.com.br.
What data we collect
We process your name, email and authentication credentials; optional profile photo; video progress, homework and quiz answers and results; uploaded files and support messages. Depending on your role and plan, we also process availability, schedules, attendance, lesson records, payment and access status. We record language preferences, recent activity and document acknowledgements. Passwords are managed by the authentication service and are not displayed to staff.
Why we collect this data
We use data to authenticate accounts, deliver education, grant content access, track learning, schedule lessons, handle requests and protect the service. Profile photos are optional and may be changed or removed in settings. This notice does not authorize advertising use of your photo, image, voice or assignments. We do not sell personal data. Optional homepage analytics depend on the cookie choice.
Live lesson recordings
Engliv records live lessons through Google Meet for internal review of teaching and verification of what happened during lessons. Recordings may capture participants’ images, voices, screens and shared content; Meet features may also retain messages or captions depending on the settings used. This purpose does not include public disclosure or advertising.
Recordings are stored in the Google Drive associated with the meeting organizer. Access must be limited to authorized Engliv professionals who need them for the stated purpose, with restricted sharing and protection against unauthorized disclosure. The school’s standard retention period is up to 180 days from the lesson date. Recordings must then be erased; longer retention requires a specific documented need, legal ground and period, such as an incident under investigation, a legal obligation or the exercise of rights, with restricted access and necessity reviews.
Participants must receive prior information about recording and these conditions. General acceptance of the terms does not replace any specific consent required by law, assessment of the legal basis or guardian participation where applicable. Enrollment of minors and recording their lessons require consideration of their best interests and all participants’ rights. School contracts and instructions must reflect these rules. Advertising use of image or voice requires separate, specific permission.
For questions, access, objection, erasure or consent withdrawal where applicable, contact contato@engliv.com.br. The school must assess the processing basis, legal conditions and third-party rights, explain its response and consider appropriate alternatives for the educational activity. Deleting a platform account does not automatically delete Google Drive files; erasure requests must also cover relevant external recordings. Retention is not unlimited merely because an account has ended or a recording is stored outside the platform.
Legal basis (LGPD)
Registration, enrollment and service delivery may rely on contract performance or procedures requested by the individual. Legal obligations and exercise of rights justify only processing necessary for those purposes. Security measures relying on legitimate interests require a documented assessment of necessity and balance with individual rights. Optional analytics and other consent-based purposes require specific, withdrawable choices. Processing minors’ data requires a case-specific legal basis prioritizing best interests; document acceptance is neither blanket authorization nor independent proof of parental permission.
How long we keep your data
We keep data necessary to provide the service while that purpose remains valid, subject to minimization and necessity reviews. Data without a valid purpose must be erased or anonymized; legal obligations or the exercise of rights may justify specific retention with restricted access for the applicable period. You can delete your own account at any time directly in the platform, under "Delete my account" (in Settings → Privacy and account → Close my account) — there's no need to ask Engliv to do it for you. Accounts are not automatically deleted for inactivity or non-renewal. Expiration of purchased access does not delete your account. When students and learners confirm deletion, they lose account access and their linked data is removed from the platform, including their profile photo, progress, answers, homework submissions and lesson records with their attachments. Shared course content is not deleted. Records subject to mandatory legal retention follow the applicable periods. Account deletion does not mean immediate removal from backups or provider logs; contact Engliv for the applicable retention periods. You can also reach us at contato@engliv.com.br or through "Support & help" inside the platform with any questions about this.
Your rights (art. 18 of the LGPD)
Request confirmation, access, correction and sharing information free of charge; and, where applicable, anonymization, restriction, erasure, portability, objection and consent withdrawal. You may also request review and explanation of solely automated decisions affecting your interests, such as expiry-based access blocking. Contact contato@engliv.com.br. Proportionate identity checks may be necessary; we will not request your password. LGPD provides immediate simplified confirmation/access or a full statement within 15 days; other requests follow their applicable deadlines. Any refusal must be explained. Brazil’s ANPD, consumer authorities and courts remain available.
Security
The platform uses authentication and role-based access controls, bot checks on forms and attempt limits. Profile photos and personal files have restricted access; school-published materials and images may be public. There is no guarantee of zero risk. Report incidents to contato@engliv.com.br; Engliv must assess containment and notify ANPD and affected people where required by law.
Who accesses data
Authorized administrators, assistants and teachers access information according to their role and lesson relationships for support, scheduling and learning. Names, photos and participation data may be visible to authorized contacts. Group lessons and calendar invitations may expose information such as name, image, voice or email to fellow participants depending on the feature; avoid sharing unnecessary data. The platform does not provide student-to-student chat. Staff have no blanket authorization to copy or disclose data.
Services and browser storage
Supabase provides authentication, databases and storage; Resend supports transactional email. Cloudflare Turnstile protects forms. Google may provide sign-in, Calendar/Meet and consented homepage analytics; JMVstream and, depending on the lesson, YouTube/Vimeo deliver video. WhatsApp opens an external service. These services may receive technical and feature-related information. The browser stores session, language, preferences and local progress. Providers and authorized teachers abroad may receive or access data outside Brazil; this requires a legal basis, minimization and a valid international-transfer mechanism, not blanket permission through acceptance. Engliv must provide recipients, countries and safeguards applicable to the operation upon request.
If configured, Google Analytics only measures homepage visits after you accept analytics. You can refuse or withdraw permission using the Cookies button without losing access. Read our Cookie Policy.
Children, teenagers and guardians
Engliv serves minors and must consider their best interests when processing data. Parents and guardians may contact Engliv regarding enrollment and rights concerning a minor's data, subject to verification of their relationship where necessary. A student's acknowledgement alone must not be considered proof of guardian authorization. Do not send identity documents through this form; staff will explain if additional verification is needed.
When enabled, learner self-registration records the declared age range (13–17 or 18 and older). Teenagers acknowledge guardian authorization when accepting the terms. This flow does not request separate email confirmation and the declaration is not treated as verified authorization. The age range is not displayed to other students.