Privacy Policy.

Ludi ("we") operates the online language-class platform available at ludi.company. We are the controller of the personal data processed here, under Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD). For any privacy matter, including contacting our data protection officer (DPO), write to contato@ludi.company.

Account data — name, email and sign-in credentials, when you create a teacher account or join as a student by invitation.

Public teacher profile — photo, bio, languages, price and links the teacher chooses to publish in the directory. Publishing is optional and can be undone.

Class usage data — materials created, messages inside the platform, completed activities and the technical records needed for the live class to work. AI class summaries are only generated with the explicit consent of the people in the room.

Messages to teachers — name, email and, if you wish, WhatsApp, when you write to a teacher through the directory, with no sign-up required.

First-party attribution cookies — anonymous visit identifiers (for example, where you came from and campaign parameters) that help us understand what brought you here. They do not rely on third parties.

Analytics and campaign pixels — optional measurement tools (such as Google Tag Manager, Meta Pixel and Microsoft Clarity) loaded only if you accept them in the cookie banner. Declining does not limit your use of the site.

Technical diagnostics — error codes, affected route, app version, browser type and response times, used to detect failures and keep the platform secure. We do not send passwords, tokens, class content, audio, messages, or AI prompts or responses to the diagnostics service, and we do not use session recording.

Payments — processed by payment providers (Stripe and, in some cases, Wise). We do not store card numbers on our servers.

We process data to perform our contract with you (running classes, scheduling, billing), on the basis of legitimate interest (security, abuse prevention, product improvement and our own audience measurement) and on the basis of your consent (marketing pixels, AI class summaries and publishing your profile in the directory). Consent can be withdrawn at any time.

We do not sell personal data. We share it only with processors needed to run the service: Supabase (database and authentication), Vercel (application hosting), Sentry (error and performance diagnostics), Stripe and Wise (payments), Resend (transactional email) and Cloudflare (live-call infrastructure, abuse protection and, with consent, transcribing and summarizing classes with AI, keeping neither the audio nor the transcript once the summary is ready). Each processor handles data according to our instructions and the applicable contractual safeguards.

You may request at any time: confirmation of processing, access, correction, anonymization, portability, deletion of data, information about sharing and withdrawal of consent. Just write to contato@ludi.company — we reply within the deadlines set by the LGPD.

We keep data for as long as the account exists or as long as it is needed for the purposes of this policy and for legal obligations. After that, we delete or anonymize it. We use access controls, encryption in transit and the principle of least privilege for internal access.

Technical metadata sent to Sentry is kept for at most 90 days and then deleted according to the configuration Ludi has contracted.

Essential cookies keep you signed in and the site working. First-party attribution cookies measure where visits come from. Third-party tools (analytics/marketing) only load once you accept them in the banner — and you can make a new choice by clearing your browser cookies.

If this policy changes in a meaningful way, we will update this page and the date at the top. Continued use of the service after publication means you acknowledge the new version.