Privacy notice

Cookies and data saved on your device

Storage information reviewed September 4, 2026. Englevo uses first-party cookies for sign-in, account security and preferences. The application does not currently include advertising pixels or a network analytics collector. Public learning events remain in the browser.

• Student sessions last up to eight hours; teacher sessions and workspace selection last up to twelve hours. Sign-out clears the active role and account session cookies.
• Google sign-in state and verification cookies last ten minutes. Teacher agreement challenges last up to thirty minutes, while MFA challenges last five minutes; temporary security setup and recovery displays are cleared by their respective flows. Speaking authorization lasts sixty seconds.
• The teacher ledger remembers an opaque, account-specific student selection in this browser for up to one year, including after sign-out. Each visit checks the selection against the authorized student directory. You can change the selection manually or remove it through your browser’s site-data controls.
• The sign-in screen remembers new or returning mode for thirty days. A selected Listening level is remembered for up to one year.
• Language, reduced-motion choices, completed tours and some exercise drafts are stored locally. These may remain until removed by the relevant feature or your browser's site-data controls. Calendar display and technical recovery state use temporary session storage.
• Public Reading scores, attempt counts, favourites, demo results and Vocabulary progress are stored only in this browser until cleared. They are not an account backup and are not shared between devices.

Use “Clear public learning data on this device” in the public-site footer to remove public results and favourites. This does not remove signed-in learning records or private recovery drafts. Clearing all site data through your browser can sign you out and remove unsaved device-only work. Necessary sign-in cookies are used to provide the requested service; they are not optional advertising consent.

Cloudflare provides delivery and security infrastructure and may use security cookies when a browser challenge is required. External links such as WhatsApp open the provider's own service, whose privacy practices apply there.

Who is responsible

Englevo is a learning service operated in Brazil by Jonathan Ouellet-Labrie, who is responsible for Englevo's platform operations and the personal-data handling that Englevo determines. Privacy requests can be sent to labriejonathan0@gmail.com.

A teacher may also have responsibilities for records used in an independent teaching relationship. Englevo will coordinate a request when more than one responsible party is involved.

Information the platform handles

• Student and teacher names, email addresses, access status, and secure password hashes.
• Teacher invitation, agreement-version, acknowledgement, acceptance-time, and audit records.
• Exercise attempts, answers, scores, submissions, placement-test progress, and learning activity.
• Homework, teacher feedback, class-ledger entries, learning-focus notes, and profile levels.
• Security records such as request references, protected route outcomes, and privacy-safe rate-limit identifiers.
• Messages voluntarily sent through email or WhatsApp links.

A teacher's record that this Privacy Notice was made available is an acknowledgement, not blanket privacy consent. The platform does not store plain-text passwords or payment-card details.

Why it is used

Information is used to provide classes and practice, authenticate accounts, save progress, assign and review homework, keep private teaching records, prevent misuse, diagnose failures, and respond to support or data-rights requests.

Service providers and international processing

Cloudflare provides the Worker, database, delivery, security, and recovery infrastructure. Google may process account information when optional Google teacher sign-in is used, exercise text for configured speech synthesis, and microphone audio plus live input and output transcripts during an enabled Gemini speaking exercise. The Englevo application uses that audio and transcript during the live exercise and does not intentionally save the raw audio or full live transcript in its application database after the session.

Google's Gmail service processes messages sent to the public support or data-rights address. If a student chooses homework email and delivery is enabled, Resend processes the recipient address and assignment message for delivery. When student email verification is enabled, Resend also delivers the requested security code independently of homework-email preferences. Verification uses a necessary ten-minute browser cookie and hashed challenges; the code expires after ten minutes. Expired challenge records are removed by daily maintenance after one day, normally within two days of expiry. WhatsApp processes a message only when the user chooses that external link. Discord receives fixed operational reliability alerts that exclude student and tenant details.

These providers may process information in countries where they operate. The applicable provider, purpose, and safeguards depend on the feature used. Contact labriejonathan0@gmail.com to request current information about a relevant provider or international transfer.

Retention and protection

Active teaching records are kept while they are needed for the learning relationship and legitimate record-keeping. A verified request can lead to correction, export, restriction, or deletion where the law permits. Limited recovery copies may remain temporarily in Cloudflare's backup systems.

In-app notifications expire after 90 days. Technical delivery logs and private problem reports, including optional screenshots, are retained for no more than 365 days unless they must be kept longer for a legal or active dispute reason.

Teacher agreement and access-audit records may be retained after access ends when needed to demonstrate the agreement, protect users, investigate misuse, resolve a dispute, or meet a legal accountability duty. They do not contain the raw setup code or password.

To protect a long placement test from a phone interruption, the browser may keep a same-device recovery copy in local storage. It can include answers, position, audio-play counts, a technical attempt identifier, and save timestamps. The copy becomes unusable after 30 days and is removed when safely reconciled, explicitly discarded, or the app next performs its expired-copy cleanup.

The platform uses encrypted transport, signed sessions, hardened password hashing, access controls, rate limits, security headers, monitoring, and recoverable database history.

Public lesson progress on this device

The public Reading library and two-minute demo can remember favourites, attempt counts, completion dates, and scores in this browser's local storage. This information stays on the device, is not treated as an account record, and is not sent to Englevo's teaching database.

Clearing site data or using another browser or device removes or hides that local history. Future account syncing will require a separate, explicit choice and will not silently import anonymous browser data.

Adult-only initial access

The initial controlled launch is limited to adults aged 18 or older. New public access requests and teacher-created student setups require an explicit adult confirmation and remain subject to manual approval. Englevo does not currently offer accounts for minors. Access for a child or adolescent requires separately implemented and reviewed age, guardian, privacy, and best-interest safeguards in Brazil.

Your choices and rights

Students and teachers can request confirmation, access, correction, information about use and sharing, portability where applicable, or deletion where legally available. See the Data Rights page for the request process.