Privacy Policy

1. Purpose of this policy

This Privacy Policy describes how Duck collects, uses, shares, and protects personal data when using the platform.

2. Data we may collect

We may collect: account data (name, email, and authentication identifiers), platform usage data (topics, decks, cards, reviews, and history), content you submit (text and audio answers), technical access data, and events necessary for security, analysis, and service operation.

3. How we use data

We use data to authenticate users, execute functionality, evaluate answers with AI, calculate spaced reviews, improve study experience, prevent abuse, comply with legal obligations, and provide support.

4. Legal bases (LGPD)

Processing may occur based on: contract execution, compliance with legal/regulatory obligation, regular exercise of rights, credit protection when applicable, legitimate interest, and, when necessary, consent.

5. Sharing with third parties

We share data only when necessary for product operation, with infrastructure and service providers (for example: authentication, database, AI processing, audio transcription, and payments), always under contractual obligations of security and confidentiality.

6. Payments

Payment data is processed by a specialized partner, such as Stripe. Duck does not store full credit card numbers on its application servers.

7. Storage and retention

We retain data as long as necessary to provide the service, comply with legal obligations, audit, security, and dispute resolution. When possible and applicable, we delete or anonymize data at the end of its purpose.

8. Information security

We adopt reasonable technical and administrative measures to protect data against unauthorized access, misuse, accidental loss, or undue modification. No system, however, is absolutely infallible.

9. Data subject rights

Under LGPD, you may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, and information about sharing, observing applicable legal and technical limits.

10. Minor content

Duck is not intentionally directed at minors without proper supervision. If there is improper processing of minor data in legal non-compliance, appropriate measures will be taken for regularization.

11. Links and external services

The platform may contain links to third-party services. Each service has its own policies, for which Duck is not directly responsible.

12. Updates to this policy

This policy may be revised periodically to reflect legal, technical, or operational changes. The update date at the top of the page indicates the current version.

13. Contact and requests

Requests related to privacy and data protection can be sent through the official support channel provided in the application.

This policy was written for transparency and user guidance, and does not replace specialized legal consultation.