Privacy Policy

1. Who We Are

The application is operated by Descobrilança Unipessoal LDA · NIPC 516940503 · R. 2 da Matinha, 5D, 1950-073 Lisboa, Portugal. The company acts as the data controller within the meaning of the GDPR. For any data-related questions, contact us at info@allportugal.one.

2. What We Collect

Visitors cannot create an account; sign-in exists only for the site's administrators. We collect information in four categories: (a) usage data recorded by the application in its own database such as page views, card views and flips, and clicks on category and difficulty filters, together with a random session identifier stored in your browser and, when an administrator is signed in, their account identifier; (b) only if you click "Accept analytics" in the cookie banner, data collected by Google Analytics and the Meta Pixel, which then set the cookies _ga and _ga_* (up to 2 years) and _fbp and _fbc (up to 90 days) to measure audiences and our advertising; (c) messages sent through the contact form, including your name, email address, and message text; and (d) the text you type into the assistant, which is passed to the language model to generate a reply and is not stored in our database. The application does not request payment information.

3. Legal Basis

Google Analytics and the Meta Pixel are used only with your consent, GDPR Art. 6(1)(a); you can withdraw it at any time with the "Cookie settings" link in the footer, which stops both services and deletes their cookies, without affecting processing that took place before. The legal basis for the usage logging in our own database, for contact-form messages and for the assistant is under review.

4. The Assistant

The application includes a text assistant for mathematics and logic. Messages you enter are sent through Lovable's AI gateway to Google's Gemini language model to generate a response. Do not enter personal or confidential information there. We do not store those conversations and do not use them to train models.

5. How Long We Keep It

Analytics records are kept for 24 months and then deleted. Administrator account data is kept while the account exists. Contact-form messages are kept for as long as needed to respond and maintain business correspondence.

6. Who Else Sees It

We do not sell data. The application uses these third parties, and no others:

• Lovable - hosts the website and provides the AI gateway for the assistant
• Supabase - our database and the administrators' sign-in; it stores the usage log and contact-form messages
• Resend - delivers contact-form messages to our mailbox by email
• Google, Gemini language model - receives the messages you type into the assistant, through Lovable's AI gateway
• Telegram - only if you open the deck as a Telegram Mini App: Telegram's script is loaded and your marks are kept in your Telegram cloud storage
• Google Analytics (Google Ireland Limited) and the Meta Pixel (Meta Platforms Ireland Limited) - only if you accept analytics

If you accept analytics, Google Analytics and the Meta Pixel receive data about your visit, including your IP address, browser details and the pages and cards you view, for audience measurement and to measure our advertising; nothing is sent to them before you accept or if you choose "Only necessary". Google and Meta may transfer data outside the European Economic Area under the European Commission's standard contractual clauses. Some of the other providers may also process data outside the European Economic Area; the safeguards for those transfers are under review. Fonts and the QR code are served from our own site, so they send nothing to third parties.

7. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us at info@allportugal.one. You also have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD.

8. Security

Database access is restricted by row-level policies, administrative functions are available only to accounts with the administrator role, and connections are encrypted. No system can guarantee absolute protection.

9. Children

The application is not directed at children under 16 years of age. Visitors cannot create accounts, and we do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. National law sets the age of digital consent at 13 in Portugal, but we apply 16 so that the same rule holds for visitors elsewhere in the European Union. If you are a parent or guardian and believe that a child has sent us personal data, for example through the contact form, contact us at info@allportugal.one and we will delete those records.

10. Telegram Mini App

The deck is also available as a Telegram Mini App, which needs no account. We do not store your Telegram ID, name or username. Your solved and saved marks are kept in your own Telegram cloud storage and on your device, and you can clear them in the app under More - Reset my progress.