Privacy Notice

Last updated: October 2026.

1. Who we are

Balela is operated by RAFAEL DA SILVA, who is the data controller for the personal data processed through this platform. This means we decide how and why your data is used.

2. Data we collect

Account data: name, email address and login credentials — used to create and secure your account (legal basis: contract performance).

Learning data: the language you learn, your level, goals, interests, practice sessions, messages with the AI tutor, XP and streaks — used to provide and personalise the service (legal basis: contract performance).

Usage and technical data: pages visited, time of use, device type, approximate location (country), error events and IP address — used for security, fraud prevention and product improvement (legal basis: legitimate interests).

Support data: messages you send us, including refund requests — used to provide customer support (legal basis: contract performance and legitimate interests).

3. Who we share data with

Service providers: hosting, database and analytics providers that process data on our behalf under contract.

Merchant of Record: Paddle.com processes payments, subscription management, tax compliance and invoicing as the reseller of our service. Payment data is collected by Paddle under its own privacy terms.

Professional advisers (legal, accounting) and authorities where required by law.

4. International transfers

Some of our providers process data outside your country. Where data leaves the UK/EEA or Brazil, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

5. Retention

We keep your data while your account is active and for as long as needed for legal, tax and security obligations. When data is no longer needed, it is deleted or anonymised.

6. Your rights

Depending on your country, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. You may also complain to your data protection authority. To exercise any right, contact us through the support channel in the app; we respond within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level isolation of each user's data.

8. Cookies

We use essential storage (for example, to keep you signed in and remember your language). We do not use marketing cookies. You can clear this storage in your browser settings at any time.