Privacy Notice

Who is responsible

Nexusbyte - Unipessoal Lda is the data controller for personal data processed through Lusa. Contact: info@sentivue.com.

What we collect and why

• Account details: name, email address and which sign-in you used (Google, Microsoft or Apple). Used to create and run your account. Basis: contract.
• Learning data: lesson progress, settings, practice transcripts and practice reports. Used to provide lessons and keep your progress across devices. Basis: contract.
• Voice audio: your microphone audio during practice. It is processed in real time by AI providers to transcribe your speech, reply as your tutor and grade your practice. We do not keep audio recordings; we store the text transcript and report. Basis: contract, and your consent when you allow microphone access.
• Technical and usage data: IP address, device and browser details, and how you use Lusa. Used for security, fraud prevention, fixing problems and improving Lusa. Basis: legitimate interests.
• Support messages: what you send us. Used to help you. Basis: legitimate interests.

Payment details are collected by Paddle, not by us.

Who we share it with

• Service providers who host and run Lusa, including providers of AI speech and language models, under contracts that limit their use of your data.
• Paddle.com, our Merchant of Record, for selling Lusa Pro, managing subscriptions, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities, where the law requires it.

We do not sell your personal data.

International transfers

Some providers process data outside the UK or EEA. When they do, we rely on adequacy decisions or Standard Contractual Clauses to protect it.

How long we keep it

We keep account and learning data while your account is open. When you close it, we delete or anonymise it within 90 days, unless the law requires us to keep it longer. Technical logs are kept for a short period for security.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-account data isolation.

Your rights

Under the GDPR you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. Email info@sentivue.com and we'll respond within one month. You can also complain to a data protection authority, such as the CNPD in Portugal.

Cookies and storage

Lusa uses only essential browser storage to keep you signed in and remember your preferences. We don't use advertising or analytics cookies.

Changes

We'll update this notice when our practices change and tell you about significant changes.