Rullst AcademyRullst Academy/Privacy
Privacy

Privacy in clear words

Here we explain what data Rullst Academy uses and how you can control it. Send questions or specific requests to the contact below.

2026-09-26.v5

Controller and contact

Venelouis

Fortaleza, CE, Brasil

+55 85 98679-4831

officialrullst@gmail.com

What we store

We store nickname, protected password, sessions, country, language, declared age group, adult email and confirmations. We also store lessons, daily activities, daily visit bonus dates and XP, final quiz, publication preferences, privacy requests and authorization events. Child accounts have no email of their own: they have a guardian link and activity limits. We do not request a full birth date, identity documents or biometrics. Drafts and visual preferences remain in your browser.

Why we use this data

We use necessary data to create and protect your account, save learning, recover access and respond to your requests. Profile publication and leaderboard participation are separate optional choices you can withdraw in your account. Achievements follow lesson rules; XP is not used for credit, employment or professional certification decisions.

Who can see it

Oracle Cloud hosts the service in Brazil. Resend processes adult transactional emails, including recipients, content and logs in the US, even when another sending region is selected. Email support uses Gmail. We do not send child nicknames or learning progress to Resend. We do not sell data or use behavioral advertising or third-party trackers. Profiles and leaderboards are optional for adults with confirmed email. Children remain private. Content adults publish can be copied by others.

Cookies and browser

We use session and cross-site request forgery protection cookies. Session cookies last up to 30 days. Theme, reduced motion and drafts use local storage. In My route you can also remember style, reference stage and starting point in this browser: these preferences are shared by its users and are not sent to your account. Uncheck Remember choices or use Reset choices to erase them. These support Rullst Academy's operation; there are no advertising cookies. Clear drafts in your account or remove all site data in your browser settings. Optional read-aloud depends on your browser's speech service.

Retention and deletion

Unconfirmed registrations expire after 48 hours. Password links last 30 minutes; other confirmation links, 24 hours. Sessions last up to 30 days. Daily activities and privacy events are retained up to 365 days; answered requests, 365 days after the response. Child accounts are deleted after 365 days without activity or guardian control renewal. Adult progress and projects remain while the account exists; review and delete what you no longer need. Automatic cleanup runs hourly. Deletion removes data from the active database. Backups expire within 14 days and the erasure journal prevents reactivation on restore. Resend and Gmail apply their own retention periods; contact us for requests involving them. The preference preventing automatic Google reconnection after unlinking or changing/resetting a password remains until you explicitly link Google or delete the account.

Your choices and rights

In your account, review progress, correct your public nickname and language, leave the leaderboard, hide your profile, download data or delete your account. Contact the controller for other access, correction, restriction or objection requests and questions. We will verify your identity proportionately to protect your account. You may also contact the competent data protection authority, such as ANPD in Brazil or your country's authority.

Children and guardians

A guardian creates a supervised account after confirming their email and receiving an additional notice. Each authorization is recorded and can be withdrawn by deleting the learner account. They can review and export data, pause activities or limit lessons. Learners and guardians can see these controls. There is no messaging between people or public child profile. Email confirmation does not prove age or parenthood; suitability of this method is assessed against applicable laws and risks.

A global platform

Your country and provider locations may involve different rules and international data transfers. Rullst Academy is developing controls with reference to LGPD, GDPR and other applicable laws. This is not a claim of automatic compliance with every law worldwide. The controller must validate legal bases, providers, transfers and procedures before opening each operation.

Rullstpetbot: how AI uses your messages

Guided help uses reviewed guidance and sends no messages to Groq. When configured, AI chat is optional and limited to adult accounts with confirmed email, which does not verify age. Before sending, we explain the data transmitted: your question, up to four recent messages and relevant published excerpts. We do not automatically transmit your profile, email, progress, drafts or other accounts' data. Groq processes content as an external provider; processing may involve the United States. The Academy does not save conversation text in its database, logs or browser storage. Page memory clears when you clear, leave or switch accounts; temporary usage counters stay in server memory. The operator must configure zero content retention in Groq; provider operational metadata remains subject to its terms. Child accounts use guided help only in this version. AI queries do not change grades, achievements, permissions or progress. This feature does not provide medical assessment or emergency care.

Groq: Privacy

Linked sign-ins

If you choose GitHub sign-in when available, GitHub processes your authentication. Rullst Academy stores your numeric GitHub account ID, its link to your local account and the linking date. The adapter reads the public profile without requesting repository or private email access. We do not store names, photos, GitHub emails or tokens. We do not merge accounts by provider email. Unlinking revokes local access; to revoke authorization at GitHub too, visit Settings → Applications on GitHub. Backups follow the retention described in this notice.

If you choose Google sign-in, Google processes your authentication. We request only basic identity (openid) and email. We use the returned address to check registration. Gmail and Google Workspace with verified identity and email can activate registration and sign you in without another confirmation link. We can also connect an unrestricted existing adult account whose confirmed email matches the address validated by Google, keeping the account and its progress. Other addresses used with Google require Academy email confirmation. We store your stable Google account identifier, its link to your local account and the linking date. We do not store Google tokens, photos or names, or request Gmail, Drive, contacts or calendar access. Email matching alone, without these checks, does not connect accounts. Google sign-in does not prove age or parental consent. Unlinking revokes local access; you can also remove authorization from your Google Account connections page. Google processes data, including internationally, under its policy and the safeguards described in this notice.

Google: Privacy

If you authorize activity uploads, the GitHub App accesses only repositories selected during installation. The Rullst Academy checks the linked GitHub ID, its installation and the repository list to validate the destination. After your confirmation, it sends the reviewed text to a new file in the selected repository. The text and installation tokens are not stored in the Rullst Academy database. Destination preferences stay in this browser, separately per account, and can be removed with Clear local data. Deleting a Rullst Academy account does not delete files on GitHub; manage files and revoke the installation on GitHub itself. The editor draft also stays in this browser, separately per account and lesson. It does not follow you to another device; download a copy and clear drafts on shared computers.

Your data, your choices

Rullstpetbot

AI can make mistakes. Check the lesson material.