beora Privacy Policy
Effective date: [EFFECTIVE DATE] Last updated: [EFFECTIVE DATE]
This policy explains how [COMPANY LEGAL NAME] ("beora", "we", "us") collects, uses and protects personal information when you visit getbeora.com, join our waitlist, or use the beora mobile app (together, the "Services").
We wrote it to be read, not skimmed past. If anything is unclear, write to us at hello@getbeora.com.
1. Who we are
beora is a daily learning app for event professionals, available in English, Portuguese and Spanish.
Controller: [COMPANY LEGAL NAME], [REGISTERED ADDRESS], [COMPANY REGISTRATION NUMBER]. Privacy contact and data protection officer (Encarregado under Brazil's LGPD): [DPO NAME], hello@getbeora.com.
2. What we collect
When you join the waitlist
- Your email address (required)
- Your first name (optional)
- Your preferred language, your role in events and your certification goal
- Your consent to receive emails from us, with the date and time you gave it
- Campaign details from the link you used to reach us (utm source, medium and campaign), if any
When you use the app
- Account details: an anonymous account identifier created when you start; your email address if you choose to save your progress.
- Profile: first name (optional), app language, practice language, role, daily goal, reminder time, time zone and certification goal.
- Learning activity: lessons started and completed, your answers, time spent learning, minutes and hours learned, days in a row, glossary terms learned and items scheduled for review.
- Crews: the crews you join with an invite code.
- Reports and support: problems you report about a lesson, and messages you send us.
Collected automatically
- Basic technical information needed to run the Services securely, such as IP address, device and browser type, operating system and app version, recorded in server logs by our hosting providers.
- Your language choice on the website, stored in your browser so the page opens in your language next time.
We do not use advertising cookies, we do not sell your personal information, and we do not share it for targeted advertising.
What we do not collect
We do not ask for sensitive personal information such as health, religion, ethnicity or political opinions. Please do not include it in reports or messages.
3. How we use it and why
| Purpose | Information used | Legal basis |
|---|---|---|
| Run your account and the lessons, save your progress and show your hours | Account, profile and learning activity | Performing our contract with you |
| Send your daily reminder | Reminder time, time zone, language | Your choice in the app, which you can turn off at any time |
| Tell you when beora opens in your language and share product news | Waitlist details | Your consent, which you can withdraw at any time |
| Show how your hours relate to the certification goal you chose | Certification goal, learning activity | Performing our contract with you |
| Improve lessons, fix errors and understand which content works | Learning activity, reports, in aggregated form where possible | Our legitimate interest in a useful and accurate product |
| Keep the Services secure and prevent abuse | Technical information | Our legitimate interest in security, and legal obligations |
| Answer your questions and requests | Messages you send us | Performing our contract, or our legitimate interest |
| Comply with the law and protect our rights | Any relevant information | Legal obligation, legitimate interest |
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
4. Who we share it with
We share personal information only with service providers that help us run beora, under contracts that require them to protect it and use it only on our instructions:
| Provider | What they do for us |
|---|---|
| Lovable | Hosts the getbeora.com website and waitlist |
| Supabase | Stores our database and runs account sign in |
| Expo | Builds and delivers app updates |
| Apple and Google | Distribute the app through their app stores and handle any in app purchases under their own privacy policies |
| [EMAIL PROVIDER] | Sends waitlist and account emails |
If we ever partner with a certification body so your hours can be reported to it, we will only send your information to that body when you ask us to.
We may also disclose information when required by law, to protect the safety of any person, or as part of a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.
5. International transfers
Our providers may store or process information outside your country, including in [DATA REGION, for example Brazil or the United States]. When information leaves Brazil, the European Economic Area, the United Kingdom or Canada, we rely on the safeguards those laws accept, such as standard contractual clauses, and we require providers to protect it to the standard described here.
6. How long we keep it
- Waitlist details: until you unsubscribe, or 24 months after you join if you never create an account.
- Account and learning activity: for as long as your account is active. If you delete your account, we delete your account data within 30 days. Backups are overwritten within a further 30 days.
- Reports and support messages: up to 24 months, so we can track recurring problems.
- Technical logs: up to 90 days, unless needed longer to investigate a security issue.
We may keep information longer when the law requires it, and we may keep aggregated statistics that no longer identify you.
7. Your rights
Depending on where you live, you can:
- access the personal information we hold about you and receive a copy in a portable format
- correct information that is wrong or incomplete
- delete your information, or your whole account
- withdraw consent at any time, without affecting what we did before
- object to or ask us to limit certain uses
- ask which providers we share your information with
- complain to your data protection authority
You can delete your account directly in the app under Settings, and unsubscribe from emails with the link in every email. For anything else, write to hello@getbeora.com. We answer within 15 days, or sooner when your local law requires it, and we may need to confirm your identity first.
Brazil: you have the rights in article 18 of the LGPD (Lei 13.709/2018), and you can complain to the Autoridade Nacional de Proteção de Dados (ANPD). European Union and United Kingdom: you can complain to the data protection authority where you live or work. Canada: you can complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information if you live in Quebec. Mexico: you can exercise your ARCO rights (access, rectification, cancellation and opposition) by writing to hello@getbeora.com. United States: where state privacy laws apply to us, you have the rights those laws give you, and we will not treat you differently for using them.
8. Security
We protect your information with encryption in transit, access controls that let each user see only their own data, limited staff access and providers that meet recognized security standards. No system is perfectly secure, so if a breach affects you, we will notify you and the relevant authorities as the law requires.
9. Age
beora is made for professionals and students aged 16 and over. We do not knowingly collect information from anyone younger. If you believe a younger person has given us their information, write to hello@getbeora.com and we will delete it.
10. Changes to this policy
When we make important changes, we will tell you in the app or by email before they take effect, and we will update the date at the top. Earlier versions are available on request.
11. Contact
[COMPANY LEGAL NAME] [REGISTERED ADDRESS] Privacy and data protection: hello@getbeora.com