Privacy Policy

Who We Are

Khairus.app ("Khairus," "we," "us," or "our") is the data controller responsible for the personal information you provide when you visit our website at https://khairus.app or use our services. We offer digital products including online courses (which we call "trilhas"), templates, prompts, and mini web applications, with immediate access after purchase.

This privacy policy explains how we collect, use, store, share, and protect your personal data, and how you can exercise your rights under the Brazilian General Data Protection Law (LGPD) and equivalent international regulations.

What Data We Collect and Why

We collect and process personal information for specific, legitimate purposes related to providing our services, improving your experience, and fulfilling legal obligations:

• Account and purchase information: Your name, email address, and optionally your phone number. We collect this to create your account, process your purchases, deliver access to the products you buy, and communicate with you about your orders.
• Payment information: Transaction details including purchase date, amount, currency, payment method type, and transaction identifiers. Our payment processor, Stripe, handles the actual payment processing. We never store complete card numbers on our systems.
• Usage and progress data: Information about how you interact with our products, such as which lessons you've completed, how far you've progressed through a course, and which features you use. This helps us understand how our products are used, improve them, and personalize your experience.
• Technical and device information: Your IP address, browser type and version, device type, operating system, and approximate location (city/region level). We collect this for security purposes, to prevent fraud, to analyze traffic patterns, and to ensure our platform works correctly across different devices and browsers.
• Communication records: When you contact us via email or support channels, we keep records of that correspondence to respond to your requests and improve our service.

We process your personal data based on the following legal grounds: performance of our contract with you (delivering the products you purchase), your consent (for marketing communications and non-essential cookies), our legitimate interests (security, fraud prevention, service improvement), and compliance with legal obligations (tax records, consumer protection laws).

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide essential functionality, understand how visitors use our site, and measure the effectiveness of our marketing efforts.

What We Use

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled if you want to use our services.
• Google Analytics 4 (via Google Tag Manager): Helps us understand visitor behavior, popular content, and how people navigate our website. This information is anonymized and used in aggregate.
• Meta Pixel and Conversions API: Allows us to measure the effectiveness of advertising campaigns on Facebook and Instagram, and to show relevant ads to people who have visited our website.
• Google Ads: Tracks conversions and campaign performance from Google advertising channels.

Your Consent and Control

When you first visit our website, you will see a cookie consent banner. Marketing and analytics cookies (Google Analytics, Meta Pixel, Google Ads) will only load after you explicitly accept them. You can decline these non-essential cookies and still access our website, though your experience may be less personalized.

You can change your cookie preferences at any time by adjusting your browser settings or using the preference controls on our website. Most browsers allow you to block or delete cookies. Keep in mind that blocking essential cookies may prevent certain features from working properly. You can also opt out of personalized advertising through industry tools like the Digital Advertising Alliance's opt-out page or your device's ad settings.

Payments

All payment processing is handled securely by Stripe, our payment processor. When you make a purchase, your payment information is transmitted directly to Stripe using industry-standard encryption. We never receive or store complete credit or debit card numbers on our systems.

We receive only the information necessary to fulfill your order: transaction confirmation, the last four digits of your card (for your reference), payment method type, and transaction identifiers. For customers in Brazil, payment via Pix may also be available as an option for purchases in Brazilian reais (BRL).

Stripe is a PCI-DSS compliant payment processor with robust security measures. For more information about how Stripe handles payment data, please visit their privacy policy at https://stripe.com/privacy.

Artificial Intelligence

We use artificial intelligence tools to assist in creating, curating, and personalizing content within our products. This may include AI-assisted writing, content recommendations, personalized learning paths, or interactive features powered by language models and machine learning.

We are transparent about this use: where AI plays a significant role in content creation or personalization, we may indicate this within the product. All AI-generated content is reviewed, edited, and validated by our human team before being published to ensure quality, accuracy, and appropriateness.

When AI tools process information to personalize your experience, they work with usage patterns and progress data as described in the "What Data We Collect" section. We do not share your personal data with third-party AI services beyond what is necessary for processing, and we select providers with strong privacy and security commitments.

Emails and Communication

We send two types of emails, and your control over them differs:

Transactional Emails

These are necessary messages related to your purchases and account, such as order confirmations, access credentials, password reset instructions, and important updates about products you own. You cannot opt out of transactional emails because they are essential to delivering the service you purchased.

Marketing Emails

With your explicit consent, we may send promotional emails about new products, special offers, educational content, and updates about our services. Every marketing email includes a clear unsubscribe link at the bottom. You can opt out at any time by clicking that link or by contacting us at contato@khairus.app. Unsubscribing from marketing emails will not affect transactional messages.

Our email service is provided by Resend, which processes email delivery on our behalf under strict data protection agreements.

Data Stored Only on Your Device

Our mini web applications (including installable progressive web apps or PWAs) offer features like personal notes, custom checklists, and progress tracking that allow you to pick up where you left off. This is an important distinction: the personal data you create within these mini apps is stored exclusively on your device or browser using local storage technology.

This means:

• We never receive, access, or store this data on our servers
• Your notes, checklists, and in-app progress do not sync across different devices or browsers
• This data is permanently lost if you clear your browser data, clear your app data, uninstall the app, or switch to a different device or browser
• We cannot recover this data for you and offer no backup or recovery service
• You are solely responsible for managing and preserving this on-device data

If maintaining this information is important to you, we recommend manually saving or exporting it where the app provides such features, or taking your own backups before clearing data or changing devices.

Data Sharing

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share data only with trusted service providers (processors) who help us operate our business, and only to the extent necessary for them to perform their specific functions:

• Payment processing: Stripe processes payments on our behalf
• Email delivery: Resend sends emails on our behalf
• Analytics and advertising: Google (Analytics, Tag Manager, Ads) and Meta (Facebook, Instagram) process data to measure website performance and advertising effectiveness
• Hosting and infrastructure: Cloud service providers host our website, databases, and content delivery networks

All processors are carefully selected and bound by contract to protect your data and use it only for the purposes we specify. We may also disclose information when required by law, to protect our rights, or to comply with legal processes such as court orders.

Data Retention and Security

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Account and purchase data: Maintained while your account is active and for up to five years after your last purchase to comply with tax, accounting, and consumer protection regulations
• Marketing consent and communications: Until you withdraw consent or request deletion
• Usage and analytics data: Typically aggregated and anonymized after a reasonable period, with identifiable data deleted according to our retention schedules

We implement technical and organizational security measures appropriate to the risk, including encryption of data in transit and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Your Rights and How to Exercise Them

Under the Brazilian LGPD and equivalent international data protection laws, you have the following rights regarding your personal information:

• Access: Request confirmation that we process your data and obtain a copy of it
• Correction: Ask us to correct incomplete, inaccurate, or outdated data
• Deletion: Request deletion of your data, subject to legal retention obligations
• Portability: Receive your data in a structured, commonly used format to transfer to another service
• Revocation of consent: Withdraw consent for processing based on consent, such as marketing emails
• Information: Learn about the third parties with whom we share your data
• Opposition: Object to processing in certain circumstances

To exercise any of these rights, please send an email to contato@khairus.app with your request. Include enough information for us to verify your identity and understand your request. We will respond within the timeframes required by applicable law, typically within 15 days for LGPD requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or the relevant supervisory authority in your jurisdiction.

Children

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at contato@khairus.app and we will delete that information promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website before the changes take effect.

The date of the most recent update will always be indicated at the top of this policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

Email: contato@khairus.app

We will make every effort to respond to your inquiry promptly and address any issues you may have.