Your privacy matters.

Who looks after your data

Amplexo Educação · CNPJ 58.706.937/0001-67. Address: Rua José Versolato, 111, Bloco B, Sala 3320, Centro, São Bernardo do Campo – SP, CEP 09750-730, Brazil. For questions about your data, authorizations, rights or safety: pedagogico@amplexoedu.com. Parents and guardians can also use this channel without signing into the child's account.

Families contract directly with Amplexo. Before a child's account is created, Amplexo verifies the guardian's identity and authorization outside the platform. The registration form does not require confirmation of this verification; the team is responsible for keeping the service records.

What the platform uses and why

• Name and sign-in email: to identify the account, allow sign-in and assist the family. The password is stored as a cryptographic verification, not as readable text.
• Optional birth date: identify birthdays during the week, Monday through Sunday in Brasília time. Only the first name is shown to signed-in members; age and birth date are not displayed. Students can hide their participation in My birthday at the Club. Imports use only the selected name, email, birth date and language; the spreadsheet and other columns are not stored.
• Enrollments, lessons and progress: provide learning paths and track learning. We do not use behavioral advertising.
• Avatar: store your hairstyle, outfit and color choices for your profile character and account picture. Optional shared profile: store your chosen link, nickname, introduction and visibility preference. Profiles start private. If you choose to share with members, only signed-in people can see these details and your avatar through the link. Your registration name, email and progress are not shown on the profile. You can change your avatar and make your profile private again in My profile.
• Sessions, sign-in attempts and security events: to protect the account, prevent abuse and investigate problems. The server receives technical connection data, such as IP address and browser information.
• Requests and authorization records: to address rights, document the family's choices and record the outcome of support. Use support references; do not send personal documents through the form.

The legal basis for each operation depends on its purpose and applicable law: for example, performance of the contract, legal obligation, protection of the service or consent where required. Processing children's data must serve their best interests. Optional authorizations are separate from access to local content.

The site does not request precise location, camera, microphone, device contacts or date of birth for browsing. The Tutor is unavailable for sending questions to AI providers at this stage.

Providers and content from other sites

Amplexo's hosting infrastructure and support services may process data to operate the service. Sign-in and recovery emails use the email provider when this feature is enabled.

Lessons may use Bunny Stream, YouTube, or other media hosts. When a lesson opens, the player connects to its provider, which receives technical data such as IP address, browser information, and playback requests. The website has no additional authorization step for each video. YouTube may use cookies and identifiers under its own rules; youtube-nocookie.com does not mean no data is collected.

Google/YouTube privacy notice. The lesson transcript and materials remain available. For questions or restriction requests, contact the team through the privacy channel.

External services may process data in other countries. Amplexo must inform you of the providers, locations and transfer mechanisms applicable to your family's service; you can request this information through the privacy channel before authorizing.

Bunny privacy notice

Cookies, preferences and app

The site does not install advertising or audience measurement tools. There is therefore no generic button to accept tracking. The features needed for your account and the choices you make are:

Sign-in session (amplexo_session)

Keeps you signed in: up to 7 days for students and 12 hours for administrators. You can sign out; administrators can also revoke sessions on the security page.

Form protection and additional verification

rullst_csrf protects form submissions. amplexo_mfa is temporary and validates the additional authentication challenge when used.

Theme and motion

amplexo-theme and amplexo-motion stay in your browser's local storage until changed or removed. They store only your appearance and animation choices.

Interface language

amplexo_lang remembers your chosen language for up to one year. It contains no account data and is not used for tracking.

Dashboard confirmations

amplexo-admin-feedback stores a temporary confirmation message in the browser session.

Installed app (PWA)

Creates a shortcut and lets you open the platform in its own window. The platform does not store lessons, passwords or account data in an offline app cache. Access to lessons still requires internet.

You can remove preferences and local data in your browser settings. This may sign you out and reset appearance options. Removing the app or clearing the browser does not delete your account on the server.

Protection and retention

Account access is protected by a password, sessions and permission controls. Private lessons and progress data require authorization. Account, learning, security and support information have different retention purposes; records required by law or to defend rights may need to be kept after closure.

When handling a deletion request, the team must explain what was deleted, what must be kept, the basis, the applicable period and how backups are handled. The request button does not automatically delete data or cancel the contract on its own.

Access your data and make choices

You or your guardian may request access, a copy, portability, correction, deletion, restriction, objection, review and withdrawal of consent under applicable law. Withdrawing an authorization does not invalidate earlier lawful uses. Requests are free of charge.

In the center, you can download account data, open a request, follow the response and withdraw external media authorizations. Requests can also be made by email. Before delivering or changing data, the team may confirm the identity and authority of the requester, using only what is necessary.

You can also contact the competent data protection authority, such as the ANPD in Brazil, your country's authority in the European Economic Area or the ICO in the United Kingdom. Significant changes in purpose or authorization must be communicated to the family; publishing a new version does not amount to your consent.