HomeSimulAI Academy - Data Protection
SimulAI Academy - Data Protection

Privacy Policy

Last updated: May 2026

1. Who we are

SimulAI Academy is a Brazilian generative-study platform, maintained by DataLock. Our contact email for privacy matters is contact@simulaiacademy.com.

2. What data we collect

We collect only the data strictly necessary to deliver the service:

  • Account data: name and email provided at sign-up.
  • Usage data: tests, mind maps, presentations, attempts, and arenas generated from your access.
  • Uploaded files: PDFs, DOCX, and images you use to generate content - stored encrypted.
  • Authentication & audit data: IP address, browser, active sessions, and approximate login location, as detailed in the Terms.
  • Communication data: content of messages sent through support channels.

3. How we use your data

We process the collected data for the following purposes:

  • Operate and improve the platform (tests, maps, arena, and VideoLab);
  • Generate educational content on demand, with the help of AI providers;
  • Secure your account and detect suspicious access;
  • Reply to support requests and service-related communications;
  • Comply with legal and regulatory obligations (LGPD/GDPR).

4. Legal basis (LGPD / GDPR-aligned)

Your data is processed based on the following grounds set out in the Brazilian LGPD (Law No. 13,709/2018):

  • Performance of a contract: delivering the test generation service and other modules;
  • Consent: processing precise location data and sending optional communications;
  • Legitimate interest: improving the service, preventing fraud, and security;
  • Compliance with legal obligations: when required by law or a competent authority.

5. Data sharing

SimulAI Academy does not sell or rent your personal data. We may share strictly necessary data with:

  • AI providers (e.g., OpenAI) - only the content required to generate the requested artifact, under policies that prohibit use for model training;
  • Infrastructure providers (hosting, database, email) under confidentiality agreements;
  • Competent authorities, when required by law.

6. Where data is stored

Structural data (account, tests, maps, history) is stored in a MongoDB database hosted on a corporate cloud provider, with encryption in transit and at rest. The exact instance location may vary by operating environment and can be detailed by contract for institutional clients.

Uploaded files are stored in encrypted storage isolated per account.

7. Data retention

We retain your data while your account is active or for the period required to fulfill the purposes described in this policy and applicable law. Deletion requests are handled per section 8.

8. Your rights

Under the LGPD, you have the following rights over your personal data:

  • Confirmation that processing exists;
  • Access to data;
  • Correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion;
  • Data portability (export);
  • Withdrawal of consent;
  • Objection to processing.

To exercise your rights, send a request to contact@simulaiacademy.com from your registered email. We reply within 15 days.

9. Cookies and similar technologies

We use cookies, localStorage and similar identifiers across both service surfaces, the public website (simulaiacademy.com) and the application (app.simulaiacademy.com), with different purposes.

  • On the public website (this page): only essential cookies (language preference) and anonymous traffic metrics via Vercel Analytics and Speed Insights (no tracking cookies). The public website does not display ads.
  • In the application (app.simulaiacademy.com): essential cookies (login session, language, CSRF protection), optional analytics cookies (aggregated metrics) and Google AdSense advertising cookies for Free plan users. Advertising cookies are only set after explicit consent in the banner shown on the first authenticated session.
  • Advertising in the app: when a Free user consents, Google and bidding partners may set their own cookies (NID, IDE, DSID, among others) to serve ads, measure performance, and prevent fraud. PRO subscribers never receive advertising cookies.

You can revoke consent inside the app at any time by clearing the cookies (the banner will reappear on the next session). To manage Google's personalized advertising specifically, visit adssettings.google.com. How Google uses partner data: policies.google.com/technologies/partner-sites.

10. Data security

We adopt appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction: encryption in transit (TLS) and at rest, need-to-know access controls, audit logs, and secure development practices.

11. Changes to this policy

This Policy may be updated periodically. We recommend reviewing it. The date of the last update is shown at the top of this document.

12. Contact

For questions about this Policy or the processing of your personal data:

13. Advertising in the application

To keep the Free plan accessible, we display ads exclusively inside the application (app.simulaiacademy.com) for Free plan users. The public website (simulaiacademy.com) does not display ads. PRO subscribers never see ads on any surface of the service. About how this works in the app:

  • Ads are mandatory on the Free plan: the Free service is sustained by advertising. Each generation (quiz, presentation, mind map, correction, video lesson) is preceded by a short video. It is not possible to use the Free plan without viewing the ads. For a fully ad-free service, subscribe to PRO.
  • Ad provider: we use Google AdSense (Google Ireland Limited / Google LLC) as the primary ad network. Google is the data controller for the information collected through ads; we act only as the publisher providing the ad space.
  • Personalization (user choice): in the cookie banner shown on the first authenticated session of the app, you choose between personalized ads (Google uses browsing data to select more relevant creatives) or generic / non-personalized ads (NPA). In both cases, ads keep appearing, the choice only affects creative relevance.
  • What data is shared: when you consent to personalized ads, Google may access: IP address, cookie/device identifiers, browser agent, visited page, language, ad interactions, and aggregated interest data. In non-personalized mode (NPA), sharing is restricted to the minimum required to serve and measure the ad.
  • Children and minors: we do not target advertising to under-age users. Google AdSense does not serve behavioral advertising to users under 18 when properly configured.
  • No sensitive data: we never share quiz content, mind maps, transcripts, answer keys, student photos or any user-generated artifact with ad networks.

You can revoke personalization at any time at adssettings.google.com (you'll still see ads, just non-personalized), or make the app 100% ad-free by subscribing to PRO. For questions about Google's data processing, see Google's Privacy Policy.