1. Who we are (Data Controller)
Fill The Song is an English learning service through music, operated by Micael Jardim, based in Brasília, Brazil.
For the purposes of applicable data protection laws (including Brazil's LGPD and the EU GDPR where applicable), the data controller is Micael Jardim, reachable at hello@fillthesong.com.
2. Data we collect
We collect the following categories of personal data:
3. Legal basis for processing
We process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Create and maintain your account | Contract performance |
| Save progress and scores | Contract performance |
| Process premium subscriptions | Contract performance |
| Send service-related emails | Legitimate interest |
| Analytics and product improvement | Legitimate interest |
| Share progress with teacher/school | Consent |
| Prevent fraud and abuse | Legitimate interest |
4. How we use your data
- •Provide and personalize the learning experience
- •Save your progress, scores, and achievements
- •Calculate rankings and leaderboards
- •Process premium subscriptions via Stripe
- •Send service-related communications (e.g., welcome, account changes)
- •Analyze usage patterns to improve the product
- •Allow teachers and schools to track linked students’ progress
- •Prevent fraud and abuse
5. Data sharing
Your data may be shared with the following third parties:
We never sell your personal data to third parties.
6. International data transfers
Some of our service providers (Firebase/Google, Stripe, PostHog) have servers located in the United States and other countries. By using Fill The Song, you acknowledge that your data may be transferred and stored outside your country of residence.
These transfers are carried out with appropriate safeguards, including standard contractual clauses and compliance certifications from providers.
7. Data retention
Your personal data is stored as long as your account is active or as needed to provide the service. After account deletion, your data will be removed within 30 days, except where legal retention obligations apply.
8. Storage and security
Your data is stored on Firebase (Google Cloud Platform) with encryption in transit (TLS) and at rest. We adopt appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including database security rules and mandatory authentication for access.
9. Your rights
Under applicable data protection laws, you have the following rights:
- •Confirmation of whether your data is being processed
- •Access to the personal data we hold about you
- •Correction of incomplete, inaccurate, or outdated data
- •Anonymization, blocking, or deletion of unnecessary data
- •Portability of your data to another provider
- •Deletion of data processed based on consent
- •Information about with whom your data has been shared
- •Revocation of consent at any time
To exercise any of these rights, contact us at hello@fillthesong.com. We will respond within 15 business days.
10. Account and data deletion
You may request the complete deletion of your account and all associated data at any time by sending an email to hello@fillthesong.com. Deletion will be processed within 15 business days and includes the removal of all personal data, progress, scores, and usage history.
After deletion, data cannot be recovered.
11. Children and minors
Fill The Song may be used by minors for educational purposes. For users under 16 years old, data processing requires consent from at least one parent or legal guardian.
We do not intentionally collect data from children without parental consent. If we become aware that we have collected data from a minor without proper consent, please contact us so we can remove it immediately.
12. Cookies and similar technologies
We use cookies and local storage (localStorage) to:
- •Keep your session active after login
- •Save usage preferences (language, theme, volume)
- •Collect anonymous analytics data via PostHog
You can disable cookies in your browser settings, but this may affect the functionality of the service.
13. Changes to this policy
We may update this Privacy Policy periodically. When we make significant changes, we will notify you through the Platform or by email. The last update date will always be indicated at the top of this page.