Privacy Policy
EDS TeacherDeck · EDS Soluções Inteligentes · Brazilian company registry (CNPJ) 65.648.474/0001-90
In effect since September 23, 2026
Summary and sections 1, 3, 4, 5, 6, 7, and 9 updated on September 25, 2026
The essentials, in five lines
- Your account, class, student, grade, exam, and photo data is kept on servers in Brazil. What you send to the AI functions is processed outside Brazil (section 4). Error logs and support notices go through the providers in section 5.
- We do not sell, license, or share your data for advertising purposes.
- We do not use your material or your questions to train AI models. AI providers have their own terms on retention and use, which we do not control (section 4).
- Isolation between teachers is enforced at the database level, not just in the interface.
- You can export and delete your data at any time (exceptions in sections 6 and 7).
1. What we store
About you, the teacher
Name, email, institution, and, if you upload one, your institution's logo. Your email is used for authentication and password recovery. We do not send marketing communications.
About your work
The text extracted from the material you upload, the questions generated, the exams assembled, and the header templates. We store the text, not the original file. We also store the figures you attach or generate and the thumbnail of a PDF's first page; those files are kept in folders that are publicly accessible through a hard-to-guess address.
About your use of the service
Credit purchases (package, amount, status, order id) and the credit history; the feedback you send; the technical log of each AI call (action, provider, model, tokens, duration, country, and account id); app errors; any security notices (the fact that a protection in the app was triggered, and when, without the content); and the country you gave. Your login email is part of the account, as authentication data.
About your students
Name, student ID, and the grades obtained, with the option the student marked on each question and, when the teacher reviews it, the AI's feedback on open-ended answers; and the photo of the answer sheet (described below), which may contain whatever is printed or written on the sheet. A student email field exists in the database, but no screen fills it in today. There are no fields for recording behavior, health, religious belief, or family situation: that absence is deliberate — a minor's sensitive personal data has no place in a grading tool.
The photos of the answer sheets
The photo of the answer sheet is kept and automatically deleted once it is older than 90 days. Main purpose: to allow proof of what was marked, in case a grade is contested. When reading on the device fails, the photo is also sent to Gemini for AI reading (section 4). The image is not used in any way to monitor a student.
2. Who is responsible for what
Brazil's LGPD (General Data Protection Law, Law 13,709/2018) — the primary law governing this service, since EDS Soluções Inteligentes is a Brazilian company — uses the following roles, which map directly onto the "controller" and "processor" roles you may know from the EU/UK GDPR or similar laws:
- You are the controller of your students' data. You decided to register them, and for what purpose.
- We are the processor. We store and process it as you instruct, and we do not use that data for anything beyond making the product work for you.
For our part, we are controllers only of your own data as a teacher — your account, email, and use of the tool.
3. The legal basis for each kind of data we process
The LGPD requires every processing activity to have a declared legal basis — the same idea as the GDPR's Article 6 legal bases. Ours are these:
| Data | Purpose | Legal basis (LGPD, Art. 7) |
|---|---|---|
| Teacher account | authenticate and maintain the service | Contract performance |
| Material and questions | generate and print exams | Contract performance |
| Students and grades | the teacher's academic record | Legitimate interest of the controller |
| Answer-sheet image | proof in case of a dispute | Legitimate interest of the controller |
| Purchase records | crediting and recording the purchase of credits | To be defined — under legal review (see section 6) |
For processing based on legitimate interest, the controller is the teacher. EDS acts as the processor and handles that data exclusively according to the teacher's instructions.
4. Where the data is kept
The data of your account, classes, students, grades, exams, and photos is kept on servers in Brazil (São Paulo region), with Supabase as our database and storage provider. Error logs, feedback, and notices go through the providers in section 5.
What leaves Brazil: the artificial intelligence functions
Storing is one thing; generating and reading with AI is another. When you trigger an AI function, the content of the request is sent to an AI provider and processed outside Brazil. Until you trigger one of those functions, nothing is sent to these providers. The country shown below is where each provider is headquartered; processing may take place in other countries where it maintains infrastructure, which we have not verified.
| Provider (country of headquarters) | When it is used | What it receives |
|---|---|---|
| Google — Gemini (United States) | generating exams and lessons (fallback for DeepSeek; the only text provider in the countries listed below); reading the answer sheet by photo; any request that includes an image | the text of the request (your material and instructions; for exams, also the sample exam); the image of the material, when you attach one; the answer-sheet photo |
| DeepSeek (China) | generating exams and lessons, only for teachers outside the countries listed below | the text of the request (your material and instructions; for exams, also the sample exam). It never receives images |
| fal.ai (United States) | generating a lesson's illustrative figure | only a description of the figure, in English, written by the text AI from the slide's content |
Which provider receives the text of exams and lessons
To generate exams and lessons, the text goes first to DeepSeek, with Gemini as a fallback if DeepSeek fails. Exception: if the country given in your registration or profile is one of these — countries of the European Union and the European Economic Area (EEA), the United Kingdom, Switzerland, the United States, South Korea, or Australia — the text never goes through DeepSeek, not even as a fallback: it goes only to Gemini. If no country is given, we treat it as Brazil.
Every request that carries an image goes only to Gemini, in any country, because DeepSeek does not read images. The lesson's figure does not follow the rule above: the figure description goes to fal.ai (headquartered in the United States) for any teacher who requests the figure.
The text sent is whatever you typed or attached as material, plus your instructions — for exam generation, also the sample exam and the scope excerpt —, plus parameters such as subject, level, and the type and number of questions. The app does not filter personal data inside that text.
The answer-sheet photo sent to the AI
Photo grading first tries to read the sheet on the device itself, without sending the photo to an AI provider. When that reading cannot measure the sheet, the photo is sent to Gemini automatically, with no option to turn this off. In that case the request carries the whole photo, uncropped — the app only shrinks it (at most 2000 pixels on the longer side) and recompresses it as JPEG —, plus the sheet's code and the reading instructions. The student's name is not sent as a separate piece of data, and the link between the code and the student is resolved in our database.
However, the photo may contain student data. The sheet of a nominal class has the student's name and student ID printed on it — along with the institution, teacher, subject, and class — and a signature line; on a standalone sheet, with no class, the student writes their name by hand. The image sent may include all of that.
International transfer and what you control
Sending data to these providers is an international data transfer. We are formalizing the international transfer mechanisms provided for in the LGPD (Article 33). Each AI provider has its own terms on retention and use of the content it receives, which we do not control (see section 5). You choose the material, the instructions, and the photos you send. In photo grading, when reading on the device fails, the photo is sent to Gemini automatically. Because the app does not remove personal data from what you send, do not include names or other personal data of students or third parties in the material you send to the AI.
5. Who else has access
These are the providers that receive data, and what each receives:
| Who | Receives what | For what |
|---|---|---|
| Supabase | database and files | storage |
| Google (Gemini) | the text of your material; the image of the material, when attached; the answer-sheet photo | generating questions and reading the sheet |
| DeepSeek | the text of your material | generating questions |
| fal.ai (Z-Image) | the English description of the image to generate, produced by the AI from the slide's content. The app does not send registered student or teacher data, but the description may reflect what you wrote in the material | generating the lesson's illustrative image |
| Netlify | nothing beyond site access | serving the pages |
| Resend | your email address | sending the sign-up confirmation and password recovery emails |
| Sentry (EU) | app errors: message, stack trace, page address (without the token of public links), recent actions, browser, and language. The server functions (AI, payments, and Google Play purchases) also send exceptions to Sentry; we have not verified whether teacher content can appear in an error message | knowing when something breaks |
| Telegram | email and text of the feedback, when you send it; error alerts for the team | alerting the support team |
| Mercado Pago (purchase through the website) | your account email, sent at checkout, and the details you give it. Our purchase record stores only technical payment data (closed list, since September 25, 2026); until that date it also stored what Mercado Pago returned about the payer (name, email, phone, document, IP) and, for cards, about the card | processing the payment |
| Google Play (purchase in the store app) | the credit purchase. Our record stores the Google API's response about the purchase (which includes, among other things, the order id, purchase token, product, status, and region). We have not checked it on a real purchase; according to the API documentation, it does not carry the payer's name or email | processing the payment |
| CDN libraries (jsDelivr, cdnjs, Sentry) | the IP address and browser, as with any external script load | loading the app's libraries |
Information relevant to your decision: when the AI generates an exam, the text of your material is sent to the AI provider, outside Brazil (section 4). Each AI provider has its own terms on the retention and use of the content it receives, which we do not control and which may change. We do not claim that this content stops being retained or used by them. Even so, the transfer happens, and you have the right to know that before submitting any file.
Student names are not sent to the AI as data, but they may appear in the answer-sheet photo. Requests to generate exams, lessons, and figures carry no student names, unless you wrote them into the material. Grading a sheet sends the photo and the sheet's code; the student's name stays in our database and is resolved here — but the name and student ID printed on a nominal sheet, or the name handwritten on a standalone sheet, may be in the photo itself (section 4).
6. How long we keep it
- As long as your account exists: classes, students, questions, exams, and grades.
- Answer-sheet photos: automatically deleted once they are older than 90 days (the routine runs overnight), regardless of the class's status — that window exists so you can review a sheet if a student contests their grade.
- After account deletion: we delete classes, students, questions, exams, grades, purchases, answer-sheet photos, the logo, figures, covers, and the app's error records. Feedback you sent (email and text) remains, unlinked from the account, until you ask the data protection officer to erase it; they find it by email. The technical log of AI calls becomes anonymous: it loses its link to you and no one can locate it. Copies held by other providers — AI providers, Sentry (EU), Telegram (feedback and error alerts), and the backups of Supabase's infrastructure — are not controlled by us and follow their retention; we do not promise a time frame.
- Purchase records: deleted together with the account. The payment receipt remains with Mercado Pago or Google Play, under those services' rules.
An expired class is not deleted: it becomes read-only. A recorded grade is an academic record and is not affected by a plan's term ending.
7. Your rights
The LGPD guarantees you the right to know what we have, correct what's wrong, export it, delete it, and revoke consent — the same rights you'd recognize from the GDPR's Chapter III (access, rectification, erasure, portability, restriction, and objection). In the app, you can already do this yourself:
- View and correct your data under Your account;
- Export the gradebook as a spreadsheet, exams as Word files and, in a single file, your data — teacher, entitlements, classes, students, questions, exams, test sessions, results, readings, orphan sheets, purchases (without the payment method's raw record), bonuses, materials, lessons, templates, figure links, credit movements, feedback, AI generations, the AI call log, and app errors —, under Your account → Your data → Export my data. Your login email (which is part of the account), the app's security notices, and the files you uploaded (photos and figures) are not in that file; request them from the data protection officer;
- Archive a student and a class (removes them from the lists, but does not delete the data) and delete exams on the screens where they live, and delete your entire account under Your account → Your data → Delete my account. To erase the data of a specific student without deleting the account, write to the data protection officer.
For anything that can't be done directly in the app, write to our data protection officer. The response deadline is up to 15 days, per Article 19 of the LGPD. If you cannot access the app, request deletion by email to the data protection officer (suporte@edssi.com.br), from the email address registered on the account.
Data Protection Officer
Under Article 41 of the LGPD, the Data Protection Officer (DPO) for EDS Soluções Inteligentes is Egnaldo Dias, reachable at suporte@edssi.com.br.
If you are a student and want to know or delete what exists about you: reach out to your teacher first, since they control that data. If they can't resolve it, you may write to us.
8. Security
All traffic travels over an encrypted connection. Isolation between teachers is enforced through database-level security policies, not through client-side checks: a bug in the client code does not expose another teacher's data. AI provider credentials live exclusively on the server.
No system is invulnerable. In the event of a security incident with relevant risk or harm, we will notify you and Brazil's National Data Protection Authority (ANPD), under Article 48 of the LGPD.
9. Minors
The app is for adult teachers. Students do not have accounts or log in — their data is registered by the teacher, in the exercise of their teaching role, and limited to the minimum needed to identify the exam and record the grade. The only exception is the result that the teacher decides to publish, described below.
Publishing a result by link. Only the teacher decides to publish the result of an exam; without that, none of this is accessible. Once published, anyone with the link sees, without logging in, the student's name, the exam title, the institution (when given) and, depending on what the teacher releases: the final grade; per question, the option the student marked, whether it was right, and the points (with the AI's feedback on open-ended answers only when the teacher has reviewed it); and the answer key, which includes each question's statement, options, correct answer, and comment. The points per question let anyone add up the grade even if the final grade is not released. There are two paths: the student's individual link (a random 16-character code, the same as on the sheet; sheets printed before 15/08/2026 carry a readable code built from the exam and the student ID, and so easier to guess) and the class link, where typing the student ID is enough — which classmates often know — and there is no limit on attempts. The teacher can unpublish at any time: the links stop responding and nothing is deleted (publishing again reactivates the same links). There is no automatic expiry, and whoever receives a link can pass it on, which is beyond our control.
10. Changes
If something relevant changes, we'll notify you by email and in the app before it takes effect.
11. Contact
Data Protection Officer: Egnaldo Dias da Silva
suporte@edssi.com.br