KangooKangooLast updated: August 25, 2026
This Privacy Policy describes how Kangoo ("we", "us", "the app") collects, uses, shares, and protects the personal data of users ("you") of the Kangoo app and associated website.
Kangoo is operated by DHL Administração e Participação, Brazilian company registration (CNPJ) 34.413.678/0001-18 ("Data Controller"), headquartered at Av. Pompeia, 349, São Paulo, SP, Brazil. "Kangoo" is a trademark under registration application no. 944921981 with INPI (Brazil's National Institute of Industrial Property).
If you do not agree with this policy, please do not use Kangoo.
Completed lessons and modules, checkpoint results, XP, daily study streak, spaced-repetition review history — used to sync your progress across devices.
When you record your voice to practice pronunciation, the audio is sent to Microsoft Azure Speech Services for evaluation, processed entirely in memory and discarded immediately after analysis — never saved to disk, never logged. The text transcript (not the audio) of what you said may be sent to the Google Gemini API to evaluate whether your response's content makes sense, with the same treatment: used once, not retained.
John's memory. At the end of a conversation with John, we derive from the transcript a few durable facts about you — for example your profession, a study goal, or a recurring difficulty in the language — and store that short list so he has continuity in your next conversation. The transcript itself is still not retained: only those few facts are saved. They are used only in your own conversations, are never shared with other users, and are deleted along with your account.
We never see, process, or store your credit card data. Web subscriptions are processed by Stripe; iOS/Android app subscriptions are processed by Apple/Google and managed via RevenueCat. We only receive confirmation of active subscription status and, when applicable, your email to link the subscription to your account.
Push notification token (Firebase Cloud Messaging) and device platform, only if you authorize notifications.
We do not use third-party tracking cookies, we do not use third-party analytics tools inside the app, and we do not sell, rent, or share your personal data for third-party advertising purposes. Your session is kept via local device storage (localStorage), not tracking cookies.
We never use your data to train third-party AI models beyond what is necessary to process your one-time request, nor for targeted advertising.
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing (web) | Email, subscription status — never card data |
| Apple / Google + RevenueCat | Payment processing (app) | Purchase identifier, subscription status |
| Microsoft Azure Speech | Pronunciation assessment and speech synthesis | Audio (not retained) |
| Google Gemini API | Content evaluation, word translation | Text transcript, single word for translation |
| Firebase (Google) | Push notifications | Device token |
| Railway | Hosting infrastructure | All account and progress data |
Brazil (LGPD, Law 13.709/2018): we process your data based on contract performance (art. 7, V) and, where applicable, your consent (art. 7, I) for optional features.
European Union (GDPR): if you are in the EU/EEA, processing falls under art. 6(1)(b) and 6(1)(a) GDPR. You have the rights described in Section 6.
California (CCPA/CPRA): we do not sell or share your personal information for cross-context behavioral advertising. California residents have the rights described in Section 6.
Your data is stored on servers managed by Railway. If you access Kangoo from outside Brazil, your data may be transferred to and processed in Brazil or other countries where our subprocessors operate, always under contractual safeguards equivalent to those required by LGPD and GDPR.
We keep your data while your account is active. Voice data is never retained (see 1.3). When you delete your account, all your personal and progress data is permanently and immediately deleted from our database.
You have the right, at any time, to: access your data, correct inaccurate data, delete your account and all associated data (directly in the app, under Settings → Delete account, or by email), request data portability, withdraw consent, and object to processing where applicable.
To exercise any of these rights, email kangoolab.app@gmail.com. We respond within 15 business days (LGPD) or 30 calendar days (GDPR), whichever applies faster to your case. For formal legal matters, you may also contact our legal counsel at diego@lemesadvogados.com.
Passwords are stored with bcrypt hashing. Communication between the app and our servers uses HTTPS/TLS. Authentication uses expiring JWT tokens. No system is completely immune to incidents — should a breach affecting your personal data occur, we will notify you and the competent authorities as required by law.
Creating a Kangoo account (email, password, and other data described in Section 1) is intended for users 13 years of age or older — always the legal guardian, never the child.
For children ages 5 to 7, the app offers Kids Mode: a dedicated lesson path, accessed within the same guardian's account, never through a separate account for the child. Before entering Kids Mode — and before any action to exit it — we show a parental gate (a simple math question a young child is unlikely to solve alone) to make sure an adult is authorizing access.
We do not collect any personal data from the child. The name and age entered in the Kids profile setup are saved only in the device's local storage (localStorage) and are never sent to our servers. Progress recorded in Kids Mode (completed lessons, XP) is saved tied to the guardian's account, the same way as any other app progress — we do not create or store a child profile on our servers.
Because we do not collect, store, or share children's personal information through Kids Mode, this feature is not subject to COPPA's (Children's Online Privacy Protection Act) verifiable parental consent requirements. Even so, we follow the data-minimization principle for children's data under Brazil's LGPD (art. 14) when designing this feature — nothing beyond what's strictly necessary, and nothing leaves the device.
If you are the legal guardian of a minor who, outside the flow described above, provided personal data to Kangoo, contact us via the email in Section 10 to request immediate deletion.
We may update this policy periodically. Material changes will be communicated by email or in-app notice before taking effect. The date at the top of this document always reflects the latest version.
Questions, data requests, or complaints: kangoolab.app@gmail.com
Legal contact: diego@lemesadvogados.com