Privacy Policy
Last updated: July 11, 2026
This Privacy Policy explains how Scalaze Negócios Digitais LTDA (CNPJ 54.197.254/0001-70), operating the service under the brand The Angry Examiner(“we”, “us”, or “the Service”), collects, uses, stores, shares, and protects the personal data of users of angryexaminer.com and any related applications (together, the “Platform”).
We are the data controllerof the personal data described below, as defined by the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais — Law No. 13.709/2018, “LGPD”). For users located in the European Union or the United Kingdom, we act as the “controller” under the General Data Protection Regulation (GDPR / UK GDPR). For users in the United States, we comply with the Children's Online Privacy Protection Act (COPPA) as applicable.
1. Who we are and how to contact us
Controller / Legal entity: Scalaze Negócios Digitais LTDA
CNPJ: 54.197.254/0001-70
Registered address: Rodovia José Carlos Daux, 5500, Sala 211, Bloco Campeche A, Saco Grande, Florianópolis — SC, 88032-005, Brazil
Trading name: The Angry Examiner
Data Protection Officer (Encarregado — LGPD art. 41): reachable at support@angryexaminer.com
Use the address above for any request related to your personal data, including access, correction, deletion, portability, or complaints.
2. Who can use the Platform and children's data
The Platform is intended for students preparing for exams. To use it you must be at least 13 years old. If you are under 18 (or the age of legal majority in your jurisdiction), you may only use the Platform with the informed consent and continuous supervision of a parent or legal guardian.
In line with LGPD art. 14, the Brazilian Statute of the Child and Adolescent (Estatuto da Criança e do Adolescente — Lei 8.069/1990), COPPA (for users in the United States under 13), and the GDPR (for users in the EU/EEA under 16, or the national age threshold that applies), we process personal data of minors only after obtaining verifiable consent from a parent or legal guardian and always in the best interest of the child.
Parents and guardians may contact us at support@angryexaminer.com at any time to review the personal data we hold about a minor in their care, revoke consent, or request deletion. Where we become aware that we have collected data from a child without the required parental consent, we will delete that data.
3. What personal data we collect
We collect only what is needed to operate the Service:
- Account data: name (or display name), email address, and authentication data (managed by our authentication provider Clerk, including any provider you choose such as Google or Apple).
- Study data you generate: exams you create, quiz attempts, answers, accuracy, XP, streaks, mastery levels, and preferences.
- Subscription data: plan chosen, billing status, invoices, and the last four digits of your payment method — payment card numbers are handled directly by Stripe (via Clerk) and never touch our servers.
- Technical data: IP address, browser/device information, and session cookies strictly necessary to keep you signed in and to prevent abuse.
We do not knowingly collect sensitive personal data (LGPD art. 5, II) such as racial or ethnic origin, religious beliefs, political opinions, health, biometrics, or sexual life.
4. Why we use your data and the legal basis
Each processing activity has a defined purpose and legal basis under LGPD art. 7:
- To operate the Service — signing you in, saving your progress across devices, generating personalized practice questions and explanations, and displaying your history and analytics. Basis: performance of contract (LGPD art. 7, V).
- To process subscriptions — billing, invoicing, tax obligations, and preventing fraud. Basis: performance of contract and compliance with legal obligation (LGPD art. 7, V and II).
- To keep the Service safe — rate limiting, abuse detection, verifying your email. Basis: legitimate interest in maintaining the security and integrity of the Platform (LGPD art. 7, IX).
- To respond to your requests — support, exercise of data subject rights. Basis: performance of contract and legal obligation.
- To process minors' data — done exclusively after verifiable parental or guardian consent (LGPD art. 14).
We do not sell your personal data. We do not use your data to train third-party AI models. We do not run advertising on the Platform.
5. Who we share your data with (subprocessors)
We rely on a small set of processors, each bound by contract and receiving only the data strictly needed to perform their function:
- Clerk (Clerk, Inc., United States) — authentication, account management, and billing orchestration. Receives your name, email, authentication credentials, and subscription state.
- Stripe (Stripe Payments, United States / Ireland) — payment processing, invoked through Clerk. Receives payment method details and billing information.
- Supabase (Supabase Inc., United States) — hosted database storing your account and study data.
- xAI (xAI Corp, United States) — AI provider (Grok) used to generate practice questions and explanations. Receives the topic and context necessary to generate content, without personal identifiers.
- ElevenLabs (ElevenLabs Inc., United States) — voice narration of explanations, used only when you are on the Academic Weapon plan and only for the specific text being narrated.
- Voyage AI (Voyage AI Innovations Inc., United States) — generates embeddings used to find similar past-paper questions. Receives only the topic query, not personal identifiers.
We may also disclose your data when required by law, court order, or public authority, or to protect our rights and the safety of users.
6. International transfers of data
The processors above are based outside Brazil (primarily in the United States). Personal data is therefore transferred internationally. In line with LGPD art. 33, such transfers rely on: (i) contractual clauses providing an adequate level of protection; (ii) the necessity of the transfer to perform the contract with you; or (iii) your consent, when applicable. For transfers involving personal data of EU/UK residents, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.
7. How long we keep your data
We keep personal data only for as long as necessary for the purposes described above:
- Account and study data: while your account is active.
- After account deletion: erased or anonymized within 90 days, except where retention is required by law (e.g. tax records: 5 years under Brazilian tax law).
- Billing records: retained for the periods required by applicable tax and commercial legislation (typically 5 years under Brazilian law).
- Backups: purged on a rolling basis within 30 days.
8. Your rights
Under LGPD art. 18 (and equivalent rights under the GDPR / UK GDPR) you may at any time:
- Confirm that we process your data and access it;
- Correct incomplete, inaccurate, or outdated data;
- Anonymize, block, or delete unnecessary or excessive data;
- Request the portability of your data to another provider;
- Delete your personal data processed with your consent;
- Know with whom we have shared your data;
- Be informed about the possibility of not providing consent, and its consequences;
- Revoke consent at any time.
To exercise any of these rights, email support@angryexaminer.com. We will reply within the timelines set by applicable law (15 days for confirmation of processing and access under LGPD). Parents and guardians may exercise these rights on behalf of minors.
You also have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD) — gov.br/anpd — or with the supervisory authority in your country.
9. Cookies
We use only strictly necessary cookies: session cookies from Clerk that keep you signed in, and a small number of cookies used by our infrastructure to prevent abuse. We do not use advertising cookies, analytics cookies, or third-party trackers. Because these cookies are essential to deliver the Service, they do not require consent under LGPD or the ePrivacy Directive.
10. Security
We apply technical and administrative measures reasonably designed to protect personal data from unauthorized access, loss, or misuse. These include encryption of data in transit (TLS), encryption at rest with our database provider, scoped access controls, and separation of authentication (Clerk) from application data (Supabase). No system is completely secure; if we become aware of a security incident involving your personal data, we will notify you and the ANPD as required by LGPD art. 48.
11. Automated decisions and AI-generated content
Practice questions, explanations, and voice narration on the Platform are generated by artificial intelligence. These outputs are provided as a study aid, may contain errors, and should always be verified against your official course material. They do not constitute automated decisions with legal effects or that significantly affect you (LGPD art. 20).
12. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top and, for material changes, notify you by email or through the Platform before the changes take effect.
13. Contact
Questions, requests, or complaints? Email us at support@angryexaminer.com. Our Data Protection Officer will read your message and respond as required by law.