Privacy Policy

1. Who is responsible for your data

Practiq is operated by GRP Global Services, CNPJ 53.861.750/0001-14, based in Florianópolis, Santa Catarina, Brazil. Under Brazil's Lei Geral de Proteção de Dados (LGPD) we are the controller of your personal data. Under the EU and UK GDPR we are the data controller. Under California law we are the business.

For any privacy question or request, write to privacy@practiq.studio. We answer within 15 days, which is the LGPD deadline.

2. What this policy covers

This policy applies to the Practiq mobile app, the website at practiq.studio, and the backend services behind them. It does not cover the social networks you publish to. Once you post a video to Instagram or LinkedIn, that platform's own privacy policy governs it.

3. Information we collect

We collect only what the product needs to function. There is no advertising SDK in the app and no data broker in the chain.

Account information

Your name, email address, and authentication credentials. If you sign in with Apple or Google, we receive the identifier and email that provider releases to us. If you use Sign in with Apple's private relay, we only ever see the relay address.

Professional and brand profile

The information you enter during onboarding and afterwards: your profession or specialty, brand voice and style preferences, logo, color and theme choices, your offers, and the description of the client or patient you are trying to reach.

Content you create

Video and audio you record in the app, the transcripts we generate from that audio, the scripts and captions the app drafts for you, the social posts you assemble, and the finished rendered videos.

Subscription information

Your subscription status, plan, trial and renewal dates, and store transaction identifiers. Card numbers never reach us. Apple and Google process payment, and we only receive the resulting entitlement record.

Device and technical data

Device model, operating system version, app version, language and country setting, push notification token, IP address, and server logs of requests to our API.

Diagnostic data

When the app crashes or errors, we receive a crash report that includes a stack trace, device state, and the account identifier of the affected session.

Support messages

Anything you send us by email, including whatever you choose to attach.

Sensitive data: your recordings contain your image and voice, which are biometric-adjacent under some laws. We process them solely to produce the video you asked for. Please do not record patient, client, or case-identifying information. Practiq is not built to be a HIPAA-covered or otherwise regulated repository, and we ask you to keep confidential material out of it.

4. Why we use it, and on what legal basis

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. Under California law that means we have no sale or sharing to opt out of.

5. How AI processes your content

Practiq uses third-party AI models to transcribe your audio and to draft scripts and captions. When you record or generate, the relevant content is transmitted to those providers for processing and the result is returned to you.

• We do not train any model of our own on your recordings, transcripts, or scripts.
• We use these providers under commercial API terms that prohibit them from training their models on content submitted through the API.
• Your content is not pooled with other users' content, and it is never used to generate output for anyone else.

There is no fully automated decision that produces a legal or similarly significant effect on you. The app drafts, and you approve before anything is produced or published.

6. Who processes data on our behalf

These are our processors. Each one handles a specific slice of the job, under contract, and none of them may use your data for their own purposes.

Beyond these processors, we disclose personal data only when a court, regulator, or law requires it, or when a business transfer such as a merger or acquisition occurs, in which case we will tell you before your data moves under a different controller.

7. International transfers

Our infrastructure and most of our processors are in the United States, so your data leaves Brazil and, where relevant, the European Economic Area. We rely on Standard Contractual Clauses and equivalent contractual safeguards with each processor, as permitted by LGPD art. 33 and GDPR chapter V. You can request a copy of those safeguards at the contact address below.

8. How long we keep things

Account and profile data

For as long as your account exists, and for up to 5 years after closure where we need it to defend a claim or satisfy Brazilian commercial and tax record rules.

Recordings and rendered video

Until you delete the project, or until your account is closed. Deleted files are removed from our storage, though backups may retain a copy for up to 30 days before they cycle out.

Transcripts and generated scripts

Tied to the project they belong to, and deleted with it.

Subscription and transaction records

Retained for the period Brazilian tax law requires, currently 5 years, regardless of account status.

Server and diagnostic logs

Up to 90 days.

9. Closing your account, and what that actually does

You can delete your account from inside the app. We want to be precise about what happens, because the word deletion is often used loosely.

• Your access ends immediately. All sessions are revoked and you can no longer sign in.
• Your profile stops being visible or usable anywhere in the product.
• We retain a minimal record of the account, including your identifier and subscription history, to prevent fraud and trial abuse, to handle chargebacks, and to meet tax obligations. We do not keep it to market to you.
• If you want your recordings and generated content erased rather than simply closed off, tell us at the address below and we will erase them, except where a specific legal duty requires us to keep something.

If you subscribed through the App Store or Google Play, deleting your account does not cancel your subscription. Cancel it in your store subscription settings, otherwise it will keep renewing.

10. Your rights

Wherever you live, you can exercise all of the following with us. We do not run a two-tier system by geography.

• Confirmation that we process your data, and access to it.
• Correction of anything incomplete, inaccurate, or out of date.
• Deletion of data we no longer have a lawful reason to keep.
• A portable copy of the data you gave us, in a machine-readable format.
• Anonymisation or blocking of data processed in a way you believe is unnecessary or excessive.
• Information about the public and private bodies we have shared your data with.
• Withdrawal of consent, where consent is the basis we relied on.
• Objection to processing we base on legitimate interest.
• The right to lodge a complaint with the ANPD in Brazil, with your local supervisory authority in the EU or UK, or with your state attorney general in the US.

Send requests to privacy@practiq.studio. We may ask you to confirm your identity before we act, because handing your data to the wrong person would be the worse failure. We do not charge for this and we will not degrade your service for asking.

11. Security

Traffic is encrypted in transit with TLS. Files at rest are encrypted by our storage provider. Access to production data is restricted to the people who need it to operate the service. Recordings are served through expiring signed links rather than public URLs.

No system is perfectly secure. If a breach occurs that presents risk to you, we will notify you and the ANPD as LGPD art. 48 requires, and any other regulator we are obliged to inform.

12. When our team can view your account

Practiq has a support tool that lets an authorised administrator open the app as your account, so we can see the problem you are describing rather than guess at it. Most support requests are impossible to diagnose without it. Because it is a real look at your data, here is exactly what it can and cannot do.

• It never exposes your password. The tool issues a temporary session, it does not reveal or reset your credentials.
• The default mode is read only. In that mode we can look, but we cannot change anything in your account.
• There is a second mode that permits changes, used when fixing something requires acting on your behalf.
• In every mode, payment and subscription actions and account deletion are blocked outright. We cannot buy, cancel, or delete anything.
• Sessions are time limited and expire automatically.
• Every session is written to an audit record: who opened it, which account, which mode, and when.

We use this to resolve a support request, to investigate a bug, or to respond to a security or abuse concern. We do not use it to browse your content out of curiosity, and we do not use it for marketing or analytics. We rely on legitimate interest as the legal basis, and it is limited to staff who need it.

You can ask us whether your account has ever been accessed this way, and we will tell you what the audit record shows. Write to privacy@practiq.studio.

13. Age

Practiq is a professional tool for adults and is not directed at children. You must be 18 or older to hold an account. If we learn that we hold data from a child, we will delete it.

14. Changes to this policy

If we change how we handle your data in a way that matters, we will update the date at the top of this page and notify you in the app or by email before the change takes effect. Continuing to use Practiq after that means you accept the updated policy.

15. Contact

Privacy requests: privacy@practiq.studio. Everything else: hello@practiq.studio. Controller of record: GRP Global Services, CNPJ 53.861.750/0001-14, Florianópolis, Santa Catarina, Brazil. If you need our full registration details for a formal filing, ask and we will provide them.