PRIVACY POLICY

Last updated: 29/08/2025

1. INTRODUCTION

Tecnolokid is a startup that develops and delivers educational solutions focused on teaching children and adolescents in basic education digital and technological skills in a multimodal way - through textbooks, literature, workshops, and through the OLO Platform - using a unique methodology and an innovative pedagogical approach aligned with the BNCC and guided by international curricula.

1.1. Definitions

“Tecnolokid” is the company that develops the Platform.

“OLO Platform” is Tecnolokid’s digital learning environment.

“Contracting Party” is the partner company or school that entered into a contract with Tecnolokid. It is responsible for providing the data required to register Users.

“User” means the student, teacher, manager, coordinator, and/or principal who will have their own login to access the OLO Platform.

“Legal Guardian” means the parents or guardians of a registered User when the User is a minor.

1.2. Purpose of this Policy

This Privacy Policy aims to clearly and objectively present the practices adopted by Tecnolokid regarding the processing of personal data of users of the OLO Platform (hereinafter, the “Platform”), including collection, storage, use, sharing, and other forms of processing. This Policy covers the website and any other digital resources operated by the Platform under the responsibility of Tecnolokid Education Ltda., a private legal entity registered with CNPJ/MF No. 32.247.998/0001-10, headquartered at Avenida Venâncio Flores, 125, Sala 206, Centro, Aracruz/ES, CEP 29.190-010, which holds full responsibility for and management of the Platform.

1.3. Definition of Personal Data

For the purposes of this Policy, personal data means any information relating to an identified or identifiable natural person, provided or entered into the Platform by the Contracting Party, capable of identifying the user individually, directly or indirectly.

1.4. Consent for Data Processing

Using the Platform implies awareness and acceptance of this Privacy Policy, authorizing the processing of personal data exclusively for the purposes stated herein.
The consent may be revoked at any time by sending a request to suporte@tecnolokid.com.br, subject to legal processing deadlines.

1.5. Legal Compliance

The operation of the Platform complies with applicable Brazilian laws, including but not limited to Law No. 12.965/2014 (Marco Civil da Internet) and Law No. 13.709/2018 (General Data Protection Law – LGPD), as well as other regulations relevant to privacy and information security.

1.6. Contact Channel

If you have questions, requests, or suggestions related to this Privacy Policy, the User or their legal guardian may contact us at suporte@tecnolokid.com.br. Service is provided during business hours, Monday to Friday.

1.7. Scope of this Policy

This document describes which personal data may be collected, how they are processed, and the technical and administrative measures adopted to protect them against unauthorized access, misuse, or improper disclosure.

2. PERSONAL DATA WE COLLECT

2.1. Purpose of the Data

Tecnolokid may collect, store, and use the following information and/or personal data from users of the Platform:

Personal Data	Purpose
Full name	User registration and identification on the platform
School year	To enroll the user in content appropriate to the school year
Class	To identify and differentiate records

2.2. Data for User Registration

Students: full name, school year, and class (when applicable).

Teachers: full name and the classes they teach.

Managers, Coordinators, etc.: full name and relationship with all school years and classes at the institution.

2.3. Permissions and Access by User

Feature	Students	Teachers	Managers, Coordinators, Principals
Video Lessons
E-books
Exercises
Games
Badges
Unit Assessment
Teacher Training
Dashboard
Brazil's National Common Curricular Base BNCC
Diagnostic Assessment
Teacher Guides & Lesson Plans
Client Users’ Reports

3. PROCESSING OF PERSONAL DATA

3.1. When We Share Data

Tecnolokid does not sell or disclose to third parties any personal data provided by users through the Platform, except in the following situations:

• Legal or court compliance: when necessary to comply with a court order, legal obligation, or request from a competent authority, including for fraud prevention or other unlawful acts, as provided by law;
• Protection of rights: when necessary to protect the rights, property, or safety of Tecnolokid, its users, or third parties;
• Requests from authorities: when requested by public security bodies or government authorities, in cases of suspected legal violations or breach of the Terms of Use;
• At the request of the Contracting Party: when the partner institution requests information relevant to the users under its management;
• Corporate transactions: in the event of a sale, merger, spin-off, incorporation, or corporate reorganization, provided measures are in place to maintain data protection under this Policy;
• Pedagogical management: to allow school administrators and/or parents and guardians to monitor the academic performance of students registered by their institution, including via reports sent by email;
• Technology infrastructure services: with Amazon Web Services (AWS), solely to host the platform’s applications and databases.

3.2. Data Protection and Security

We adopt appropriate technical and administrative measures to protect personal data against unauthorized access, loss, alteration, destruction, or improper disclosure.

3.3. Contact Authorizations

Users authorize Tecnolokid to contact them using the communication channels provided at the time of registration, limited to communications necessary for service delivery and support.

3.4. Data Retention

Personal data will be kept for the period necessary to perform the contract with the Contracting Party - estimated at 1 year, equivalent to a Brazilian school year. After this period ends, data and logins will be securely and permanently deleted.

3.5. Cookies

The Platform does not collect, store, or use cookies for tracking, navigation analytics, advertising, or any other purpose. Access to and use of the platform do not depend on installing cookies on the user’s device.

4. ACCESS, CORRECTION, AND DELETION OF PERSONAL DATA

4.1. Right of Access and Rectification

Users, or their legal guardians, have the right to request access to personal data under Tecnolokid’s responsibility, as well as to request the correction of inaccurate, incomplete, or outdated information.
Requests can be submitted to suporte@tecnolokid.com.br

5.2. Right to Erasure

The data subject or legal guardian may request deletion of personal data at any time, except when retention is necessary for:

• compliance with a legal or regulatory obligation;
• continuity of service provision through the Contracting Party;
• the regular exercise of rights in judicial or administrative proceedings;
• the preservation of legitimate interest under the LGPD.

5.3. Responsibility for Keeping Information Up to Date

The data subject or legal guardian is responsible for keeping registration information accurate and up to date. In case of incorrect data, Tecnolokid may correct or delete it, except where retention is required for legal or legitimate reasons.

5. SECURITY MEASURES

5.1. Data Protection

Tecnolokid adopts technical and administrative measures to protect personal data against loss, misuse, unauthorized access, alteration, or improper disclosure.

5.2. Security of Access Credentials

Users or their legal guardians must take appropriate steps to protect their access credentials (login and password) and are responsible for any misuse resulting from negligence in safeguarding this information.

5.3. Storage and Location

Personal data is stored on secure servers maintained by Amazon Web Services (AWS), which may be located in Brazil or abroad, in compliance with LGPD requirements for international data transfers.

5.4. Technical Security Measures

Information traffic on the Platform is protected by encryption, access monitoring, regular backups, and up-to-date security tools.

5.5. Incident Notification

In the event of a security incident that may cause risk or relevant damage to data subjects, Tecnolokid will notify the affected users or legal guardians and the Brazilian Data Protection Authority (ANPD), as required by the LGPD.

5.6. User Responsibility

The user or legal guardian will be responsible for any misuse of the platform resulting from a breach of this Policy or negligence in handling access credentials.

5.7. Cooperation with Authorities

Tecnolokid will cooperate with competent authorities when there is a legally grounded request to access personal data.

5.8. Limitation of Liability

This Privacy Policy covers only the use and processing of information within the scope of the Platform. If the user accesses third-party links or services, their use will be subject to the third parties’ own policies.

5.9. Data Protection Officer (DPO)

Tecnolokid appoints Aécio João Scarpati as the Data Protection Officer, as required by the LGPD, who can be contacted at suporte@tecnolokid.com.br

6. CHANGES TO THIS PRIVACY POLICY

6.1. Changes and Notifications

Tecnolokid may change this Privacy Policy at any time. Material changes will be communicated to the Contracting Party and, when applicable, directly to users or their legal guardians.

6.2. Non-material Adjustments

Editorial updates or changes that do not significantly alter how data is processed may be made without prior notice.

Legal Notice on the Protection of Children and Adolescents

Last updated: 29/08/2025

Tecnolokid Education Ltda., operator and developer of the OLO Platform, hereby states:

1. We fully comply with the provisions of the Child and Adolescent Statute (Law No. 8.069/1990), recognizing the absolute priority of protecting children and adolescents in the digital environment.
2. The collection of personal data from children and adolescents is carried out exclusively through partner schools and companies, which are responsible for obtaining and proving the specific and prominent consent of parents or legal guardians, as set forth in Article 14 of the LGPD. No data is collected directly from minors without such intermediation.
3. Data processing is restricted to what is necessary for educational purposes and pedagogical support. Use for commercial, advertising, or behavioral profiling purposes is not allowed.
4. We apply appropriate technical and organizational measures to protect minors’ data from unauthorized access, loss, alteration, destruction, or improper disclosure.
5. The Platform does not display ads, does not use tracking cookies, and maintains strict security controls to prevent minors’ exposure to illegal, inappropriate, or harmful content.
6. Parents or guardians may, at any time, request access, correction, or deletion of their children’s or dependents’ data via email: suporte@tecnolokid.com.br.