BONISOFT · WEBSITE & SOFTWARE PRODUCTS
Privacy policy.
Effective date: November 5, 2026
This Privacy Policy explains how Bonisoft collects, uses, stores, and shares personal information when you use our websites, applications, games, and related services, or contact us (together, the “Services”). Different products offer different features; the descriptions below apply where you use the relevant feature. A product may provide additional privacy information for a particular feature.
1. Who we are
Bonisoft is the trade name of DAVI DE CASTRO REIS CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA, CNPJ 46.504.400/0001-35, the controller of personal information processed for our Services. Bonisoft3 is the identity used for our company website and GitHub organization.
Registered address: Avenida Paulista, 1636, Conj. 4, Pavimento 15, Bela Vista,
São Paulo – SP, CEP 01310-200, Brazil.
Privacy contact: Davi Reis, davi@davi.eng.br.
This policy applies to Services operated by Bonisoft. If another organization operates software built with our open-source tools, that organization is responsible for its own privacy practices.
2. Information we collect
- Account and profile information: identifiers, usernames, display names, sign-in information, and any profile details or pictures you choose to provide. Guest use can also create a technical identifier. If you use a third-party sign-in option, we receive the identifiers and profile information supplied through that option.
- Content and activity: information you submit, create, or share, such as prompts, flashcard decks, generated content, comments, social interactions, game activity, and scores.
- Device and usage information: IP address, browser and device information, requested pages, timestamps, technical identifiers, error information, and security signals generated when you access the Services.
- Communications: your name, email address, messages, attachments, and other information you provide when contacting us or requesting support.
- Transaction information: if you purchase a paid service, information needed to manage the order, payment status, billing, and applicable records.
Not every product collects every category. Some features store information on your device; others send it to our servers or providers to operate the feature. Information needed for a particular feature may be required to use it. Other information, such as optional profile fields, is voluntary. Please do not submit sensitive information or another person’s information unless it is necessary and you are entitled to do so.
3. How we use information
We use information to:
- Provide the Services, authenticate users, remember preferences, and synchronize content and progress.
- Generate requested content and operate learning, gaming, social, and other features you choose to use.
- Display content you publish and enable interactions with other users.
- Respond to inquiries, provide support, and administer business relationships and transactions.
- Maintain reliability, diagnose problems, improve functionality, and prevent fraud, misuse, and security incidents.
- Comply with legal obligations, resolve disputes, and protect users’ and Bonisoft’s rights.
Under Brazil’s Lei Geral de Proteção de Dados Pessoais (LGPD), we rely on the legal basis appropriate to the activity: performance of a contract or requested pre-contractual steps, legitimate interests subject to your rights, legal or regulatory obligations, the exercise of rights, or consent where required. Reading this policy does not itself provide consent for unrelated processing.
4. Public content and connected features
Information you publish through public features can be viewed, copied, and shared by other people. Depending on the product, this can include profiles, usernames, decks, comments, game results, or community activity. Choose carefully what you make public; information is not private simply because it is associated with your account.
Multiplayer and other connected features exchange the information necessary to connect participants and synchronize activity. Peer-to-peer connections can expose network information to the other participants. If you use an externally hosted picture or another external resource, your device may contact that host to retrieve it.
5. AI-powered features
When you request AI-generated text, images, translations, or similar content, the information needed to fulfill your request may be sent to an AI service provider. This can include your prompt, topic, selected language, audience description, and relevant content or settings. Our AI infrastructure includes Cloudflare and Google services where configured for the feature.
Provider processing and retention depend on the service and contractual terms used for that feature. Do not include confidential or sensitive personal information in a generation request unless needed. Generated content may be stored or displayed as part of the product, including publicly where the feature publishes shared content. Contact us if you need information about the provider used for a particular request.
6. Cookies and local storage
The Services may use cookies, browser storage, caches, and similar technologies for sign-in, security, preferences, offline use, and saving or synchronizing activity. You can manage these through your browser or device settings. Clearing or blocking them may sign you out or remove locally saved information; it does not necessarily delete information stored on our servers.
Our company website currently does not install advertising pixels, remarketing tags, or analytics scripts. Hosting providers may use security cookies. Where a Service uses optional analytics or advertising technologies requiring consent, we will provide the relevant information and request consent before enabling them.
7. How we share information
We share information as needed with:
- Service providers: hosting, storage, security, authentication, AI, communications, and, where applicable, payment providers helping us deliver the Services. These include Cloudflare and Google for the Services that use their infrastructure.
- Other users and the public: when you publish content or use a feature that involves sharing information with other people.
- Authorities and professional advisers: where required by law or necessary to investigate misuse, resolve a dispute, or establish or defend legal rights.
- A business successor: if a merger, reorganization, or transfer of the relevant business requires it, subject to applicable safeguards and notice requirements.
We do not sell your personal information. External websites, sign-in providers, and independently operated services have their own privacy practices. For information about our infrastructure providers, see the Cloudflare privacy policy and Google privacy policy.
8. International processing
Bonisoft is based in Brazil, and our providers operate internationally. Your information may be processed in countries outside your own, including the United States. International transfers are subject to applicable data-protection requirements and appropriate legal safeguards. You can contact us for information about the providers and transfer arrangements relevant to your data.
9. Retention and deletion
We keep personal information for as long as necessary to provide the relevant Service, maintain your account, handle requests, and fulfill the purposes described in this policy. Retention depends on the information, the feature, and applicable legal obligations. Records needed for security, legal compliance, dispute resolution, or the exercise of rights may be retained longer.
You can request account or personal-data deletion by emailing davi@davi.eng.br. We will assess and act on the request subject to applicable legal exceptions. Removing an account may affect access to associated content. Copies in backups, other users’ devices, or external services may not disappear immediately, and content others have independently copied may remain outside our control. Clearing your browser storage alone does not close a server-side account.
10. Your rights
Depending on the law applicable to you, including the LGPD, you may request:
- Confirmation of processing, access, and correction of inaccurate or incomplete information.
- Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data.
- Portability, subject to applicable regulation and limitations.
- Information about sharing, consent choices, and the consequences of withholding consent.
- Withdrawal of consent and deletion of consent-based data, subject to lawful retention exceptions.
- Opposition to unlawful processing and review of qualifying automated decisions.
Send requests to davi@davi.eng.br, identifying the product and account or interaction concerned. We may need proportionate information to verify your identity. Exercising your rights is free of charge. We will respond within applicable legal deadlines and explain any lawful limitation. You may also contact Brazil’s Autoridade Nacional de Proteção de Dados (ANPD) or another competent supervisory or consumer-protection authority.
11. Children and young people
Some products provide educational content for children. Parents and guardians should supervise use and avoid entering a child’s identifying or sensitive information where it is unnecessary. When we process children’s or adolescents’ personal information, their best interests and applicable legal requirements govern that processing, including parental consent where required.
A parent or guardian can contact davi@davi.eng.br with questions or a request concerning a child’s information. If you believe information was provided without the authorization required by law, please tell us so we can investigate and take appropriate action.
12. Security
We use technical and organizational measures appropriate to the Services to protect personal information, including encrypted connections and access controls. No system can guarantee absolute security. Keep your devices and sign-in credentials secure and notify us of suspected unauthorized use.
13. Changes and contact
We may update this policy as our Services or legal requirements change. We will publish the revised policy with an updated effective date and provide additional notice or obtain consent where required.
For privacy questions or requests, contact Davi Reis at davi@davi.eng.br.