In short
- In the browser, your studies are kept in your account, on our server: conversations, PDFs, the board, the idea map and the reviews. Only you see them, and they're deleted when you delete the account.
- In the desktop app, they stay on the computer. None of it goes to our server, and the dictation audio never leaves it.
- For the tutor to answer, the needed part of the conversation passes through our server to Anthropic, which generates the answer. We don't store that content, and Anthropic doesn't use it to train models.
- For the account, we keep: email, protected password, name (if you give one), connected computers and browsers, tutor usage and payments.
- We don't sell data, we don't show ads, and the site uses no trackers. Its only cookie remembers the language you picked.
- You can delete the account at any time in the app itself, and reach us at privacidade@saberi.com.br.
Who looks after your data
Saberi is offered by [RAZÃO SOCIAL], CNPJ [CNPJ] ("Saberi", "we"), a company based in Brazil, which is the controller of the personal data described here under the Brazilian General Data Protection Law (Law No. 13,709/2018, the LGPD).
For any privacy matter, including exercising your rights, write to privacidade@saberi.com.br. That is our channel for data subjects.
Where your studies are kept
Saberi works in the browser and, soon, as an installed app. What you study includes:
- study sessions and conversations with the tutor;
- the PDFs you import and the text extracted from them;
- what you write or draw on the board;
- the idea map, the reviews and your study history;
- your preferences.
In the browser, this data is kept in your account, on our server (at Cloudflare), so the app works on any computer you sign in on. Only your account has access to it. You can delete it in the app itself (a session, a material) and, when you delete the account, all of it is deleted. Legal basis: performance of a contract.
In the installed app, it's kept in a database inside the app's folder on your computer and isn't sent to our server to be stored. It ceases to exist when you delete the app's folder. Dictation, which exists only in the installed app, uses a speech recognition model that runs on your computer: the audio never leaves it.
What we keep on the server
For the account to work, our server keeps the data below, each for one purpose and with a legal basis under the LGPD (art. 7):
| Data | What for | Legal basis |
|---|---|---|
| Email and password | Creating the account, signing in and recovering access. The password is kept only as a code derived from it (PBKDF2), never the password's text. | Performance of a contract |
| Name (optional) | What the app calls you and how you appear on payments. | Performance of a contract |
| Connected computers | The system and name of each computer you signed in on, and when it was used, so you can see where the account is open and sign out remotely. | Performance of a contract and legitimate interest (account security) |
| Anonymous computer code | A code computed from the system's identifier, which reveals neither the identifier nor you, to give one free trial per computer and stop it from repeating with new accounts. | Legitimate interest (fraud prevention) |
| IP address when asking for a code | Limiting excessive code requests, which could be used for abuse. | Legitimate interest (security) |
| Tutor usage | For each answer: date, model and amount of text processed, with the cost. Used to apply the plan's limits, show how much you've used and prevent abuse. The content of the conversation isn't part of it. | Performance of a contract and legitimate interest |
| Payments | The offer chosen, the amount, the status and the payment's identifiers at AbacatePay. Card details go straight to AbacatePay and never pass through us. | Performance of a contract and legal obligation (tax) |
| Acceptance of the terms | Which version of these documents you accepted and when. | Regular exercise of rights |
We don't ask for a tax ID, address, phone number, date of birth or sensitive data.
What goes to the AI
The tutor uses language models from Anthropic (Claude). When you send a message, the app sends to our server, and it to Anthropic, what the tutor needs to answer: the session's conversation, your study preferences (level, style and what you've told it about yourself), the parts of the PDF that matter for that question, the image of the board when you answer by hand, and a summary of what you've already learned.
Our server passes that content on and doesn't store it. Under Anthropic's commercial terms, what goes through the API is not used to train models and is deleted within 30 days, except for exceptions it provides for (such as investigating abuse or complying with the law).
Avoid writing personal data the tutor doesn't need, such as documents, passwords or health information. It's made for studying and doesn't need that.
Who we share with
We use companies that process data on our behalf (processors), each only for its own role:
- Anthropic (United States): generates the tutor's answers, as described above.
- Cloudflare (United States, with a global network): hosts our server, the account database, the studies done in the browser and this site.
- Resend (United States): sends the account's emails, such as the confirmation code and plan notices.
- AbacatePay (Brazil): processes payments. It receives your email and, if you gave one, your name.
Other than that, we only share data when the law or an order from an authority requires it. We don't sell or rent personal data, and we don't use it for advertising.
Transfers to other countries
Anthropic, Cloudflare and Resend process data outside Brazil, mainly in the United States. These transfers are made to perform the contract with you and with contractual data protection safeguards offered by those suppliers, as allowed by art. 33 of the LGPD.
Children and teenagers
Saberi is made for students, and many of them are teenagers. That's why we process as little data as possible, never for advertising or consumer profiling, and always in the best interest of the learner, as art. 14 of the LGPD requires.
- Anyone under 18 needs the permission of a parent or legal guardian to use Saberi, and the Pro subscription must be made by the guardian or with their permission.
- For children under 12, the account must be created by the guardian, who gives the specific consent the law provides for.
- If you're a guardian and want to access, correct or delete the data of someone in your care, write to privacidade@saberi.com.br.
Security
All communication between the app, the site and the server is encrypted (HTTPS). Passwords and sessions are kept only as derived codes (hashes), access to the database is restricted and the services' keys are kept out of the code. If a security incident happens that may bring significant risk or harm, we'll notify you and Brazil's National Data Protection Authority (ANPD), as art. 48 of the LGPD provides.
Protect your side too: use a password of your own and sign out on computers that aren't yours (in Settings › Account).
Your rights
Under the LGPD (art. 18), you can ask at any time for:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed against the law;
- portability of your data;
- deletion of data processed with your consent, and withdrawal of that consent;
- information about who we share your data with;
- objection to processing based on legitimate interest, when it doesn't comply with the law.
Much of this you can do yourself in the app, in Settings › Account: change your name and password, see and disconnect computers and delete the account. For the rest, write to privacidade@saberi.com.br from your account's email address. We answer within 15 days. You can also complain to the ANPD.
How long we keep data
We keep the account's data while it exists. When you delete it in the app, we erase from the server:
- the email, the password, the name and the acceptance of the terms;
- the connected computers and open sessions;
- everything you studied in the browser: sessions, conversations, PDFs, the idea map and the reviews;
- the tutor usage history and the payment records linked to you.
What remains, with no link to you:
- the anonymous computer code, so the free trial doesn't repeat on it;
- financial revenue records (amount, offer and date), for the period required by tax law;
- temporary technical logs at our suppliers, deleted by them within a few days.
AbacatePay keeps its own payment records under its policy and the law. Email confirmation codes, with the IP of whoever asked for them, are deleted up to a day after they expire. The data on your computer stays there until you delete it.
Changes to this policy
If we change what we process or how, we update this page and the date at the top. When a change is significant, we let you know in advance in the app or by email. This version is in effect since October 29, 2026. The 7-day free trial and the plans are described in the Terms of Use.