Data rights (LGPD): export and delete your account

Studeia is built privacy-first (LGPD-native) and lets you exercise your data rights self-service. This guide explains how to export and delete, and what's retained for legal reasons.

Quick answer

Export all your data (portability, Art. 18 IV) — JSON, 1×/24h
Delete your account (Art. 18 VI) — soft delete: anonymizes PII + deletes chat data
Legal retention (Art. 16 I): learning data stays anonymized for 5 years
Deletion blocked if you're the institution's only administrator

Export your data (portability)

Data export supports Art. 18 IV of LGPD: you receive a JSON file with all your personal and learning data. To prevent abuse, there's a limit of one export every 24 hours per user.

Delete your account

Deletion supports Art. 18 VI and works as a soft delete:

What happens	Detail
Personal data (email, name)	Anonymized
Conversational data (chat, memory, links)	Deleted
Learning data (grades, completions, attempts)	Retained anonymized (legal retention)
Authentication account	Removed

Why some data is retained

Legal retention (LGPD Art. 16 I) requires preserving academic and tax records for a period, even after a deletion request. This data is anonymized — unlinked from email and name — so it no longer directly identifies you.

Special case: only administrator

If you're the only institution_admin of the tenant, deletion is blocked to avoid leaving the institution without an administrator. Add or promote another administrator before deleting.

Where privacy is guaranteed

Per-institution isolation (multi-tenant): one institution's data doesn't leak to another.
Minor protection: minors' data gets special handling and tutor moderation.
Encryption: sensitive credentials and tokens are encrypted at rest.

FAQ

How do I export my data? Via data export (Art. 18 IV) — JSON, 1×/24h.

How do I delete the account? Soft delete (Art. 18 VI): anonymizes PII and deletes chat data.

Why retain data? Legal retention (Art. 16 I) — anonymized, not identifiable.

Am I the only admin? Deletion is blocked; add another admin first.

See Security & data protection and multi-tenancy and isolation.

FAQ

How do I export all my data from Studeia?

Via the data-portability endpoint (LGPD Art. 18 IV), which returns a JSON file with all your personal and learning data. For protection, there's a limit of one export every 24 hours per user. The feature supports the data-portability right under LGPD.

How do I delete my account and what happens to my data?

Via account deletion (Art. 18 VI), which performs a soft delete: it anonymizes personal data (email, name) and deletes conversational data (chat sessions, episodic memory, links). Learning data (grades, completions, attempts) is retained for 5 years of legal/tax retention (Art. 16 I), anonymized — not linked to your identity.

Why is some data retained after deletion?

Due to a legal retention obligation (LGPD Art. 16 I): academic and tax records must be preserved for a period even after a deletion request. The difference is that this data is anonymized — unlinked from email and name — so it no longer directly identifies you.

I'm the institution's only administrator. Can I delete my account?

Deletion is blocked if you're the tenant's only institution_admin, to avoid leaving the institution without an administrator. Transfer or add another administrator before deleting. This protects operational continuity and access to the institution's data.