{"id":2965,"date":"2026-07-02T12:33:55","date_gmt":"2026-07-02T12:33:55","guid":{"rendered":"https:\/\/mugnos-it.com\/?page_id=2965"},"modified":"2026-07-02T12:59:46","modified_gmt":"2026-07-02T12:59:46","slug":"sre-privacy-policy","status":"publish","type":"page","link":"https:\/\/mugnos-it.com\/pt\/sre-privacy-policy\/","title":{"rendered":"SRE Privacy Policy"},"content":{"rendered":"<style>\n.mugit-legal {\n  --legal-text: #eaeaea;\n  --legal-head: #ffffff;\n  --legal-link: #ffb800;\n}\n.mugit-legal, .mugit-legal p, .mugit-legal li,\n.mugit-legal td, .mugit-legal th,\n.mugit-legal em, .mugit-legal strong { color: var(--legal-text) !important; }\n.mugit-legal h1, .mugit-legal h2, .mugit-legal h3 { color: var(--legal-head) !important; }\n.mugit-legal a { color: var(--legal-link) !important; text-decoration: underline; }\n.mugit-legal table { border-collapse: collapse; width: 100%; }\n.mugit-legal th, .mugit-legal td { border: 1px solid #555 !important; padding: 8px 10px; text-align: left; }\n.mugit-legal code { background: rgba(255,255,255,0.10); padding: 1px 5px; border-radius: 3px; }\n<\/style>\n<div class=\"mugit-legal\">\n<p><em>This Privacy Policy explains how <strong>MUGNOS-IT CAPACITACAO E CONSULTORIA LTDA<\/strong> (&#8220;Mugnos-IT&#8221;, &#8220;we&#8221;, &#8220;us&#8221;, or &#8220;our&#8221;), a company established in Brazil (CNPJ 59.977.699\/0001-97, S\u00e3o Paulo, Brazil), collects, uses, shares, and protects your personal data when you use the <strong>MUG IT<\/strong> mobile application and related services (the &#8220;Service&#8221;).<\/em><\/p>\n<p><strong>Effective date:<\/strong> 2026-06-30<br \/>\n<strong>Last updated:<\/strong> 2026-06-30<\/p>\n<p>We act as the <strong>data controller<\/strong> for the personal data described below. Because our users are located around the world, this policy is written to comply with both Brazil&#8217;s <strong>Lei Geral de Prote\u00e7\u00e3o de Dados (LGPD, Law No. 13.709\/2018)<\/strong> and the EU\/EEA\/UK <strong>General Data Protection Regulation (GDPR)<\/strong>, in addition to applicable app-store requirements.<\/p>\n<h2>1. Summary<\/h2>\n<ul>\n<li>MUG IT is an educational platform for learning Site Reliability Engineering (SRE).<\/li>\n<li>We collect the data needed to create your account, deliver lessons, track your learning progress, and (optionally) send you notifications.<\/li>\n<li>We <strong>do not<\/strong> sell your personal data, and we <strong>do not<\/strong> use it for third-party advertising.<\/li>\n<li>Your data is processed using <strong>Amazon Web Services (AWS)<\/strong> and <strong>Google Firebase<\/strong> infrastructure, including servers located in the <strong>United States<\/strong>.<\/li>\n<li>You can request access to or deletion of your data at any time by emailing <strong>contato@mugnos-it.com<\/strong>.<\/li>\n<\/ul>\n<h2>2. Personal data we collect<\/h2>\n<h3>2.1 Information you provide<\/h3>\n<ul>\n<li><strong>Account information:<\/strong> your name and email address when you register.<\/li>\n<li><strong>Authentication credentials:<\/strong> if you register with email and password, your password is managed and stored (in hashed form) by <strong>AWS Cognito<\/strong> \u2014 we never see or store your plaintext password.<\/li>\n<li><strong>Profile data:<\/strong> an optional profile picture\/avatar selection.<\/li>\n<\/ul>\n<h3>2.2 Information from Google Sign-In (if you use it)<\/h3>\n<p>If you choose &#8220;Sign in with Google&#8221;, Google shares your <strong>name, email address, and a unique account identifier<\/strong> with us through the AWS Cognito hosted login flow. We do not receive your Google password.<\/p>\n<h3>2.3 Learning and usage data<\/h3>\n<p>To run the gamified learning experience, we store:<\/p>\n<ul>\n<li>Lessons you complete and quiz scores;<\/li>\n<li>Articles you have read;<\/li>\n<li>Your experience points (XP) and progression level;<\/li>\n<li>Your daily-login streak and last login date.<\/li>\n<\/ul>\n<h3>2.4 Device and notification data<\/h3>\n<ul>\n<li>If you enable push notifications, we store a <strong>device push token<\/strong> provided by <strong>Firebase Cloud Messaging (FCM)<\/strong> so we can deliver notifications. On Android this uses the <code>POST_NOTIFICATIONS<\/code> permission; you can disable notifications at any time in your device settings.<\/li>\n<\/ul>\n<h3>2.5 Technical data<\/h3>\n<ul>\n<li>Standard request metadata necessary to operate and secure the Service (e.g., IP address and timestamps processed transiently by our API gateway and logs).<\/li>\n<\/ul>\n<p>We <strong>do not<\/strong> intentionally collect special-category\/sensitive data (LGPD Art. 5, II \/ GDPR Art. 9), and you should not submit such data to the Service.<\/p>\n<h2>3. How we use your data and our legal bases<\/h2>\n<table>\n<thead>\n<tr>\n<th>Purpose<\/th>\n<th>Personal data used<\/th>\n<th>Legal basis (LGPD \/ GDPR)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Create and manage your account; authenticate you<\/td>\n<td>Account, auth, Google sign-in data<\/td>\n<td>Performance of a contract (LGPD Art. 7, V \/ GDPR Art. 6(1)(b))<\/td>\n<\/tr>\n<tr>\n<td>Deliver lessons and track learning progress \/ XP<\/td>\n<td>Learning and usage data<\/td>\n<td>Performance of a contract (LGPD Art. 7, V \/ GDPR Art. 6(1)(b))<\/td>\n<\/tr>\n<tr>\n<td>Send account emails (verification, password reset)<\/td>\n<td>Email address<\/td>\n<td>Performance of a contract \/ legitimate interest (LGPD Art. 7, V\/IX \u00b7 GDPR Art. 6(1)(b)\/(f))<\/td>\n<\/tr>\n<tr>\n<td>Send push notifications (streaks, content, events)<\/td>\n<td>Device push token<\/td>\n<td>Consent (LGPD Art. 7, I \/ GDPR Art. 6(1)(a)) \u2014 opt-in via device settings<\/td>\n<\/tr>\n<tr>\n<td>Secure the Service, prevent abuse, debug<\/td>\n<td>Technical data<\/td>\n<td>Legitimate interest \/ legal obligation (LGPD Art. 7, IX\/II \u00b7 GDPR Art. 6(1)(f)\/(c))<\/td>\n<\/tr>\n<tr>\n<td>Comply with legal obligations<\/td>\n<td>As required<\/td>\n<td>Legal obligation (LGPD Art. 7, II \/ GDPR Art. 6(1)(c))<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>We do not use automated decision-making that produces legal or similarly significant effects on you.<\/p>\n<h2>4. How we share your data (processors and third parties)<\/h2>\n<p>We share personal data only with service providers (&#8220;operators&#8221;\/&#8221;processors&#8221;) that process it on our behalf under contract:<\/p>\n<ul>\n<li><strong>Amazon Web Services (AWS)<\/strong> \u2014 identity (Cognito), database (RDS PostgreSQL), serverless compute (Lambda\/API Gateway), email delivery (SES), and message queuing (SQS). Used to host and operate the Service.<\/li>\n<li><strong>Google LLC \/ Firebase<\/strong> \u2014 Firebase Cloud Messaging for push notifications, and Google Sign-In (OAuth) if you choose it.<\/li>\n<\/ul>\n<p>We <strong>do not sell<\/strong> personal data and <strong>do not<\/strong> share it with advertisers or data brokers. We may disclose data if required by law, legal process, or to protect our rights, users, or the public.<\/p>\n<h2>5. International data transfers<\/h2>\n<p>We are based in Brazil, and our infrastructure providers process data in the <strong>United States<\/strong> (AWS region <code>us-east-1<\/code>) and potentially other regions. When we transfer personal data internationally \u2014 including from Brazil or the EU\/EEA\/UK \u2014 we rely on appropriate safeguards, such as <strong>Standard Contractual Clauses<\/strong> and our providers&#8217; data-processing terms, consistent with <strong>LGPD Arts. 33\u201336<\/strong> and <strong>GDPR Chapter V<\/strong>. You may request more information about these safeguards using the contact details below.<\/p>\n<h2>6. Data retention<\/h2>\n<p>We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account (or request deletion), we delete or anonymize your personal data within 30 days, except where we must retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements.<\/p>\n<h2>7. Your rights<\/h2>\n<p>Subject to applicable law, you have the right to:<\/p>\n<ul>\n<li><strong>Access<\/strong> the personal data we hold about you;<\/li>\n<li><strong>Rectify<\/strong> inaccurate or incomplete data;<\/li>\n<li><strong>Delete<\/strong> your data (&#8220;right to erasure&#8221; \/ &#8220;elimina\u00e7\u00e3o&#8221;);<\/li>\n<li><strong>Restrict or object<\/strong> to certain processing;<\/li>\n<li><strong>Portability<\/strong> \u2014 receive your data in a structured, machine-readable format;<\/li>\n<li><strong>Withdraw consent<\/strong> at any time (e.g., disable push notifications), without affecting prior processing;<\/li>\n<li><strong>Information<\/strong> about with whom we share your data;<\/li>\n<li><strong>Lodge a complaint<\/strong> with a supervisory authority.<\/li>\n<\/ul>\n<p>To exercise any right, email <strong>contato@mugnos-it.com<\/strong>. We will respond within the timeframes required by law (LGPD: without undue delay; GDPR: within one month).<\/p>\n<ul>\n<li><strong>Brazil (LGPD):<\/strong> you may also contact the <strong>Autoridade Nacional de Prote\u00e7\u00e3o de Dados (ANPD)<\/strong> \u2014 <a href=\"https:\/\/www.gov.br\/anpd\">https:\/\/www.gov.br\/anpd<\/a>.<\/li>\n<li><strong>EU\/EEA\/UK (GDPR):<\/strong> you may lodge a complaint with your local Data Protection Authority.<\/li>\n<\/ul>\n<p>For any questions about how we handle your personal data, or to exercise your rights, contact our data protection channel at <strong>contato@mugnos-it.com<\/strong>.<\/p>\n<h2>8. Account and data deletion<\/h2>\n<p>You can request deletion of your account and associated personal data at any time by emailing <strong>contato@mugnos-it.com<\/strong> with the subject &#8220;Account deletion&#8221;. We will verify your request and delete your data as described in Section 6.<\/p>\n<h2>9. Security<\/h2>\n<p>We use industry-standard measures to protect your data, including encrypted transport (HTTPS\/TLS), managed authentication via AWS Cognito, and access controls. No method of transmission or storage is 100% secure, but we work to protect your data and to notify you and the relevant authorities of incidents as required by law.<\/p>\n<h2>10. Children&#8217;s privacy<\/h2>\n<p>The Service is <strong>not directed to children under 13<\/strong>, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us at <strong>contato@mugnos-it.com<\/strong> and we will delete it. Where stricter local law applies (e.g., a higher age of digital consent in your country), that age applies to you.<\/p>\n<h2>11. Changes to this policy<\/h2>\n<p>We may update this Privacy Policy from time to time. We will revise the &#8220;Last updated&#8221; date and, for material changes, provide additional notice (e.g., in the app). Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.<\/p>\n<h2>12. Contact<\/h2>\n<p><strong>MUGNOS-IT CAPACITACAO E CONSULTORIA LTDA<\/strong><br \/>\nCNPJ 59.977.699\/0001-97 \u2014 S\u00e3o Paulo, Brazil<br \/>\nEmail: <strong>contato@mugnos-it.com<\/strong><br \/>\nWebsite: <a href=\"https:\/\/mugnos-it.com\/pt\/\">https:\/\/mugnos-it.com<\/a><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>This Privacy Policy explains how MUGNOS-IT CAPACITACAO E CONSULTORIA LTDA (&#8220;Mugnos-IT&#8221;, &#8220;we&#8221;, &#8220;us&#8221;, or &#8220;our&#8221;), a company established in Brazil (CNPJ 59.977.699\/0001-97, S\u00e3o Paulo, Brazil), collects, uses, shares, and protects your personal data when you use the MUG IT mobile application and related services (the &#8220;Service&#8221;). Effective date: 2026-06-30 Last updated: 2026-06-30 We act as [&hellip;]<\/p>","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"class_list":["post-2965","page","type-page","status-publish","hentry"],"aioseo_notices":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/pages\/2965","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/comments?post=2965"}],"version-history":[{"count":4,"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/pages\/2965\/revisions"}],"predecessor-version":[{"id":2973,"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/pages\/2965\/revisions\/2973"}],"wp:attachment":[{"href":"https:\/\/mugnos-it.com\/pt\/wp-json\/wp\/v2\/media?parent=2965"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}