Privacy
What Ludifica keeps, why, who it shares it with and how to ask for it to be deleted.
Version of 11 November 2026.
Summary
- You do not need an account, a name, an email or a phone number to take part in an interaction. We keep what you send (answers, ideas, votes) and a random identifier for your device.
- In interactions that use AI, the text the group sends is processed by OpenAI to produce themes, ideas, statements and summaries.
- People who create an account or join the launch waitlist give us a name and an email address.
- We use Google Analytics to measure visits and Google reCAPTCHA to keep bots out of our forms.
- We do not sell personal data.
Controller: Ludifica, AYRA TECNOLOGIA E DESENVOLVIMENTO DE SOFTWARE LTDA (Brazilian company number, CNPJ, 37.396.023/0001-77). Contact: contato@ludifica.com. Data protection officer: reached through the same contact.
Taking part in an interaction
You join through the link or QR code the facilitator shows on the big screen. There is no sign-up.
What we keep
- What you send: text, choices, votes and points, linked to the interaction and the run (the session) they were sent in, with a date and time. This content shows on the big screen and can be seen by the facilitator and the other participants.
- A random device identifier in the
ludifica_pidcookie. It recognizes the same phone during the session (for example, to remember the cards you picked). It holds no name or contact details; other devices only see a scrambled version of it. - In the Contagion game, the name or nickname you type (up to 24 characters) is stored with your color and your position in the game. It is also saved in your browser for the next round.
- Session usage statistics: participation records without names, such as joins, time per step, number of contributions, device type (phone or laptop) and calls made to the AI. These records do not include IP addresses or the full browser identification.
Interaction screens do not store your IP address or your browser identification.
Shared reports
The facilitator can create a read-only link to the report of a run. Anyone with that link sees what the group produced in that session. The report identifies participants by pseudonym, and the person running the session can revoke the link.
Write in an interaction as you would on a sticky note on the wall: leave out personal details about yourself or anyone else.
Creating an account
- Account data: name, email and password. The password is stored as a hash, never as text.
- Signing in with Facebook, when that option is on: Facebook sends us your name, email and the address of your profile picture.
- What you create: scripts, interactions, runs and their settings.
- Subscriptions: payment happens on Stripe's page. We send Stripe your email and the plan you chose; we keep Stripe's identifiers, the amount and the payment confirmation. Card details stay with Stripe and never pass through our servers.
In your account, under Personal data, you can download your data and delete the account.
Launch waitlist
The form on the home page keeps your name, email and, if you fill it in, how you heard about Ludifica. This creates a locked account record that is only opened when we give you access. We send a confirmation email through Zoho Mail.
Artificial intelligence
Some interactions send the text the group wrote to the OpenAI API, so the AI can return something to the big screen:
- themes from the ideas on the wall (AI Clustering);
- statements from open answers (AI Statements);
- ideas, combinations and refinements (Idea Forge, Idea Swipe, the combination and group tables);
- summaries and agreements (AI Summary, Survey with summary, Choice and why);
- newspaper stories from headlines (Future Headlines) and manifestos;
- in the debate interaction, the facilitator's audio is transcribed and replies can be read out in a synthetic voice; audience questions are sent as text.
Each interaction page in the gallery says whether it uses AI. We do not send your name or email to OpenAI with that text. For details about how OpenAI handles this data, write to us at the contact above.
Third-party services
| Service | What for | What it receives |
|---|---|---|
| Supabase | Database (PostgreSQL) | Everything described on this page. |
| Oracle Cloud | The server Ludifica runs on | Requests to the site and the app. |
| OpenAI | AI interactions | The text sent in those interactions (see above) |
| Google Analytics | Measuring visits to the site and the app | Pages visited, browser and device data, its own cookies |
| Google reCAPTCHA | Keeping bots out of sign-in and the launch waitlist | Browser data and how the page is used; our server sends Google your IP address to check the submission |
| Zoho Mail | Sending email (confirmations, passwords) | The recipient's name and email |
| Stripe | Subscription payments | Email and the chosen plan |
| Cloudinary | Avatar images in the Heroes interaction | The image made in the interaction |
The public site uses fonts hosted by Ludifica itself. Some app screens still load fonts and libraries from CDNs (Google Fonts, jsDelivr, cdnjs), which receive your IP address when they deliver those files.
Several of these services are outside Brazil. For details about these transfers, write to us at the contact above.
How long we keep data
There is no automatic deletion period: data is kept until deletion is requested through the contact above.
Today, deleting a run in the app does not automatically delete the answers sent in it. To have the answers from a session removed, write to contato@ludifica.com.
Your rights and contact
Under Brazil's data protection law (LGPD) you can ask what data we hold about you, have it corrected, take it to another service, have it deleted or withdraw a consent. Write to contato@ludifica.com. If you took part without an account, tell us which session and what you wrote, because we have no name to search for.
Legal bases: available on request through the contact above.
When this page changes, the date at the top changes with it.