Trust & Privacy
Children's data, handled with care.
A creative practice for schools only works if families and educators trust it completely. We built Breathe Dream Create to align with Brazil's LGPD and the ECA Digital (Law 15.211/2025) — and, for our EU work, the GDPR — holding children's work to a higher standard than the law requires.
Our commitments
Built for LGPD & ECA Digital
Designed around Brazil's data-protection and children's-digital-safety laws: lawful basis, data minimisation, purpose limitation, and clear rights for families.
The work is the child's
Everything a child makes in their Creative Book of Life belongs to them and their family — not to us.
No ads. No selling data.
We never sell or rent personal data, never show advertising, and never train third-party models on children's work.
We collect only what's needed
Data minimisation by design — a name and the pages made in the practice. Nothing we don't need to run it.
Encrypted, end to end
Data is encrypted in transit (TLS) and at rest with reputable cloud infrastructure. Access is least-privilege.
Safeguarding by design
No public profiles, no child-to-child messaging, no open sharing. A closed, calm space.
The school stays in control
The school is the data controller; we are the processor, acting only on the school's instructions under a DPA.
Delete anytime
Schools and families can export or permanently delete a child's data on request — no strings attached.
Child safety by design (ECA Digital)
Brazil's ECA Digital (Law 15.211/2025) sets duties for any digital service likely to be used by children and adolescents. Breathe Dream Create is built around them.
The child's best interest first
Every product decision prioritises children's safety and wellbeing — the guiding principle of the ECA Digital.
Safe by default
The most protective settings are the default: no public profiles, no child-to-child messaging, no open sharing — a closed space mediated by the school.
No targeted ads or profiling
We never advertise to children and never build behavioural profiles of minors.
No addictive or predatory design
No streaks, no manipulative rewards, no attention-trapping mechanics. The practice is calm and capped at about 10 minutes a day.
Guardians can supervise
Parents follow their child's Creative Book of Life through their own private link, and can request access, correction or deletion.
A channel to raise concerns
A direct safeguarding channel to report any safety concern, with a response and cooperation with schools and authorities when needed.
Who controls the data
The school — data controller
Decides why and how children's data is used, obtains the necessary consent from families, and can request a Data Processing Agreement (DPA) from us at any time.
Letter B — data processor
We process data only to run the practice, strictly on the school's instructions. We do not repurpose it, sell it, or share it beyond the sub-processors needed to operate the service.
Families — the rights holders
Parents and guardians can see their child's Creative Book of Life, and request access, correction, export, or deletion at any time.
Legal basis & governance (LGPD)
Basis for children's & adolescents' data
We process minors' data in their best interest (LGPD, art. 14). For children, processing relies on specific, highlighted consent from a parent or guardian, obtained by the school as the controller.
Data Protection Officer
Reach our privacy contact at privacy@letter-b.com for any request, and to be put in touch with our Data Protection Officer (Encarregado).
Sub-processors
A small, vetted set of providers runs the service — hosting, database, payments and transactional email — each under contractual confidentiality and limited-use terms.
International transfer
Some infrastructure sits outside Brazil; we apply contractual safeguards for international data transfers as required by the LGPD.
Retention & deletion
We keep data only as long as needed to run the practice and produce the school's report. Schools and families can export or permanently delete a child's data at any time.
What we collect
- A child's name (or a class alias) and school.
- The pages they create in the practice — drawings, writing, ideas — kept in their Creative Book of Life.
- Basic usage needed to run the service and produce the teacher's report.
What we never do
- Sell, rent, or trade personal data.
- Show advertising to children.
- Train third-party AI models on children's work.
- Build behavioural profiles for marketing.
Your rights
Access — see the data and the child's Creative Book of Life.
Correct — fix anything inaccurate.
Export — take a copy of everything the child made.
Delete — permanently remove a child's data.
Questions about data?
Our team answers privacy and safeguarding questions directly, and can share our DPA and security documentation with schools on request.
Contact us about privacyThis page summarises our commitments and does not constitute legal advice. A full Data Processing Agreement, our sub-processor list, and the formal appointment of our Data Protection Officer are available to schools on request. Last reviewed: 2026.