VERSION OF OCTOBER 30, 2026
Privacy Policy
João Batista Lisboa Peçanha, the individual responsible for Lembriva, processes the data described in this Policy. For questions, complaints and privacy rights, email contato@lembriva.com.
Data processed and people without accounts
Google sign-in provides an identifier, name, email and profile image. Users may enter names, relationships, dates, memories, images, stories, preferences and testimonials. These materials may contain data about people without accounts, including children and teenagers. We also process technical session, device, usage, reminder-delivery and security data, and orders and ledger entries when purchases occur.
Sensitive data and minors
Uploaded content may reveal racial or ethnic origin, religion, political opinion, union membership, health, sex life, genetic or biometric data, and other legally sensitive categories. Avoid including unnecessary sensitive information about others. Accounts are for adults aged 18 or over, but adults may include content about minors; Lembriva considers their best interests, privacy and image rights. Requests about this content may be sent to the contact above.
Purposes and legal grounds
We process data to authenticate, provide requested functions, store and present stories, process payments when enabled, send chosen reminders and address requests. Depending on purpose and data, legal grounds may include performance of the service or pre-contractual steps, compliance with legal or regulatory duties, the exercise of legal rights, legitimate interests where applicable after considering data subjects' rights, or consent where actually used. Sensitive data is processed under the specific grounds established by Brazilian data protection law; contract performance and legitimate interests alone are not general grounds for such data. Permission to publish testimonials and notification choices are specific; accepting the Terms is not blanket consent for all processing.
Google and Google Photos
Google is used for sign-in. If you choose the Google Photos picker, we request read access to selected items and import only photos you choose, which are then stored like other uploads. A short-lived authorization is protected in a cookie; we do not retain permanent library access. You can revoke access in your Google Account. Data received from Google's APIs is used under the applicable Limited Use rules.
Artificial intelligence
When you request an AI function, necessary parts of content — such as names, memory excerpts and, depending on the feature, images — may be sent to the technical provider that processes it. Lembriva stores generated versions and operational metadata. Review results before sharing.
Providers and international processing
We use Cloudflare for infrastructure, storage, queues, processing and, depending on the function, AI; Google for sign-in and optional photo import; OpenAI for certain generations; Resend for email; and Stripe for payments when enabled. Push services depend on your browser and its provider. Some processing may occur outside Brazil. Legal international-transfer requirements apply; further information about providers and safeguards can be requested through the contact above. We do not sell photos or memories.
Shared stories and testimonials
Public stories can be viewed by anyone; unlisted stories by people who receive the link; private stories require a link and password. Links may be forwarded. Testimonials appear publicly only after specific permission and review; you can edit or withdraw yours at /relatos. The testimonial form does not send your book content. Screenshots and copies made by others before revocation are beyond our control.
Payments, credits and card data
When purchases are enabled, Stripe Checkout receives full card data directly; Lembriva does not store it. We keep order, package, amount, currency, status, payment identifiers and credit ledger entries needed for delivery, refunds, reconciliation and applicable obligations. In-account refund requests record the purchase, contact, stated reason, date, reference, and review history. Requests may also be sent to contato@lembriva.com.
Reminders, cookies and metrics
If you enable reminders, we use dates, preferences and chosen channels to send push notifications or email. Cookies protect sign-in and temporary authorizations; your browser may store language, theme and drafts. Technical data and metrics may be processed for operation, security and service evaluation. You may disable reminders in your account and push permissions in your browser.
Retention, deletion and security
We keep active content while the account and relevant function are in use. Deletion removes content from ordinary access; removal from primary systems, technical copies and records follows the applicable process, subject to legal duties, security and legal claims. We do not promise a backup or log deletion period without validating provider settings. Export features provided by Lembriva may vary by data type. Requests relating to access or portability of personal data may be sent through the contact channel in this Policy, subject to applicable law. We use access controls and security measures without promising zero risk.
Your rights and third-party complaints
By emailing contato@lembriva.com you may request, as applicable, confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing and legal grounds, withdrawal of consent where applicable and objection. People without accounts may complain about privacy, images, correction or removal of content depicting them. We may request proportionate information to verify identity and assess a request; we do not disclose the author's private data without an appropriate legal basis. You may also contact the competent authorities.
Changes and contact
Material changes to this Policy will be communicated appropriately. The current version and date appear on this page. Questions, requests and complaints may be sent to contato@lembriva.com.