Privacy policy

What we keep

Only what the product needs to work:

• Account: your email and a password, or the identifier Apple or Google returns when you sign in through them. We never see your Apple or Google password.
• Profile: your name, the language you picked, your nationality and your theme preference. Nationality is there for one specific reason: visa requirements depend on the passport, not on the destination.
• Trips: title, destination, dates, number of travellers and budget, when you fill them in.
• Content: the links you save.
• Conversations: the questions you ask the agent and the answers it gives.
• Usage: how many questions and how much content you have used this period, which is how your plan's limit is applied.
• Subscription: an identifier from the store where you subscribed.

We do not ask for your phone number, we do not ask for your address, and we do not track your location.

What we use it for

To run the product and nothing beyond it: turning what you save into searchable text, answering your questions from that material, applying your plan's limit, and sending the few emails the service requires.

Two things we do not do, worth spelling out:

• We do not sell your data, and we do not hand it to advertisers.
• We do not use your content or your conversations to train AI models.

The shared base

This is the part you would not work out on your own, so it comes early.

When you save a public link — a Reel, a TikTok, a YouTube video, an article — we extract that content once and keep the text derived from it (a transcript, a summary and a search index) in a shared base that has no owner. If someone else saves the same link later, they reuse what was already extracted.

That has two consequences, and both are intentional:

• The cost of processing drops sharply, which is part of why a genuinely free plan can exist.
• That material may complete somebody else's answer. When it does, the agent says so in the answer itself: the information came from the public base, not from what that person saved.

What goes into that base is the content of the public post, not yours. It does not record who saved what. The link between you and the things you saved is yours, it is private, and it goes when you delete your account.

Who else touches your data

Lembro relies on third-party services to work. Each one receives only what its part needs:

• Supabase — database, sign-in and server functions.
• Vercel — hosting for the site and the web app.
• Apify — extracting content from Instagram and TikTok.
• Groq — transcribing the audio of videos you save.
• Google (Gemini) — analysing the already transcribed text into summaries and notes.
• Resend — sending the service's emails.
• RevenueCat and Stripe — subscriptions bought on the site.
• Apple — subscriptions bought inside the app.

These services operate outside Brazil, so your data is processed abroad. By using Lembro you agree to that transfer.

Payment

We never see your card number. Apple processes it when the subscription is bought inside the app, and Stripe processes it when it is bought on the site.

All that stays on our side is an identifier saying which plan is active on your account. Cardholder name, number, expiry and security code never pass through our servers.

Shared trips

On the Duo plan a trip has two people. Whoever is on the trip sees the content saved in it and the conversations for that trip — that is what the plan is for.

What is not shared: your profile, your other trips, your billing details and your usage counters. Whoever created the trip can remove the other person at any time.

How long, and how to delete

We keep your data for as long as your account exists.

You can delete your account whenever you like, inside the product, under Settings. Deletion is immediate and there is no recycle bin: it removes the account, the trips you created, the content you saved in them and every one of your conversations.

Two things survive, and it is only fair to say which:

• The text derived from public posts that sits in the shared base. It describes the post, not you, and it goes on serving other people. The link between you and it is deleted.
• Billing records that Apple, Stripe or tax law require us to keep. Those stay with whoever processed the payment.

Your rights

Brazil's LGPD gives you the right to know what we hold, correct what is wrong, request a copy, delete everything and object to a use. If you are in the European Union, the GDPR gives you the equivalent.

Most of that you can settle yourself, immediately, inside the product: your profile is editable under Settings and account deletion is on the same screen. For anything not there, write to us — we answer within 15 days.

Security

The protections worth describing:

• Isolation between accounts is enforced by the database, row by row, not by the application code. Every row knows who may read it. It is the strongest protection we have and it holds even if the app has a bug.
• The AI service keys exist only on the server. They are never sent to the browser or to the app.
• All traffic is encrypted.

No system is perfect. If something happens to your data, we will tell you and the regulator, as the law requires.

Minors

Lembro is not intended for anyone under 13, or under 16 in European Union countries that require that age. We do not knowingly collect children's data. If we find that an account belongs to someone below that age, we delete it.

Changes to this policy

If this policy changes, the date at the top changes with it. When a change matters to you, we email you before it takes effect — we do not bury a rule change in a silent update.

Talking to us

Questions, requests about your data or complaints: write to the contact address in the footer of this page. A person reads it and replies.