Privacy policy

In short: your location stays on your iPhone. The whole geofence (arriving, leaving, staying) runs on iOS, and places, lists and reminders stay on the device. To use the app you sign in with an account, and the Lembrei server keeps that account, the profile you choose to show, and the reminder requests you exchange with other people. There are no analytics, no ads and no tracking.

1. This site

This site uses no tracking cookies, analytics or pixels. The maps shown are illustrations served by the site itself; no third-party map service is loaded. The server that hosts this site keeps ordinary technical access logs (IP address, page, time), used only for operation and security and deleted periodically.

2. Data that stays on your iPhone

• Where you are. Your location is not sent to the Lembrei server.
• Arriving, leaving and staying in each circle you created. iOS does the monitoring.
• Places, lists, times, reminders, routines, history and recent stops. Raw stops are deleted after 30 days.
• What you save in Para Depois.

Local data is protected by iOS and removed when you delete the app. Lembrei does not use iCloud or sync between devices in this version. When you search for an address or mark a place on the map, the app uses Apple's map services, which receive the search or the chosen point.

3. Permissions the app asks for

• Location, set to “Always”: to remind you when you arrive at or leave a saved place, even with the app closed. It is used on the device.
• Notifications: to deliver reminders at the right moment, including Time Sensitive notifications, and to tell you when someone sends you a reminder request.
• Alarms: in Urgent mode and in routines, alarms that ring even on silent.
• Motion: only to notice a car trip and remind you what to bring. It stays on the device.

4. Your account

You sign in with Apple, with Google or with your email (we send a 6-digit code that is valid for 10 minutes). The Lembrei server keeps:

• an account identifier and the email that came with the sign-in. With Apple, it may be the private relay address Apple creates for you;
• with Apple or Google, your account identifier at that service; with Apple, also a token that lets Lembrei revoke its access when you delete the account;
• the profile you choose: name, @, an emoji and, if you want, a photo (reduced to 256 pixels). Other people who use Lembrei can find you by your @ and see this profile;
• the devices you signed in on (system, app version, sign-up and last-use dates) and each one's Apple notification token;
• the sign-in sessions: the access key lasts 1 hour, the refresh key 90 days, and no session lasts more than 365 days;
• a log of sign-in events (such as signing in, signing out or switching devices), with date and time, without IP address or email, kept for 180 days.

The server does not keep your device model or your IP address. The server's technical logs record the route called, the result and the response time, without the content of requests and without IP. The server is not end-to-end encrypted.

5. Reminder requests between people

When you send someone a reminder request through Lembrei, the server keeps who sent it, to whom, the text, the suggested time, whether it is urgent, and the answer. A place's coordinates and radius go along only when you choose to send the request with a place. The recipient is notified by an Apple notification with your name or @ and the beginning of the text. Requests are kept until you or the other person deletes the account.

A request can also go as a link, over WhatsApp or however you like. In that case the content travels inside the link, and anyone who has the link can see it.

6. Para Depois: reading links

When you save a link in Para Depois and ask Lembrei to work out what it is about, the server receives the link, the title, the text you shared, and the device's language and time zone. It opens the linked page to read its public description and sends this data to Groq, an artificial intelligence service, which returns the interpretation. None of it is written to the database; the result stays in the server's memory for up to 6 hours, not tied to your account. Your location is not part of this request. The link's preview image is downloaded by the iPhone itself, straight from the original site.

7. Lembrei Pro

Lembrei Pro is a monthly or yearly subscription, charged by Apple to your App Store account and renewed automatically until you cancel. If you are eligible, you can start with 7 days free. To cancel, open the iPhone's Settings, tap your name and then Subscriptions, at least 24 hours before the renewal. The Lembrei server receives no payment data and no purchase receipts.

8. Who processes the data

• Hetzner, in Germany: Lembrei's server and database. A daily backup is kept on the same server for 14 days; backups made by hand are kept in Cloudflare R2, in Western Europe.
• Cloudflare: domain name, secure connection, and the tunnel that carries traffic to the server.
• Resend: sending the email with the sign-in code. It receives your address and the code.
• Groq: interpreting Para Depois links, as described above.
• Apple: Sign in with Apple, notifications, the App Store and subscriptions, and map services.
• Google: Sign in with Google.

9. Export and delete

In Geral → Configurações → Seus dados → Exportar meus dados (General → Settings → Your data → Export my data), the app downloads a file with everything the server keeps about you: the account, the sign-in emails, the devices, the sessions, the requests sent and received, and the sign-in events.

In Geral → Configurações → Excluir conta (General → Settings → Delete account), the server immediately deletes the profile, the photo, the sign-ins, the devices, the sessions, the notification tokens and the requests you sent or received. If you signed in with Apple, the server also revokes Lembrei's access to your Apple account. Only the sign-in event log remains, until it reaches 180 days, and the backups, until they are replaced. On the device, deleting the account removes places, friends, requests and recent stops; to remove everything else, delete the app.

Without access to the app, write to [email protected] from the email linked to the account.

10. What we don't do

• We do not sell data or share it with third parties for advertising.
• We use no analytics, tracking or advertising SDKs in the app or on this site. The app's only third-party SDK is Google's, used only for Sign in with Google.
• We do not track you across other companies' apps or websites.

11. Children

Lembrei is not directed at children under 13 and does not knowingly collect data from children.

12. Your rights

Under Brazil's General Data Protection Law (Law 13.709/2018), you can find out what data we have, receive it, correct it and ask for it to be deleted. The app already does most of this: the profile is edited in Configurações (Settings), and export and deletion are described above. For any other request, write to [email protected]; we reply within 15 days.

13. Changes

This policy may change when the app changes. The date at the top shows the current version. If anything that leaves the device changes, this page will say so first.