Privacy Policy

1. Who is responsible

Lembrei (lembrei.org and the app at fnf.lembrei.org) is operated by Alexander Egorov, sole trader (trabalhador independente), Lisbon, Portugal, tax number (NIF) 328339776. We are the controller of the personal data described here. For anything about your data write to alexander@lembrei.org.

2. What we collect

• Account. Your email address and a password, which is stored only as a hash. If you sign in with Google we receive your name, email address and profile picture from Google instead of a password.
• Profile. Name, username and avatar, if you add them.
• Your content. Boxes, cards and collections you create, your learning progress and the collections you like.
• AI input. The text prompts you write to generate cards and, if you use voice input, the audio you record. Audio is sent for transcription and is not stored by us.
• Technical data. IP address, browser type and the time of requests, kept in server logs.

We do not ask for payment details and we do not buy data about you from anyone.

3. Why we use it and on what legal basis

• To provide the service (performance of our contract with you): creating your account, storing your cards, scheduling repetitions, generating cards at your request.
• To keep the service secure and working (our legitimate interest): server logs, preventing abuse, fixing errors.
• To send service emails (performance of the contract): confirming your address and resetting your password. We do not send marketing emails.
• To measure and improve the service with optional cookies (your consent): only if you agree, see section 8.
• To comply with the law (legal obligation), when it requires us to keep or disclose data.

We do not sell your data and we do not make decisions about you by automated means that have legal effect.

4. Who we share it with

We use a small number of providers that process data on our behalf, under a data processing agreement:

• Supabase: database, authentication and file storage. All account data and content is kept there.
• OpenAI: card generation and speech-to-text. Receives your prompts and voice recordings when you use those features, without your name or email address.
• Google: sign-in, only if you choose "Sign in with Google".
• Our hosting provider: runs the servers of the site and the app and sees technical data.

Collections you publish to the catalogue are visible to other users. Apart from that, we disclose data only when the law requires it.

5. Transfers outside your country

Some of these providers process data in the United States or other countries outside the European Economic Area and the United Kingdom. Where that happens the transfer is covered by an adequacy decision or by the standard contractual clauses approved by the European Commission.

6. How long we keep it

• Account, profile and content: for as long as your account exists.
• After you ask us to delete your account: removed within 30 days, apart from backups that expire later.
• Server logs: for a limited time needed for security and troubleshooting.

7. Your rights

Under the GDPR and similar laws you can:

• ask for a copy of your data and for it to be corrected;
• ask us to delete your account and the data in it;
• ask for your data in a portable format;
• object to processing based on our legitimate interest, or ask us to restrict it;
• withdraw a consent you gave, at any time, without affecting what was done before.

Write to alexander@lembrei.org from the email address of your account. We answer within one month. If you are not satisfied with the answer you can complain to the Portuguese data protection authority, CNPD (cnpd.pt), or to the authority of the country where you live.

8. Cookies

We set only the cookies the site and the app need to work. They do not require consent and cannot be switched off here:

We do not use analytics or advertising cookies today. If we add them, they will be off until you agree: you will be asked first, refusing will be as easy as agreeing, and you will be able to change your answer at any time from a "Cookie settings" link at the bottom of the page.

9. Children

Lembrei is not intended for children under 16. If you believe a child has created an account, write to us and we will delete it.

10. Changes

When this policy changes we update the date at the top. If a change is significant we tell you in the app or by email before it takes effect. See also the Terms of Service.