Skip to content
Lembria Coming soon

Privacy policy

Effective date: 17 October 2026. Version: 2026-10-17.1.

Controller and scope

Golden Pine Legacy Inc., trading as Lembria, is responsible for the personal information it processes to operate lembria.com and app.lembria.com. Address: Justina Village, B2, 1700 Parañaque, Philippines. Contact support@lembria.com for privacy questions and rights requests. This notice covers visitors, customers, contributors, readers and people whose information appears in family material.

What we receive and why

We receive information directly from you, from other people contributing to a project, automatically from use of the service, and from the providers supporting sign-in, purchases and delivery.

  • Account and profile details: name, email, account identifier, profile photograph if supplied, language, preferences and family/profile information you choose to add. We use these to authenticate users, manage accounts and enable collaboration.

  • Order and support records: purchased package, order reference, payment status, allowance/usage records and communications. We use these to provide access, deliver purchases, investigate failures, handle refunds, prevent fraud and meet accounting/legal duties. Payment credentials are handled by checkout and payment providers; do not send card details to support.

  • Family content: recordings, voices, transcripts, photographs, captions, names, dates, relationships, stories, prompts, edits, drafts and approved books. We process these to store and organize memories, transcribe audio, produce requested text/images and deliver the book. Material may reveal sensitive matters, including health, religion or ethnicity, depending on what people choose to contribute. Avoid unnecessary sensitive information and obtain any permission required.

  • Collaboration and delivery records: contributor/reader email addresses, invitations, roles, permissions, approvals, publication settings and delivery/access records. We use these to route invitations, manage access and preserve the integrity of published versions.

  • Technical information: IP address, browser/device details, cookies or similar identifiers, timestamps, diagnostics and security/usage events. We use these to run and protect the service, maintain sessions and understand service performance. Optional analytics or marketing uses depend on the choices and legal requirements applying to you.

Account and purchase details needed to provide the service are required for those functions. Profile enrichment and family content are optional, but the features you request may need particular material. Withholding optional data does not require agreement to unrelated marketing.

Sign-in

Google sign-in uses Google/Firebase Authentication and may provide your identifier, email, display name and profile photograph. We do not receive your Google password, and this sign-in does not request Gmail, Drive or Calendar access. Email/password authentication is also handled through Firebase. Removing Google's connection does not itself delete your Lembria records. Your name and profile photograph may be visible to people with whom you collaborate.

Purposes and legal grounds

We process information where necessary to provide the service or perform a contract, comply with legal obligations, pursue legitimate service/security interests where permitted and balanced against your rights, or act on valid consent where required. Sensitive information, third-party material and optional marketing may require specific consent or another applicable legal ground. A purchase, general acceptance of terms or a privacy-notice acknowledgment is not blanket consent to unrelated processing. You may withdraw consent through support; this does not invalidate processing already lawfully undertaken and may affect a feature requiring that information.

Providers, AI and international processing

Our providers are Shopify, Twilio and Google Cloud services, including Firebase and Google's AI services used for requested processing. Shopify operates the store and checkout; Google/Firebase supports authentication, hosting, storage, databases, service operations and requested AI work; Twilio supports service communications. Providers receive information needed for their functions, such as order/contact data, authentication identifiers, email recipients/message content, or the audio, text, photographs and prompts necessary for requested AI work.

AI processing may include transcription, summarization, drafting, translation, image generation and image editing. We do not promise that output is accurate. Review it before publication. This notice does not authorize unrelated advertising use or public-model training on your family content. Provider processing and retention are subject to the applicable service arrangements; contact us for information about the processing relevant to your request.

Information can be processed outside the Philippines or Angola, including in the United States. Shopify's store settings identify the United States as its data-hosting location; other processing locations depend on the provider service. We remain responsible for the safeguards required of us and for satisfying applicable transfer requirements. This notice alone does not establish a regulatory approval for an international transfer.

Shopify also processes some information for its own purposes under its Consumer Privacy Policy. Shopify enhanced features may combine store interactions with information from other merchants and Shopify. See Shopify's privacy portal for choices and rights relating to that processing.

Who can see family material

Information is disclosed according to project roles, invitations and the owner's publication settings. Contributors and readers do not automatically receive all private project material. Unlisted links can be forwarded; public publication can make material available to anyone. Review permissions before sharing.

Authorized personnel may need access to investigate support requests, protect the service, fulfil your instructions or comply with law. We may disclose necessary information to comply with valid legal process, defend legal claims or address fraud and safety threats. We do not receive a general right to use family stories, photographs or testimonials in marketing; that requires separate permission.

Children and other people

Accounts and independent contribution are for adults aged at least 18, subject to a higher applicable local age of majority. Adults can submit material about children only with necessary guardian authority/permission and respect for the child's interests and wishes. Family books may therefore contain children's information; we do not claim that the service never processes it. Contact support to report unauthorized child use or material or to exercise a child's rights with appropriate authority.

Before recording or uploading information about another person, explain the purpose, AI processing and intended audience and obtain the rights and permissions required by law. The person concerned can contact us directly even if they do not have an account.

Retention, withdrawal and deletion

Paid working access normally lasts 12 calendar months from confirmed purchase payment. This is an access period, not a universal data-retention period. We keep account, project and operational information only for the purposes described, lawful obligations, dispute resolution and the protection of rights.

Before scheduled expiry cleanup of working content, we will communicate the applicable recovery/export opportunity and deletion date. Confirm the available export and download deadline shown for your project or through support. Published releases and source files necessary to serve them can be retained separately while the release remains available. Removing working content does not necessarily remove a hosted publication.

Withdrawing a source can block affected hosted outputs, including historical releases. Published versions are not silently rewritten. Hosted restrictions cannot recall already downloaded copies. A deletion request is reviewed for the data and people involved, publication dependencies and lawful retention requirements. We will explain what will be deleted or restricted and any information retained and why.

Backup copies may remain until their applicable recovery/retention cycle ends and are not a normal customer archive. A restore must preserve current deletion, withdrawal and access restrictions before customer access resumes. Ask support for the schedule applying to your request; no fixed backup-purge deadline is represented here.

Cookies and communications

The store uses Shopify and the installed consent tools to manage cookies and privacy choices. Use the available consent control to review or change optional choices. Essential authentication/security functions may remain necessary. Store choices and app/browser settings can operate separately.

Marketing subscriptions are optional and separate from purchase, account, invitation and service notices. Use an unsubscribe link or contact support to stop marketing. Necessary service messages may continue. We do not ask for private recordings or family book content in marketing-subscription forms.

Your rights and how to ask

Depending on applicable law, you may request information/access, correction, a copy or portable export, deletion/blocking, restriction, objection or withdrawal of consent, and lodge a complaint with a competent authority. Email support@lembria.com with the request and enough account/order/project information to identify the records. A person depicted or a lawful representative may also apply. Do not send passwords, sign-in codes, private claim links or unnecessary identity documents.

We may verify identity and authority proportionately and protect other people's information. We will explain any limits or refusal, the response timetable required by applicable law and available review/complaint routes. Privacy rights are not conditional on buying a package or agreeing to marketing. You may complain to the Philippine National Privacy Commission or, where applicable, Angola's Agência de Protecção de Dados, without losing other remedies.

Security and updates

We use access controls and other safeguards appropriate to the service; no system is completely secure. Report suspected unauthorized access promptly. Do not use ordinary email to send unnecessary sensitive family material.

We will update the version/effective date and provide notice and obtain consent where required for material changes. Contact support@lembria.com, Monday–Friday, 9:00am–6:00pm, Asia/Manila.

Revision history: 2026-10-17.1 expands the notice to cover app content, contributions, AI, providers, sharing, children, rights requests and separate retention of working and published material.