Lembria — Privacy Policy

Last updated: 2026-09-07

1. Who we are

Lembria (listed on the App Store as "Lembria: Medication Reminders") is a personal medication reminder and tracking app developed and sold by Potiguar (MEI, a Brazilian sole proprietorship, CNPJ 54.388.556/0001-26), based in Natal, RN, Brazil.

If you have any question about this policy or about your data, write to [email protected]. We answer every message.

2. The short version

• We collect the e-mail address you sign up with and the medication information you type into the app.
• We use that information for one purpose only: to run the reminder and tracking service you asked for.
• We do not sell your data. We do not show ads. We do not track you across other apps or websites.
• You can delete your account and all of your data from inside the app at any time.

3. What we collect

Account data

• Your e-mail address.
• Your password, stored only as a cryptographic hash. We never store or see your password in readable form.

Medication data (entered by you)

• Medication name, price, dosage, quantity, start date and end date.
• Schedule information: recurrence type, days of the week and reminder times.
• Dose history: the records created when you mark a dose as taken.

Push notification token

• When you turn on reminders, your device generates a push token — an anonymous identifier issued by Apple or Google that lets a message reach that device, and nothing else. We store it so that when you mark a dose as taken on one device, your other devices stop reminding you about it. The message we send carries no medication name, dose or time — only a signal telling the app to refresh. The token is deleted when you sign out, when you delete your account, when the store reports the app was uninstalled, and after 60 days without use. Delivery is handled by Expo (Expo Push Notification service) and, beneath it, by Apple Push Notification service and Firebase Cloud Messaging.

Caregiver links (only if you use the feature)

• Who you invited (the e-mail address you typed), who accepted, when the link was created and ended, and the permission you granted them ("Can view" or "Can manage").
• When somebody other than you changes your data — a caregiver you granted "Can manage" — we store their display name and the moment it happened, so the change is attributed to a person in your app instead of appearing from nowhere.
• Your device's time zone (for example America/Recife), reported by the app, so we can tell whether a dose scheduled for 08:00 has passed before alerting a caregiver. It is never guessed: with no time zone reported, we simply do not send those alerts.

Usage data (anonymous)

• Anonymous analytics events such as screen views and which features are used, collected through Firebase Analytics (Google).

Diagnostic data (crashes and errors)

• Diagnostic data when the app crashes or hits an unexpected error: device model, operating system version, app version, and the error's technical details (stack trace), sent to Sentry together with your account identifier — never your e-mail address. Medication names and dosages are removed before the report is sent.

Subscription status

• Whether your account is on the free or premium plan, and which product granted it, received from RevenueCat.

4. What we do NOT collect

• We do not collect your payment card data. Purchases are processed entirely by the Apple App Store or Google Play — card details never reach the app or our servers.
• We do not collect an advertising identifier. Firebase Analytics is configured without advertising ID support, so no advertising ID is read or transmitted.
• We do not run ads and we do not ask for App Tracking Transparency permission, because we do not track you across other companies' apps or websites.
• We do not send you marketing or advertising notifications. The only messages we ever push to your device are the silent refresh signal described in section 3 and, if you use the caregiver feature, the two notices described in section 13 — an alert about a dose the person you care for did not mark, and a notice that one of your caregivers changed something. None of them ever names a medication.
• We do not collect your precise location, contacts, photos, or health data from Apple Health / Google Fit.

5. Medication data is treated as sensitive

The medication information you enter can reveal something about your health. We treat it accordingly:

• It is used only to provide the reminder and tracking service — to schedule your notifications, show your medications and keep your dose history.
• It is shared with the people you choose to invite as caregivers, and with nobody else — see section 5.1. That sharing starts only when you send an invite, and ends the moment you remove the access.
• Apart from those people, it is never shared with third parties other than the service providers listed in section 7, who process it strictly on our instructions.
• It is never sold, rented or made available to data brokers.
• It is never used for advertising, profiling or any decision about you.

5.1 Sharing with people you choose (caregivers)

You can invite someone you trust — a daughter, a spouse, a nurse — to follow your medications. Nothing is shared until you send that invite, and you decide how much they may do.

• What a caregiver sees: your medications, their schedules and dose times, and whether each dose was marked as taken.
• The two permission levels, chosen by you when you invite and changeable at any time afterwards:
• "Can view" — they can only look. They change nothing.
• "Can manage" — they can also add and change medications and mark or un-mark doses on your behalf. They can never delete a medication, and they can never raise their own permission.
• Every change made by someone else is attributed by name in your app: a dose says who marked it, and a medication says who last changed it. We also notify you on your device when a caregiver changes something.
• You are always in control: you can lower a permission or end the access entirely, at any time, and it takes effect immediately — on the caregiver's very next action. The caregiver can also leave at any time.
• The invite goes to the address you typed, and it can only be accepted by an account using that address. A forwarded invite does not work.
• Changing the permission of a link is free on any plan, in both directions.

6. Why we use your data, and on what legal basis

Where local law requires consent for health-adjacent data, you give that consent by choosing to enter your medication information into the app, and you can withdraw it at any time by deleting the data or your account (section 10).

7. Who else processes your data

We use a small number of service providers ("processors"). They may only process your data to provide their service to us:

We do not have any other recipients. We do not transfer your data to advertisers, insurers, employers, pharmaceutical companies or data brokers.

8. Where your data is stored, and international transfers

Our backend runs on AWS infrastructure, in a region located in the United States or Brazil. Our processors (Google, Sentry, Expo, Resend, RevenueCat, Apple) may process data in the United States and in other countries where they operate.

This means your personal data may be transferred outside your country of residence, including to countries whose data protection laws differ from your own. When that happens, the transfer is covered by contractual safeguards with the provider — standard contractual clauses or equivalent mechanisms — and the data remains subject to this policy.

9. How long we keep your data

• Account and medication data: for as long as your account exists.
• After you delete your account: deleted from our production systems. Encrypted backups may still contain the data for a short retention window before rotating out.
• Caregiver links: for as long as the link exists. An invite code expires after 7 days. The name recorded next to a change somebody else made is kept with that medication or dose record, and survives the caregiver deleting their own account — otherwise the change would lose its author.
• Anonymous analytics: retained according to Firebase's default retention settings; these events are not linked to your identity.

10. Your rights

Wherever you live, you can ask us to:

• Access the personal data we hold about you;
• Correct data that is wrong or incomplete;
• Delete your data;
• Export (portability) your data in a machine-readable format;
• Withdraw consent for the processing of your medication data;
• Object to or restrict processing based on legitimate interest;
• Know with whom your data has been shared.

These rights are given by the Brazilian LGPD (Lei 13.709/2018) and, for users in the European Economic Area and the United Kingdom, by the GDPR. Users elsewhere get the same treatment as a matter of policy.

How to exercise them: the fastest route for deletion is in the app — open Settings → Delete account. Your account, your medications and your dose history are permanently deleted; this cannot be undone. For anything else, write to [email protected] and we will reply within 30 days.

You also have the right to complain to your data protection authority — in Brazil, the ANPD; in the EEA/UK, your national supervisory authority.

11. Security

Passwords are stored only as hashes. Traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Access to production systems is restricted to the developer. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the competent authority as required by law.

12. Children

Lembria is not directed at children. You must be at least 16 years old to create an account, and the same applies to anyone accepting an invite as a caregiver. If you believe a child has created an account, write to [email protected] and we will delete it.

13. Notifications

Medication reminders are local notifications: your device schedules and displays them, and the reminder content — the medication name, the dose and the time — stays on your device and is never sent to us.

We do send push messages, and they are few:

• The silent refresh signal. When you mark a dose as taken on one device, we signal your other devices to refresh so they stop reminding you about that dose. It displays nothing, makes no sound, and carries no medication name, dose or time.
• The caregiver alert. If you care for someone, we can tell you that they did not mark a scheduled dose. It says their first name and the time — "Maria didn't mark the 08:00 dose" — and never the medication: it lands on your lock screen, where other people may read it. It is rendered in your language, not theirs.
• The change notice. If a caregiver you granted "Can manage" changes something in your medications, your device is told so, quietly and without naming the medication.

The push token that makes all of this possible is described in section 3.

14. Purchases

Lembria offers a monthly subscription, an annual subscription (both with a 7-day free trial) and a one-time premium purchase. All payments are handled by the Apple App Store or Google Play. We receive only your subscription/entitlement status through RevenueCat — never your card number, billing address or store account credentials.

15. Changes to this policy

If we change this policy we will update the date at the top and, for material changes, notify you in the app or by e-mail before the change takes effect.

16. Contact

Data controller: Potiguar — MEI, CNPJ 54.388.556/0001-26, Natal, RN, Brazil. E-mail: [email protected]