Privacy Policy

Lorimio is the brand operated by André Valério Carreiro, an individual based in Portugal and the controller of personal data processed to run this service. Lorimio is not a separately incorporated company. This policy covers Lorimio Songs, the invited Lorimio Games pilot, and the account and credit wallet they share.

For privacy questions, contact support@lorimio.com. Our postal contact and legal identification are in the operator details in the Terms of Service.

• Account information: email, authentication identifiers and, for Google sign-in, the basic profile information provided to create and secure your account.
• Creative work: project titles and settings, character or person descriptions, prompts, creative briefs, lyrics and edits, generated pictures, recordings, videos, movie plans, song timing, asset versions, job history and sharing choices. Games may also store personalized messages, preferences, artwork choices, game revisions and play results.
• Details about people supplied by you: a recipient's name, age or life stage, relationship, occasion, memories, personality, appearance and intended message. Gift chapter answers are used to prepare the expanded profile and brief; the raw chapter answers are not saved as project fields.
• Uploaded media, including drawings, photos of real people, and audio or video where upload is supported. Relevant uploads can be sent for safety checks or requested generation. Images are re-encoded to remove embedded EXIF metadata before our media storage. Descriptions or visible details inside the picture may still identify someone.
• Billing records: name, contact details, billing address and tax identifiers where collected, payment and invoice references, Stripe customer and subscription identifiers, purchases, credit balances, refunds, disputes and related support information. We do not store full payment-card numbers.
• Technical and usage information: request metadata, server logs, browser/device information, security events, scrubbed error reports and pseudonymous product-usage events.
• Support correspondence and information necessary to verify and handle a request, including privacy, payment or content complaints.

• Providing the service and performing our contract with the account holder: authentication, saving and recovering projects, requested generation and moderation, sharing you enable, payments, credit accounting and customer support.
• Legal obligations: tax and accounting records, valid requests from authorities, and responding to data-protection or consumer-rights requests.
• Legitimate interests: protecting users and the service, preventing fraud and abuse, resolving disputes, and measuring reliability and feature usage. We consider the impact on individuals and use limited technical information rather than creative content for product analytics.
• For another person's details supplied by an account holder, our legitimate interest is to deliver the requested personalized creation, subject to that person's rights and reasonable expectations. We balance this interest against privacy, with particular care for children. The uploader must have the necessary permissions; a permission checkbox does not remove our responsibilities or the person's rights.
• Consent where legally required for a particular use. Consent can be withdrawn for future processing without affecting processing already carried out lawfully.

Account and necessary payment information are needed to provide the corresponding service. Personal details, photos and public sharing are optional; include only what the creation needs.

Gift and Advanced creations may be about a real person. Only submit details or a photo you have the right and permission to use, including permission from a parent or legal guardian for a child. Tell the person, or their parent or guardian, about the intended generation and sharing and make this policy available to them. Do not submit sensitive details such as health information, identity documents, home addresses or school locations.

A real-person photo is moderated and can be used as an appearance reference, transformed into artwork, kept as a cover, or included in a movie when you choose that use. Uploading alone does not select it as a reference, movie picture or public cover. We do not use these photos to identify people or infer their personality. A drawing can be analysed at your request to suggest a fictional character.

Accounts and purchases are managed by adults. A child may take part in the Kids flow under a parent, guardian or authorized educator's supervision; the adult controls what is submitted and shared. Children's answers, drawings and any permitted photos are processed to make the requested creation. Gift mode is operated by an adult and its recipient may be any age. Contact us if information about a child was submitted without appropriate permission.

To generate or moderate content, we send the relevant prompts, descriptions, lyrics, selected reference pictures and existing media to the provider used for that step. A story movie may require planning, scene pictures and clips. Song timing is calculated from the recording and lyrics by our alignment service on Google Cloud and cached for reuse. Plans, timing and generated assets are stored with the project.

We do not use your prompts, uploads, lyrics, generated assets or project content to train Lorimio's own AI models. Third-party models operate under the terms and settings applicable to their particular endpoint. We cannot give a blanket guarantee that every provider or model route excludes training, human review or retention.

Providers may retain requests and files for service delivery, safety, security, debugging, legal compliance or other purposes permitted by their applicable terms. A provider-hosted file may be accessible to anyone who obtains its URL, depending on the provider's settings. Saving our copy in private storage or deleting a Lorimio project does not itself remove every upstream copy. Avoid submitting material you cannot authorize for this processing.

We use the following categories of service providers. The data sent depends on the feature and selected model; not every provider receives every project.

• Supabase provides authentication and the project database. Google OAuth supports optional Google sign-in. Google Cloud runs the application, storage, task queues and our song-alignment service.
• Google Gemini/Vertex AI and fal.ai process content for moderation, text, image, music or video generation. Some text routes pass through fal.ai and OpenRouter to downstream model providers such as Anthropic or OpenAI. Those routes may have different terms and data practices from a direct account with the model provider.
• Stripe handles payments, subscriptions, billing-portal access, refunds and disputes. Moloni handles Portuguese invoicing and receives the customer details, references and invoice lines needed for that purpose.
• Sentry receives error and diagnostic events, with filtering designed to remove personal information and creative content. Operational server logs also help diagnose failures and abuse.
• PostHog receives limited server-side product events and a pseudonymous account identifier. This identifier can relate events to an account; it is not anonymous. We do not send prompts, lyrics, photos or other creative content in these analytics events.
• Our email and support providers process correspondence. Professional advisers or competent authorities may receive information where necessary for legal, accounting, security or dispute purposes.

Providers process information under their applicable contractual arrangements; some, including payment or identity services, also act for their own legal and security purposes. We do not sell personal data.

Projects are private within Lorimio by default. Enabling a share link allows anyone with that link to view the shared creation. Depending on the product and saved content, this can include the title, cover, lyrics, recording, movie or playable game. A selected real-person photo can be visible as a cover or inside a movie.

The separate public-gallery choice makes a Songs project discoverable to visitors through the public gallery. Enabling a link does not itself opt the project into the gallery. Review the complete creation and obtain the necessary permission before either form of sharing.

You can disable the link or remove the project from the gallery. Removing a gallery listing alone does not disable an otherwise active share link. Revoking access cannot retrieve downloads, screenshots or copies already made by other people or external services.

Lorimio uses cookies and browser storage for sign-in, session security, necessary service functions and your language preference. Payment and sign-in providers may use their own cookies or similar technologies when you interact with their services.

Our product analytics are sent server-side without advertising or analytics-tracking cookies in the Lorimio app. The language cookie stores your chosen interface language. You can manage cookies in your browser, although blocking necessary cookies may prevent sign-in or payments.

We keep account and creative project data while needed to provide your saved work and until you request permanent deletion, subject to legal and security requirements. Archiving a project, including the in-app Delete action that moves it to archived history, hides it and remains restorable; it is not permanent erasure.

Contact us to request permanent deletion of a project or your account. We verify the request, revoke relevant public access, stop or resolve ongoing work, and use our support-assisted process to remove the relevant active project data and recorded media. Account requests also cover relevant authentication and analytics data. We explain any justified retention or provider limitation rather than promising immediate removal of every copy.

Our Google Cloud media storage currently retains soft-deleted objects for seven days before permanent removal. Database backups are taken daily and expire according to the provider's rolling backup schedule; active-system erasure does not instantly remove backup copies. If a backup is restored, relevant deletion requests must be reapplied. Provider-held requests and files follow their own retention arrangements.

We retain necessary billing and tax records, including customer identifiers, contact details, name, billing address, tax identifiers, invoices, payment and refund details, for the legally required period. Limited security, dispute and deletion-control records may be retained for as long as needed for their specific purpose. These records are not used to restore erased creative projects.

Under applicable data-protection law, you may request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent where processing relies on it. These rights also apply to a person described in someone else's creation, subject to the conditions and exceptions in law.

Send requests to support@lorimio.com or the postal contact in our operator details. You do not need a Lorimio account to make a request. Tell us enough to locate the data; we may ask for proportionate information to verify identity or authority.

We respond without undue delay and within one month of receiving a rights request. Where the law permits an extension because of complexity or the number of requests, we will explain the reason within that month and may take up to two additional months. We will explain any lawful refusal or information that must be retained.

You may complain to Portugal's Comissão Nacional de Proteção de Dados (CNPD) or another competent supervisory authority, including in the EU country where you live or work.

Our core application, database and media storage are hosted in the European Union. AI generation, payment, identity, support and other provider processing may take place outside the European Economic Area, including in the United States. EU hosting of our copy does not mean all processing stays in the EU.

The applicable transfer arrangements depend on the provider, route and service terms. Where required, transfers need a lawful mechanism, such as an applicable adequacy decision or contractual safeguards including the European Commission's Standard Contractual Clauses. Contact us for information about the destinations and safeguards relevant to your use, and how to obtain a copy. We do not claim that every provider or model has the same safeguards or certification.

We use measures such as encrypted connections, account access controls, private application storage, server-side provider calls and restricted operational access. Moderation and automated checks support safety but can make mistakes. No online service can guarantee absolute security.

We may update this policy when the service or our practices change. The date above identifies the latest wording. For material changes to how we use personal data, we will provide an appropriate notice, such as an in-product or email notice.