Privacy Policy

Last updated: May 2026

1. Who we are

Lembray Ltd is a company registered in England and Wales. We operate the Lembray family memory preservation platform at lembray.com. We are the Data Controller for all personal data processed in connection with Lembray. Contact: hello@lembray.com

2. What data we collect

Account data: name and email. Voice recordings: audio files. Transcriptions: text. Payment data: processed by Stripe, not stored by us. Technical data: IP address for security.

3. Why we collect it

Name and email: necessary to provide the service. Voice recordings: explicit consent. Technical data: legitimate interest in platform security.

4. How we store your data

Account and story data is stored in Supabase (SOC2 compliant). Voice recordings are stored in Cloudflare R2 (encrypted at rest). All data is encrypted in transit using TLS 1.3.

5. Who we share your data with

We share data only with: OpenAI (transcription and translation), Stripe (payment processing), Brevo (email delivery), Cloudflare R2 (audio storage), Supabase (database). We do not sell your data. We do not share with advertisers.

6. How long we keep your data

We retain your data for as long as your account is active, plus 30 days after account closure. Consent records are retained for 7 years. You can request immediate deletion at any time by emailing hello@lembray.com.

7. Your rights

Under UK GDPR you have the right to: access, erasure, portability, rectification, restriction of processing, and objection. To exercise any right, email hello@lembray.com. We will respond within 30 days.

8. Cookies

Lembray uses minimal cookies for session management only. We do not use advertising cookies.

9. Changes to this policy

We will notify you by email of any significant changes. Continued use of Lembray after notification constitutes acceptance.