Privacy Policy

Limen is a product of Alture Digital, S.L. (“Alture”, “we”), based in Spain. For any question about your data, write to us at privacy@limen.app.

This address is your main point of contact for anything regarding the processing of your data.

Account data: your email address and the data needed to authenticate you. If you subscribe, billing data handled by our payment provider (we do not store your card).

Content you create: your journal entries (text and audio), check-ins, habits, tasks, goals and the associated tags, moods and themes.

Technical usage data: basic device and operational information (such as error logs) needed to keep the service stable and secure.

What you write or dictate may reveal data about your health, emotions, beliefs or personal life. This is “special category” data (Art. 9 GDPR) and we protect it with extra safeguards.

The basis for processing it is your explicit consent (Art. 9(2)(a) GDPR), given when you create your account and start writing, and which you can withdraw at any time by deleting your content or your account.

To provide the service (store and show your journal, sync across devices): performance of the contract (Art. 6(1)(b)).

To detect patterns and give advice based only on your own information: your explicit consent (Art. 9(2)(a)).

To manage your subscription and billing: performance of the contract and legal obligations (Art. 6(1)(b) and 6(1)(c)).

To keep the service secure and stable: legitimate interest (Art. 6(1)(f)), always minimising access to your content.

To generate your patterns, summaries and advice, your content is processed by AI models. This processing exists to give you information about yourself — not to train third-party models with your data.

We work with providers that are contractually bound not to use your content to train their models. AI can be wrong: its observations are a prompt for your reflection, not a diagnosis.

We do not sell your data. We only share it with providers that serve us as data processors, under contract and with confidentiality and security guarantees:

• Supabase — hosting and database. • Anthropic (Claude) and OpenAI — AI processing of your text. • OpenAI (Whisper) — transcription of your voice notes. • Voyage AI — building indexes for search within your journal. • Stripe — payments and subscription management. • Email provider — sending transactional emails.

We may also disclose data where required by law or a competent authority.

Some of our providers are located outside the European Economic Area (for example, in the US). In those cases, transfers rely on the European Commission’s Standard Contractual Clauses or other valid mechanisms ensuring an adequate level of protection.

We keep your content while your account is active. If you delete an entry or your account, we permanently remove your content, except for temporary backups that are overwritten within short periods.

Billing data is kept for the periods required by tax and commercial law.

We apply technical and organisational measures to protect your information: encryption in transit and at rest, strict access control and a practical zero-access approach to your content. No system is infallible, but protecting your journal is our priority by design.

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, at any time. From the app itself you can export your whole journal or delete your account and entries.

To exercise these rights, write to privacy@limen.app. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Limen is not directed at children under 16. We do not knowingly collect data from children under that age; if we detect a minor’s account, we will delete it.

We may update this policy to reflect legal or service changes. We will publish the current version here, with its date, and notify you of any significant changes.

Questions about your privacy? Write to privacy@limen.app and we’ll help you person to person.