Privacy policy

Last updated: October 13, 2026

In short: LoreBud stores your account details and what you write so it can show your diary back to you. There are no ads, no analytics and no selling of data. You can ask for your account and everything in it to be deleted at any time.

1. Who is responsible

LoreBud is built and run by Gabriel Bertollo, an independent developer based in Brazil, who is the controller of your personal data. For anything about privacy, write to alpheratzdesigner@gmail.com.

This policy covers the website lorebud.com, the LoreBud web app and the LoreBud app for Android.

2. What data LoreBud collects

• Account data: your email address and the name you give. If you sign in with Google, LoreBud receives your name, email address and Google account identifier. Passwords are handled by Firebase Authentication and are never visible to us.
• Diary content: the entries you write, highlights, tags, notes on skipped days, whether a day is a draft, and the dates and times they were saved.
• Settings kept on your device: language, theme, reminder time and, on Android, your app PIN. The PIN is stored only on your device in protected form and is never sent to us.
• Fingerprint or face unlock: this is done by your phone's system. LoreBud only learns whether the check passed and never receives biometric data.
• Technical data: the Google services that run LoreBud process technical information such as your IP address and device or browser type to deliver the service and keep it secure. The website loads its font from Google Fonts, which also receives your IP address.

LoreBud does not use advertising, analytics or tracking tools. It uses your browser's or device's local storage only to keep you signed in, remember your settings and keep a copy of your diary available offline.

3. How the data is used

• To create your account and sign you in.
• To save your diary and keep it the same on every device where you sign in.
• To show streaks, memories, search results and reminders, which are calculated from your own entries.
• To keep the service secure and to answer you when you get in touch.

Your data is not sold, not used for advertising and not used to train artificial intelligence models.

The legal bases for this are the performance of our agreement with you (providing the diary you signed up for), your consent where it is asked (for example, notifications) and the legitimate interest of keeping the service secure.

4. Who can see your diary

Access rules allow only your signed-in account to read or change your diary. Nothing you write is public or shared with other users.

Your diary is encrypted in transit and while stored by Google, but it is not end-to-end encrypted. This means the person who runs LoreBud has technical administrator access to the database. That access is used only when needed to keep the service working, to fix a problem you report, or to comply with the law.

5. Who the data is shared with

LoreBud runs on Firebase, a service of Google LLC, which acts as a processor for sign-in (Firebase Authentication), storage (Cloud Firestore) and website hosting (Firebase Hosting). Google may process the data on servers outside your country, including in the United States, under its own data protection terms.

Data may also be disclosed when the law or a court order requires it. It is not shared with anyone else.

6. How long the data is kept

Your data is kept for as long as your account exists. A day you delete in the app is removed from the database. When you delete your account in the app, your account and all your diary content are erased right away; a deletion requested by email is completed within 30 days.

7. Deleting your account and data

You can delete any single day inside the app. To delete your account and everything in it, open Settings in the app and choose Delete account. Your diary and your account are erased right away.

If you can't get into the app, send an email to alpheratzdesigner@gmail.com from the address you use in LoreBud, with the subject "Delete my LoreBud account". You will get a confirmation when it is done.

8. Your rights

Under the Brazilian General Data Protection Law (LGPD), and similar laws such as the GDPR where they apply, you can ask to:

• confirm whether your data is processed and get a copy of it;
• correct data that is incomplete, inaccurate or out of date;
• delete your data or your whole account;
• receive your data in a portable format;
• know who your data is shared with;
• withdraw a consent you gave.

Write to the email above to use any of these rights. Requests are answered within 15 days. You can also complain to your data protection authority; in Brazil this is the Autoridade Nacional de Proteção de Dados (ANPD).

9. Security

Connections to LoreBud are encrypted, data is encrypted while stored by Google, and database rules block access by other accounts. On Android you can also protect the app with a PIN and fingerprint, and screenshots are blocked. No system is perfectly secure, so please use a strong password and keep your devices protected.

10. Permissions on Android

• Notifications: to send the daily reminder, if you turn it on.
• Biometrics: to unlock the app with your fingerprint or face, if you turn it on.
• Run at startup: to put your reminder back in place after the phone restarts.

11. Children

LoreBud is not directed to children under 13, and they should not create an account. People under 18 should use LoreBud only with the permission of a parent or guardian. If you believe a child has given us personal data, write to us and it will be deleted.

12. Changes to this policy

This policy may be updated as LoreBud changes. The date at the top shows the latest version, and important changes will be announced in the app or on this website.