Privacy Policy

What we collect

• Account data: your email address and password (stored only as a secure hash by our authentication provider), or, if you sign in with Google, your Google account email and basic profile.
• What you create: the affirmations you write, the settings you choose (voice, background, loudness, title) and the audio tracks we generate for you.
• Purchases: which pack you bought, the amount, the currency and the date. Payments are handled by Stripe; we never see or store your full card number.
• Technical data: IP address and approximate country (used to pick the site's language and to protect the service), browser and device information, and server logs.
• Cookies and browser storage: a session cookie that keeps you signed in, a cookie that remembers your language, and your light/dark theme choice stored in your browser. We do not use advertising or cross-site tracking cookies.

Why we use it

• To provide the service you asked for: creating, storing and delivering your tracks (performance of a contract, LGPD art. 7, V).
• To keep the service secure and fair, for example enforcing usage limits and preventing abuse (legitimate interest, art. 7, IX).
• To comply with legal obligations (art. 7, II).
• To contact you about your account or important changes to the service.

Who we share it with

We do not sell your personal data. We share it only with service providers that process it on our behalf to run Subliminals:

• Supabase: database, sign-in and file storage.
• Vercel: website hosting and processing.
• ElevenLabs: your affirmation text is sent to generate the spoken voice, and a description of the background is sent to compose the music.
• Stripe: payment processing when you buy a track pack.
• Google: only if you choose to sign in with Google.

International transfers

These providers may store or process data outside Brazil, including in the United States. When that happens, we rely on the safeguards allowed by LGPD art. 33, such as the providers' contractual commitments to protect personal data.

How long we keep it

• During the beta, generated tracks are deleted automatically 7 days after they are created. You can download them before then, and delete them earlier at any time.
• Account data is kept while your account exists. To delete your account and its data, contact us.
• Technical logs are kept for a limited period for security and troubleshooting.

Your rights

Under LGPD art. 18 you can ask us to confirm whether we process your data; access it; correct it; anonymize, block or delete unnecessary or excessive data; port it to another provider; learn who we share it with; and withdraw consent where processing relies on it. You can also file a complaint with Brazil's data protection authority (ANPD).

To exercise any of these rights, write to hello@yoursubliminals.com. We will reply within the time limits set by law.

Security

Data is encrypted in transit, and access to your tracks is restricted to your account. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of any relevant incident as the law requires.

Children

Subliminals is intended for adults. We do not knowingly collect data from anyone under 18.

Changes

We may update this policy. We will change the date at the top and, for significant changes, let you know by email or in the app.

Contact

OCEANCODE TECNOLOGIA DA INFORMACAO LTDA, CNPJ 65.842.631/0001-01

Av. Brigadeiro Faria Lima, 1811, conj. 115, Jardim Paulistano, São Paulo – SP, 01452-001

hello@yoursubliminals.com