Privacy Policy
Last updated: October 27, 2026
This Privacy Policy describes how SIMBIO LABS LTDA, a limited-liability company (sociedade limitada — ME), enrolled with CNPJ under No. 69.798.123/0001-16, with registered office at Rua José Bonifácio, 1929, Centro, São Carlos/SP, ZIP 13560-610, Brazil (“Simbio”, “we”, “controller”), processes personal data in accordance with Brazil’s General Personal Data Protection Law — LGPD (Law No. 13,709/2018) and other applicable rules.
The Portuguese version of this Policy is the official, governing version and prevails in case of any conflict with this English translation.
Contact / data protection officer (encarregado): contato@simbiolabs.com.br
1. Controller
The controller of personal data processed in connection with simbiolabs.com.br and Simbio’s digital products (including Lumina) is SIMBIO LABS LTDA, at the details above. Main CNAE: 62.03-1-00.
2. Data we collect
Depending on how you use the service, we may process:
- Account data: name, email, password (stored hashed/encrypted), language, and preferences.
- Usage data: access logs, in-app interactions (for example, readings completed, Lumens use, gamification progress), device identifiers, technical logs, and diagnostics.
- Payment data: information needed for billing. Payments are processed by Stripe. Simbio does not store full card numbers, CVV, or equivalent payment-authentication data; those are processed by Stripe under its own terms and privacy policy.
- Communications: content of messages you send us (support, rights requests, refunds).
- Cookies and similar technologies: see section 9.
We do not require sensitive data about health, political opinions, religion, or similar as a condition of use. If you send such data spontaneously in communications, we will process only what is needed to respond.
3. Purposes and legal bases (LGPD art. 7)
| Purpose | Examples | Legal basis |
|---|---|---|
| Service delivery | create and manage account, provide Lumina, process one-off Lumens pack purchases | performance of contract (art. 7, V) |
| Payments | charging; operational fraud prevention with Stripe | performance of contract (art. 7, V); legitimate interest where applicable (art. 7, IX) |
| Support | answer questions and requests | performance of contract (art. 7, V) |
| Improvement and security | logs, abuse prevention, stability | legitimate interest (art. 7, IX), with safeguards |
| Legal compliance | tax obligations, responses to authorities | legal/regulatory obligation (art. 7, II) |
| Service communications | account notices, material changes | performance of contract / legitimate interest |
| Marketing (if any) | optional news | consent (art. 7, I), when required |
Some Lumina content may be processed with the assistance of artificial-intelligence providers solely to deliver the service (entertainment and self-knowledge), under appropriate contracts and instructions.
4. Sharing
We may share data with:
- Stripe, as payment processor;
- cloud, hosting, email, and infrastructure providers, as processors (operators);
- artificial-intelligence providers, as processors, when needed to generate product content;
- public authorities, when there is a legal obligation or valid order;
- professional advisors (accounting, legal) under confidentiality duties, when necessary.
We do not sell personal data.
5. International transfers (LGPD art. 33)
Some processors (for example, Stripe, cloud, or AI providers) may process data outside Brazil. In those cases we use mechanisms under LGPD art. 33 and ANPD rules, such as contractual clauses, binding corporate policies, or other adequate safeguards, and we assess the recipient’s level of protection.
6. Retention
We keep data for as long as needed for the purposes in this Policy and for legal obligations (for example, tax record-keeping). Inactive accounts may be anonymized or deleted after a reasonable period, subject to legal retention. Erasure requests will be handled within the limits of LGPD art. 18.
7. Data-subject rights (LGPD art. 18)
You may request:
- confirmation that processing exists;
- access to data;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or erasure of unnecessary, excessive, or non-compliant data;
- portability, subject to regulation and trade secrets;
- erasure of data processed on the basis of consent, subject to legal retention grounds;
- information about public and private entities with which we share data;
- information about the option not to consent and the consequences;
- withdrawal of consent;
- objection to irregular processing.
To exercise rights, email contato@simbiolabs.com.br with subject “LGPD” and, if possible, details that identify your account (registered email). We will respond within legal timeframes.
You may also lodge a complaint with Brazil’s National Data Protection Authority (ANPD).
8. Data protection officer (encarregado)
Channel for the person in charge of personal-data processing: contato@simbiolabs.com.br.
9. Cookies
We use cookies and similar technologies for site/app operation, preferences, aggregated metrics, and security. You may manage cookies in your browser settings; disabling essential cookies may impair use of the service.
10. Security
We adopt technical and organizational measures appropriate to the risk (access control, encryption in transit where applicable, environment segregation, monitoring). No system is absolutely secure; in a relevant incident we will take the measures and make the notices required by the LGPD.
11. Persons under 18
The services are not intended for persons under 18. We do not knowingly collect data from minors. If we learn of an improper registration, we will close the account and delete data as compatible with law. Please notify us at contato@simbiolabs.com.br.
12. Updates
We may update this Policy. The date at the top indicates the current version. Material changes will be communicated by reasonable means.
13. Contact
Privacy and exercise of rights: contato@simbiolabs.com.br.
SIMBIO LABS LTDA — CNPJ 69.798.123/0001-16
Rua José Bonifácio, 1929, Centro, São Carlos/SP, ZIP 13560-610, Brazil