Privacy Policy
Last updated on 2026-07-05
How we handle your personal data.
1. Data controller
myrna is the controller of your personal data. Privacy/DPO contact: privacidade@myrna.app.
2. Data we process
We collect and process:
- Account data: name, email, authentication credentials;
- Content you create: notes, tasks, appointments, contacts (including address and birthday), references, tables, boards, and journals (which may contain sensitive data such as mood/health — processed only to provide the service to you);
- Billing data: handled by Stripe; we do not store card numbers;
- Technical data: logs, user id and route for error telemetry (Sentry), without your content body.
3. Legal bases and purposes
We process data to: perform the contract (provide the Service), meet legal obligations (tax/accounting), for legitimate interest (security and improvement), and with your consent (optional features such as AI and journal weather).
4. Sharing and subprocessors
To operate the Service, we share data with the providers below. Some are outside your country — international transfers use adequate safeguards. DeepSeek, when you enable AI features, processes content on servers in China.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase | Database and authentication | All account data and content | EUA |
| Cloudflare R2 / NuxtHub | File storage and hosting | Attachments, images and covers | Global |
| Stripe | Payment and subscription processing | Billing and identity data | EUA |
| Sentry | Error telemetry | User id and route (no content body) | EUA |
| OpenAI | Generative AI features (optional, with consent) | Content sent to AI features when you use them | EUA |
| DeepSeek | Generative AI (optional) — INTERNATIONAL TRANSFER | Content sent to AI features when you use them | China |
| Nominatim / OpenStreetMap | Address geocoding | Queried contact addresses | UE |
| OpenWeather | Journal weather | Location coordinates | Reino Unido |
| CrossRef, OpenAlex, PubMed, OpenLibrary, Google Books, Semantic Scholar | Bibliographic metadata | Search terms / DOI (no personal data) | Global |
5. AI features (optional)
AI features are off by default. We only send your content (text, image, or audio from notes/boards) to AI providers (OpenAI and/or DeepSeek) when you enable and use these features. You can disable them anytime in Settings, revoking consent.
6. Retention
We keep your data while your account exists. Trash items are permanently removed after 30 days. When you delete your account, we permanently erase your data (hard-delete), including stored files, subject to legal retention obligations (e.g. payment tax records).
7. Your rights
You may: confirm processing; access, correct, and update data; request portability/export; request anonymization, blocking, or erasure; and withdraw consent. Export and account-deletion tools are available in the app; for other requests, email privacidade@myrna.app.
8. Security
We use row-level security (RLS) in the database, encryption in transit, and an optional vault that encrypts notes and journals on your device (only you hold the key). No system is 100% secure; we will report relevant incidents as required by law.
9. Cookies
We use essential cookies for authentication and preferences (language, theme). We do not use third-party advertising cookies.
10. Changes and contact
We may update this Policy; material changes will be announced in the app. Contact: privacidade@myrna.app.