Who we are
Humanos is a self-knowledge platform available at humanos.com.ai and app.humanos.com.ai, including the app installed on your phone. The book sold on partner sites (such as PDF Astral) is a Humanos product.
Data controller: Humanos — [legal name / CNPJ / address — complete].
This policy covers the app. The sites that sell the book have their own privacy notice, which complements this one.
Data we process
We only process what you give us or what using the app produces:
- Account: name, email, language, app preferences and, if you use them, passkeys (we keep only the public part of the key) and sign-in codes sent by email (they expire within minutes).
- Birth: date, time (optional) and city of birth, used to calculate your maps.
- Photos you upload (face and hands) and the readings made from them. We treat these images as sensitive data.
- Answers to questionnaires (Attunements), the interview, calculated results and texts written for you.
- Journal: notes, dreams, mood check-ins, voice recordings, life timeline, relationships you add, saved items, personal posts and conversations with Lúmen.
- Health and wellness, only with your consent: sleep, heart rate, heart rate variability, oxygen, temperature, steps, workouts, cycle and daily tags, coming from the Humanos ring, another ring or an import you make.
- Community and game: what you publish, private messages with friends, matches, badges and the state of your Island.
- Purchases and plan: book orders, subscription, Crystals and referrals. Card details are entered at the payment provider and never reach us.
- External calendars you connect (we keep the calendar address, treated as a secret).
- Technical data: IP address and rate-limit counters (kept for up to 1 hour), device and browser type, and operational logs without personal data.
Why we use it and on what legal basis
- To provide the service you signed up for (performance of contract): calculate your maps, write the book and deep dives, keep the journal, the game, the community and your plan.
- Health data and photos of your face and hands (consent): only for your own readings in the app, with Lúmen and in your book.
- Security, fraud and abuse prevention, troubleshooting and operating costs (legitimate interest).
- Emails about your account and your book (contract) and newsletters (legitimate interest), always with an unsubscribe link.
- Records of sales, payments and of how we handled data subject requests (legal obligation).
We do not sell your data and we do not share it with third parties for advertising.
Artificial intelligence
Some of the texts and images in the app are generated by artificial intelligence. To do this, excerpts of your data (your map results and, when you use these features, what you write to Lúmen, in the journal, in dreams or in health data) are sent to AI services that we contract or operate ourselves.
What you write goes into these requests as data to be read, never as an instruction. We keep a technical trace of each request for up to 30 days, for troubleshooting; when a request involves sensitive data, the trace keeps only technical information, without the content.
AI-generated texts may contain mistakes. They are readings for reflection, not facts about you.
Health and ring data
Body data is only received after you accept the consent on the Health or ring screen. If the consent text changes, we ask for your agreement again.
This data does not appear to anyone else in the app and is used only for your own reading. It is not a medical diagnosis.
You can withdraw consent at any time, in Health, under "Delete all body data and withdraw consent". This deletes the profile's days, series, workouts, tags, goals and paired rings, and we stop receiving new data.
Who we share it with
We share data only with processors that help us provide the service, and only what each task needs:
- Cloud infrastructure: hosting, database, file storage, PDF generation, AI processing and email delivery.
- Payment providers: they process purchases of the book, the subscription and Crystals.
- Login providers you choose to use (see above).
- Messaging channels you connect yourself to talk to Lúmen.
[named list of processors and international transfer clauses — complete with the owner/legal counsel]
The infrastructure we use has servers in several countries, including outside Brazil. Your data may therefore be transferred abroad, with the safeguards required by the LGPD.
We may also share data when required by law or a court order.
Inside the app, other people only see what you publish: Community posts, your public handle and your Island, if you publish it. The public Island shows only the decoration and your first name.
How long we keep it
- Account and profile data: while the account exists. When you delete the account, it goes (see the data deletion page).
- Private messages between friends: up to 1 year, or until one of the two accounts is deleted.
- Backups: expire within 30 days.
- Technical trace of AI requests: up to 30 days. Operational logs: about 7 days.
- Sales and payment records: 5 years, as required by law; after the account is deleted they are no longer linked to your name and email.
- Proof that we handled a deletion request: 5 years, without your email.
- Email unsubscribe list: kept so you do not receive again what you declined.
Security
All traffic uses HTTPS, internal access is restricted to the people who operate the service, and staff actions are logged. No system is infallible: if an incident happens that may put you at risk, we will notify you and the Brazilian Data Protection Authority within the legal deadlines.
Your rights
Under the LGPD (and, where applicable, the GDPR), you may ask for: confirmation that we process your data, access, correction, anonymization or deletion of what is unnecessary, portability, information about who we share it with, review of automated decisions, and to withdraw consent at any time.
You can do much of this yourself in the app: fix your birth data in Account, delete photos, delete your profile or account, withdraw health consent. For anything else, write to support. You may also file a complaint with the Brazilian Data Protection Authority (ANPD) or your local authority.
To delete your account, follow the instructions on the data deletion page. Data deletion
Children and teenagers
Humanos is not intended for minors without a parent or guardian. Children's accounts only exist as dependents, created and managed by the legal guardian, with the guardian's consent.
[minimum age for an own account — complete with the owner/legal counsel]
Changes to this policy
When we change something important, we update the date at the top and let you know in the app or by email.
Contact and data protection officer
Data protection officer (DPO): [DPO name and contact — complete]. Until one is appointed, the channel is the support email: suporte@pdfastral.com. suporte@pdfastral.com