Privacy Policy

Last updated: September 28, 2026

This Privacy Policy describes how ember ("we", "us", or "our") collects, uses, and protects your personal information when you use our mobile application ember (the "App"). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Data Controller: Leonardo Bastianon, Via dei Tigli, 31030 Castelcucco (TV), Italy. Contact: support.ember.app@gmail.com

1. Information We Collect

We collect the following categories of personal information:

• Account information: your name and email address when you create an account. If you sign in with Apple or Google, we receive your email address and, where you allow it, your name from that provider. If you use Sign in with Apple's "Hide My Email" feature, we only receive the relay address Apple provides.
• User-generated content: the entries, thoughts, and tasks you write in the App, including journal entries.
• Usage data: information generated by your use of the App, including focus sessions, streaks, ignitions, and a count of your AI requests (used to enforce free-plan limits).
• Subscription status: whether you hold an active subscription, provided to us by RevenueCat and Apple. We do not receive your payment details.
• Sensitive information: because the journal feature allows free-form personal writing, your entries may contain information you consider sensitive (such as references to health or wellbeing). We process this content only to provide the App's functionality, and only after you have given your explicit consent to the AI features described in Section 3.

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the App and its features;
• Generate AI-based responses (task breakdowns and journal replies), where you have consented;
• Maintain your streaks, focus history, and journal;
• Enforce the limits of the free plan and manage your subscription;
• Respond to your inquiries and provide support;
• Send service-related emails, such as sign-up confirmation and password resets;
• Comply with our legal obligations.

3. Artificial Intelligence and Your Consent

The App uses AI to generate task breakdowns ("ignitions") and journal replies. To provide these features, the content you submit is sent to Anthropic PBC, our third-party AI provider, through its API.

What is sent: the task you type, or the journal entry you write together with your recent previous entries, which give the AI the context needed to remember what you have shared. Your name, email address, and account details are not sent.

Your consent: before any of your text is sent to Anthropic for the first time, the App asks for your explicit consent and explains what will be shared. If you decline, nothing is sent and the AI features simply do not run. You can continue to use timers, streaks, and the journal without the AI. Your consent is recorded on your account and enforced on our servers.

Anthropic's handling: Anthropic processes this content to generate the reply and does not use it to train its models. See Anthropic's Privacy Policy.

You may withdraw your consent at any time by contacting us at support.ember.app@gmail.com, or by deleting your account as described in Section 6.

4. How We Share Your Information

We do not sell your personal information, and we do not use it for advertising. We share information only with the following service providers, who process data on our behalf:

• Anthropic PBC — to generate AI responses, as described in Section 3;
• Supabase — to host our database and manage authentication;
• Apple and Google — to provide Sign in with Apple and Google sign-in, if you choose them;
• Apple and RevenueCat — to process and manage subscriptions;
• Resend — to deliver service emails such as sign-up confirmations and password resets.

We do not use third-party analytics or tracking services in the App.

5. Payments

Subscriptions are processed through Apple In-App Purchase and managed via RevenueCat. We never collect or store your payment card details. Please review the privacy policies of Apple and RevenueCat.

6. Data Retention and Account Deletion

We retain your personal information for as long as you maintain an account with us.

You can permanently delete your account at any time from within the App, under Settings → delete account. Doing so immediately and permanently deletes your account and all associated data, including your journal entries, streaks, profile, subscription record, and AI usage history. This cannot be undone.

If you signed in with Apple, deleting your account also revokes ember's access to your Apple ID, so the App is disconnected from your Apple account.

Cancelling a paid subscription is handled separately through your Apple ID subscription settings and does not delete your account.

7. Your Rights

Depending on your location, you have the right to access, correct, delete, or restrict the processing of your personal information, the right to data portability, and the right to object to processing. EU/EEA users have these rights under the GDPR; California residents have rights under the CCPA, including the right not to be discriminated against for exercising them. To exercise your rights, use the options in your account settings or contact us at support.ember.app@gmail.com.

8. Security

We implement appropriate technical and organizational measures to protect your personal information. Your data is stored with row-level access rules so that each account can only reach its own records, connections are encrypted in transit, and our API keys are held server-side and never included in the App. However, no method of transmission or storage is completely secure.

9. Children

The App is not intended for users under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support.ember.app@gmail.com and we will delete it.

10. International Transfers

Your information may be transferred to and processed in countries outside your own, including the United States, where some of our service providers operate. Where this occurs, we rely on appropriate safeguards as required by applicable law, such as the European Commission's Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and, where the changes are significant, notify you in the App or by email.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: support.ember.app@gmail.com