Legal
Privacy Policy
Last updated: January 1, 2026
Your privacy is not a formality to us — it is a core part of what Ember is. This policy explains, in plain language, how we handle your data.
What we collect
When you create an account, we collect your email address and the password you set. When you use Ember, we collect usage data to improve your experience — things like which features you use and how often. We also collect the content you create in Reflections and journals, which is stored securely and privately. We never read your journal entries.
How we use your data
We use your data to provide and improve Ember. This includes syncing your progress across devices, sending you your daily Letter, and personalising recommendations. We use anonymised, aggregated analytics to understand how people use Ember — never individual-level tracking for advertising.
Third parties
We use a small number of trusted third-party services to operate Ember: Supabase for secure data storage, Stripe for payment processing, ElevenLabs for audio narration, and PostHog for anonymised analytics. We do not sell your personal data to any third party, ever.
Your reflections and journal
Your journal entries and reflections are private by default and encrypted at rest. They are never shared with other users, never used to train AI models, and never accessed by Ember staff unless required by law and only with a valid legal order.
Your rights
You have the right to access, correct, and delete your personal data at any time. You can do this from your account settings in the app, or by contacting us at hello@emberworlds.com. We will respond within 30 days. You also have the right to data portability — to receive a copy of your data in a portable format.
Data retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.
Security
We take data security seriously. Your data is encrypted in transit (TLS) and at rest. We use industry-standard security practices and regularly review our systems for vulnerabilities.
Contact
If you have questions about this policy or how we handle your data, contact us at hello@emberworlds.com. We are a small, committed team and we read every message.