Privacy Policy

Information the app stores

Everything you enter into Ember is stored in a private database on your device only:

• Lists & entries: notes, to-dos and projects, reminders, bucket-list items, reading and movie lists, and recipes — including their titles, text, dates, and tags.
• Journal: journal entries (the Log).
• People: details you record about people — names, birthdays, catch-up dates, notes, and gift ideas.
• Tend check-ins: daily "Tend" check-ins — an energy level, the tags you choose, and an optional note.
• Photos: photos you attach from your gallery, which are copied into the app's private storage.

This data is stored in the app's private storage area, which Android isolates from other apps. It is never transmitted to me or to anyone else by the app.

What the app does NOT do

• No data collection: nothing you enter is sent off your device by the app.
• No sharing or selling of data: I never see your data, so it cannot be shared or sold.
• No third-party services: no analytics, advertising, crash-reporting, or tracking SDKs of any kind.
• No accounts: the app has no sign-up, login, or cloud service.
• No permissions: the app requests no Android permissions, including internet access. Photos are attached through Android's built-in photo picker, which shares only the specific photos you choose.

When data can leave your device — only under your control

There are exactly two ways data leaves your device, and both are in your hands:

• Android device backup: if you have Android backup enabled, Android itself backs up Ember's database (not attached photos) to your own Google account so it can be restored when you set up a new phone. This is a standard Android feature managed by your device and your Google account, not by me — I have no access to it. You can turn it off at any time in your device's Settings under Backup.
• Manual export: the Backup screen lets you export a copy of your data as a file and choose where to send it (for example your own cloud drive, email, or computer) using Android's share sheet. The destination is entirely your choice, and the export only happens when you tap the button.

Data security

Your data lives in Ember's private app storage, which Android protects from access by other apps. Because the app never transmits data, there is no data in transit to protect. Please use a device lock (PIN, pattern, or biometric) to protect your data if your phone is lost or stolen, and treat exported backup files with the same care as the data itself.

Data retention and deletion

• In-app data: your data stays on your device for as long as you keep it. You can delete individual items inside the app at any time; deletion is immediate and permanent.
• Uninstalling: uninstalling Ember deletes all of the app's data from your device.
• Backups & exports: any device backups live in your own Google account and are governed by your Android backup settings; exported files live wherever you saved them. Deleting those copies is in your control.

Children

Ember is a general-audience app and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). The app collects no data from anyone, including children.

Your rights

Because your data never leaves your device, you are always in direct control of it: you can read, change, export, and delete everything from within the app.

Changes to this policy

If Ember's data practices ever change (for example, if a future version adds an online feature), this policy will be updated before that change ships, the effective date above will be revised, and material changes will be called out in the app's update notes.