Emberyl · Privacy
How your information is handled, in clear and direct language.
Emberyl ("we," "us") is a personal-growth platform for adults, available as a website and as an iPhone app. This policy explains what we collect, why, and the choices you have. We aim to collect as little as possible and to treat what you share with care.
This policy covers both emberylapp.com and the Emberyl mobile app. Where something applies only to the app, we say so.
Choose a topic to read the details.
Information we collect
When you create an account:
Content you create. Your vision, core priorities, routines, goals, Notes and journal entries, self check-ins, trackers, Personal Stewardship reviews, to-dos, and anything else you type into Emberyl. If you choose to add images to your vision board, supporting documents to a career review, or private reference files to a goal or routine, those files are also stored with your account. This content is stored so your account remembers it across your devices. Career review documents are private account content. Goal or routine references are private account content. They stay private unless you deliberately copy an outcome into a shared area.
Content you deliberately share. Personal content stays private to your individual account unless you choose a Household audience for that item or enable a Household Pantry section. Household content is visible to the signed-in members of that Household; assigned or shared items may be completed or updated by members. Your Community display name, posts, and replies are visible to other signed-in community members. Community reports are visible only to authorized moderators. Blocking a person hides their Community posts and replies from your view.
These are free-text spaces. You decide what goes in them, including, if you choose, things you consider private or sensitive. Emberyl does not read, analyze, categorize or interpret what you write. It stores it, shows it back to you, and reminds you about it. It is not analyzed by us, and it is never used to build a profile of you or shared for advertising.
In the mobile app only: if you turn on reminders, the app asks for notification permission. Reminders are scheduled on your own phone; the content of a reminder, including any personal message you attach to it, stays on your device and is not sent to us.
Home Screen widgets. If you add an Emberyl widget, the app places a limited Today snapshot in an Apple App Group on your device so iOS can display it. The snapshot may include the names of up to three priorities, routine names, completion counts, and your next item. It does not include Notes or journals, meals, shared-space content, account identifiers, photos, or authentication tokens; it is cleared when you sign out or delete your account.
Apple purchases. Apple processes your Premium subscription and payment details. We do not receive your card or bank information. To unlock Premium and keep access in sync, we store entitlement information associated with your Emberyl account, such as the product and transaction identifiers, purchase environment, purchase and expiration dates, and revocation status.
Google Calendar, if you connect it. Connecting a calendar is optional. Emberyl requests read-only access and uses it only to show your selected Google Calendar events alongside your Emberyl plans. We receive the event title, start and end time, all-day status, calendar name and color, visibility, and Google event identifier. Private event titles are reduced to “Busy.” We do not request or retain event descriptions, attendees, locations, conference links, contacts, or permission to create, edit, or delete Google events. OAuth credentials are encrypted before database storage, remain server-side, and are removed when you disconnect.
Apple Calendar, if you connect it. Connecting Apple Calendar is optional and available only in the iPhone and iPad app. Apple requires full calendar permission for apps that read events, but Emberyl uses that permission only to display a limited upcoming window on Today and in Datebook. Emberyl does not create, edit, or delete calendar events. Apple Calendar event titles, times, all-day status, calendar names, colors, and identifiers remain on your device and are not sent to Supabase or stored in your Emberyl account. We do not read event notes, attendees, locations, conference links, contacts, or account credentials. You may disconnect the display in Emberyl and revoke access at any time in iOS Settings.
Website performance information. The website uses Cloudflare Web Analytics, a cookie-free, privacy-first service that reports aggregated page-view and performance measurements. Cloudflare states that this service does not collect or use visitors' personal data and does not track people across sites. We use it only to keep Emberyl reliable and fast.
What we do not collect: we do not collect your location, your contacts, photos or documents you have not chosen to add to Emberyl, your health records, or data from Apple Health or Google Fit. We do not use advertising identifiers, behavioral advertising, or cross-company tracking.
Google Calendar data
If you choose to connect your Google Calendar, Emberyl requests read-only access to your calendar data. Connecting is optional and is never required to use Emberyl.
What we access: your calendar list and the events on the calendars you select, including event titles, times, and availability. Events you have marked private are shown in Emberyl as "Busy," with their dates and times visible but without their original titles or event descriptions.
How we use it: your calendar data is used only to display your schedule inside Emberyl alongside your plans and devotionals, so you can see your day in one place. We do not use Google Calendar data for advertising, and we do not sell it.
Storage and sharing: connection credentials are stored securely on our servers to maintain the connection. Your calendar data is not shared with third parties except the service providers needed to operate Emberyl, and only as needed to provide the feature.
Disconnecting: you can disconnect Google Calendar at any time from within Emberyl. Disconnecting deletes the stored connection and requests revocation of Emberyl’s Google access. You can also revoke access in your Google Account.
Emberyl's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
How we use your information
We never use your content to train artificial intelligence models, and we never sell it.
Our legal bases (UK/EU): providing the service and keeping your account secure rely on the contract between us and on our legitimate interests in running Emberyl safely. Marketing emails rely on your consent, which you may withdraw at any time. Where you write something sensitive into a free-text field, that is your choice and rests on your explicit consent, given by choosing to write it.
How your information is stored, and for how long
Your account and content are stored with Supabase on secured servers. Personal account content can be read or changed only by you when signed in; content you deliberately place in Shared or Circles is available only to the relevant signed-in members as described above. Information is encrypted in transit. Google OAuth credentials are additionally encrypted before storage. A copy of your Emberyl content is also cached on your own device so the app works offline; signing out or deleting the app removes that copy.
We keep your information for as long as your account exists. If you delete your account, your profile, private content, shared-space membership, Circle posts and replies, reactions, reports, Book Club signups, and Premium entitlement record are deleted. Backups are cycled out within 30 days. We may keep a minimal record of the deletion itself where we are legally required to.
Who we share it with
We do not sell your personal information, and we do not share it for advertising or cross-context behavioral advertising. Ever. We share it only with the service providers that make Emberyl work: Supabase for hosting and authentication, our email provider for the emails described above, Cloudflare for website delivery and aggregated performance measurement, Apple for iPhone subscription processing, and Google when you choose to connect Google Calendar. Apple Calendar data used by the optional on-device connection is not shared with Emberyl's servers. These providers act under their own privacy commitments and may not use your information for our advertising. We may disclose information if the law genuinely requires it.
Emberyl's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google Calendar data for advertising, credit decisions, surveillance, or training generalized artificial-intelligence models.
Our providers may store data in the United States. Where information is transferred out of the UK or EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses.
Your choices and rights
You can see, correct, export or delete your information at any time.
Depending on where you live, you may also have rights to access, correct, delete, restrict or object to our use of your information, to data portability, and to complain to your data protection regulator. If you are in California, you have the right to know, delete, correct, and to opt out of sale or sharing, we do neither, and we will not discriminate against you for exercising any right.
To make a request, email [email protected]. We will respond within the time the law allows, and we may need to verify who you are first.
Children
Emberyl is for adults. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.
Changes to this policy
If we make meaningful changes to this policy, we will update the date below and, where appropriate, let you know by email. Your continued use of Emberyl after a change means you accept the updated policy.
Contact
Questions about your privacy or this policy are always welcome at [email protected]. Emberyl is based in Massachusetts, United States, and is the controller of the information described here.
Effective date: August 25, 2026. Last updated: October 13, 2026.