Privacy
What Ember knows about you
As little as the ritual needs. No ads, no tracking, nothing sold.
In one paragraph
Ember works without an account, and what you write inside your ritual (your intention, your reflections, your journal) stays on your device. If you sign in, Ember keeps your finished sessions and the goal you set for them so your progress follows you, plus what you choose to share in a Quest. A few companies help run Ember: Supabase stores the data, Resend sends sign-in codes, Apple and RevenueCat handle subscriptions, Sentry receives crash reports, and ElevenLabs voices a personal Initiation if you ask for one. Ember does not show ads, does not track you across apps or websites, and does not sell or share your data for advertising. You can delete your account and its data from inside the app.
This policy covers the Ember iPhone app and the Ember web app at app.emberfocus.io. Ember is made by Malika Sani, doing business as Ember Focus. Questions, access and deletion requests: hello@emberfocus.io.
Without an account
You can use the whole solo ritual without signing in. Your goal, intention, reflections, journal, streak and settings are stored on your device (in the iPhone app's storage, or in your browser's local storage for the web app). They are not sent to Ember and I cannot read them.
Deleting the app, clearing your browser data or using “Reset all data” removes them for good. Nobody, including me, can recover them.
Anonymous product analytics
Ember records simple events such as “a session started”, “a break was chosen” or “a subscription offer was seen”, with the app version and which screen it happened on. They help me see where Ember works and where people get stuck.
These events are keyed to a random identifier Ember creates when it is installed. It is not your Apple advertising identifier, it is not linked to your account or your email, and the events never contain your goal, intentions, reflections or journal. There are no advertising identifiers and no cross-app or cross-site tracking.
On the web, if you arrive through a link with a source tag such as src or utm_source, that source can be stored with the anonymous event.
If you create an account
An account is optional. It is needed for Quests and for a personal Initiation, and it lets your progress follow you between devices. You can sign in with Apple or with a six-digit code sent to your email. There is no password.
With an account, Ember stores:
- Your email address and an account ID. With Sign in with Apple you can choose to hide your email; Ember then receives a private relay address from Apple.
- Your finished sessions: when they started and ended, minutes planned and focused, blocks and breaks completed, and the goal you set for that session.
- Your profile, if you fill it in: your first name, what you are building and your role.
- Your Routine: the focus times you schedule each week.
- Quests, if you join one: your membership, your check-ins, the flames you give, your progress, and any reports or blocks you make.
Journal reflections stay on your device even when you are signed in.
Quests: what other people see
A Quest is a small group working toward the same 21 days. Other members of that Quest can see your first name, your check-ins and your flames. There is no private messaging. You can report any check-in and block any member. Reports are reviewed by me; a report is kept after the reporter's account is deleted, without the reporter's identity, so that removing an account cannot erase a complaint.
A personal Initiation (Ember Pro)
If you ask for a personal Initiation, Ember writes a short script from up to four answers you type (your goal, why it matters, what you work on, and optionally your first name) and sends that script to ElevenLabs, an AI voice service, to be read aloud in an AI-generated voice. Nothing else is sent to ElevenLabs. The app says this on the screen, before anything is sent. The resulting audio is stored in your private storage and is deleted with your account.
Subscriptions
Ember Pro is sold through Apple. Apple processes the payment; Ember never sees your card or payment details. RevenueCat checks with Apple whether you are subscribed and keeps the purchase history needed for that, under a random ID, or your Ember account ID once you sign in so your subscription follows your account. Manage or cancel a subscription in your Apple Account settings.
Crash reports
If the iPhone app crashes or freezes, Sentry receives a technical report: what the app was doing, the device model and system version, and app performance data. Ember does not attach your name, email, account ID or anything you have written.
Feedback
If you send feedback from the app or the web app, Ember receives your message, the screen you were on, the app version and device model, and a screenshot only if you choose to attach one. Your email is included only if you typed it in to ask for a reply. If you are signed in, the feedback is linked to your account until you delete it. On the web, a few ratings and an optional question about your work may also be asked after a session.
Notifications and calendar
Reminders are scheduled on your iPhone itself; Ember does not send them from a server. Notifications are asked for only when you start a free trial (for the reminder before it ends), save a Routine, or join a Quest with its daily reminder on. Calendar access is write-only: Ember can add a focus block you choose to your calendar, and cannot read your calendar.
Email and the waitlist (web)
If you give your email on the website, for the free guide or the waitlist, it is stored with your first name if you gave it, where and when you signed up, the kind of work you said you do and the consent wording you agreed to, so I can send what you asked for. Nothing is pre-checked, every email includes an unsubscribe link, and the list is never sold, rented or shared for advertising.
Who helps run Ember
- Supabase: database, sign-in and file storage (servers in the United States).
- Resend: sends the sign-in code emails (your email address and the code).
- RevenueCat and Apple: subscriptions and purchase status.
- Sentry: crash and performance reports from the iPhone app (United States).
- ElevenLabs: AI voice for a personal Initiation, only when you ask for one.
- Vercel hosts this website and the web app.
Each processes data only to provide its service to Ember. None of it is sold or used for advertising.
How long data is kept
- Account data is kept until you delete your account.
- Anonymous analytics are kept for product analysis and cannot be linked to you.
- Feedback is kept to improve Ember; when you delete your account, your email is removed from it.
- Waitlist addresses are kept until you unsubscribe or ask for deletion.
Deleting your account
In the iPhone app, open Settings → Delete account. This deletes your account and everything attached to it: sessions and goals, profile, Routine, Quest memberships, check-ins, flames and milestones, your personal Initiation and its audio, and your waitlist entry. Feedback is kept without your email, and a report you made is kept without your identity. Deleting your account does not cancel an Apple subscription; cancel it in your Apple Account settings.
The full list of what is deleted and what is kept is on the account deletion and data retention page. You can also ask for access to your data, or for its deletion, by emailing hello@emberfocus.io.
Children
Ember is not directed to children under 13 and does not knowingly collect information from them. If you believe a child has created an account or given an email address, contact hello@emberfocus.io and it will be removed.
Changes
If Ember changes what it collects or how it is used, this page is updated before the new practice begins, and meaningful changes are stated plainly rather than hidden in old wording.
Last updated 26 October 2026. Questions, access and deletion requests: hello@emberfocus.io. See also the terms of use, account deletion and support.