Privacy Policy

Last updated: April 30, 2026

This Privacy Policy describes how Ember ("Ember", "we", "us") handles information when you use the Ember iOS application (the "App"). Ember is published by mkAppLab.

1. Summary

Ember is a local-first app. Your health data stays on your iPhone unless you choose to enable iCloud sync. We do not operate any servers that store your personal or health information. We have no user accounts. We do not sell or share your data.

2. Information We Process

2.1 Health and symptom data you enter

You may log symptoms (such as hot flashes, night sweats, sleep quality, mood, bleeding patterns), HRT (hormone replacement therapy) records, journal entries, and similar information. This data is stored locally on your device using Apple's SwiftData framework.

2.2 Apple Health (HealthKit) data

With your permission, Ember reads selected categories from Apple Health (such as menstrual flow, basal body temperature, wrist temperature, sleep analysis, heart rate variability, and reproductive health categories). This data is read on-device and is never transmitted to us. Apple's HealthKit terms apply; we do not use HealthKit data for advertising, marketing, or other use-based data mining.

2.3 iCloud sync (optional)

If you enable iCloud sync, your Ember data is synchronized between your devices using Apple's CloudKit Private Database, tied to your Apple ID. This data is stored in your private iCloud container and is not accessible to us. You can disable iCloud sync at any time from within the App or from iOS Settings.

2.4 Subscription information

If you purchase a subscription, the transaction is processed by Apple via the App Store. We use RevenueCat to receive subscription status (active / inactive / expiration date) so the App can unlock paid features. RevenueCat assigns a random anonymous identifier to your installation; we do not associate this identifier with your name, email, or Apple ID.

2.5 Diagnostics

We use Sentry to receive anonymized crash reports if the App crashes. Personally identifiable information and health data are scrubbed before being sent. We use TelemetryDeck (EU-hosted) for privacy-preserving aggregate analytics — for example, "how many users opened the weekly verdict screen this week". TelemetryDeck does not use cookies, IP addresses, or device fingerprinting to identify individuals.

3. On-Device AI

Ember's "weekly verdict" feature uses Apple's on-device Foundation Models framework to summarize your week. This processing happens entirely on your iPhone. Your symptom data, journal entries, and HRT history are never sent to OpenAI, Anthropic, Google, or any other cloud LLM provider.

4. What We Do Not Collect

5. Children

Ember is not intended for use by individuals under the age of 17. We do not knowingly collect information from children.

6. Medical Disclaimer

Ember is a wellness and tracking tool. It is not a medical device, does not provide medical advice, diagnosis, or treatment, and is not a substitute for professional healthcare. Always consult a qualified healthcare provider regarding any medical condition or treatment decisions.

7. Your Rights

Because your data is stored on your device (and optionally in your private iCloud container), you have direct control over it at all times. You can delete all Ember data by deleting the App. If you have enabled iCloud sync, you can additionally remove the data from iCloud via iOS Settings > [your name] > iCloud > Manage Account Storage.

8. International Users

Ember is offered worldwide. Because your data primarily stays on your device or within your Apple iCloud account, no cross-border transfer of your data is performed by us. Apple's terms describe how iCloud data is stored and replicated.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version. Material changes will be highlighted within the App.

10. Contact

If you have any questions about this Privacy Policy, please contact us at maotunko@gmail.com.