Privacy Policy

1. Information we collect

We may collect the following information when you use Ember Forge:

• Account information, such as your name, username, email address, sign-in information, and account preferences. We record whether you chose to receive promotional email and when you opted in or out.
• Commitment and progress information, including goals, streaks, check-ins, rewards, focus sessions, and entries in Ember Chronicles.
• Proof and community information, including proof notes, optional photos, proof descriptions, partner or pod interactions, and reactions you choose to share.
• Health and fitness information, including information you enter in the app and, if you choose to connect Apple Health, the six HealthKit import categories: step count, resting heart rate, sleep duration, weight, active calories, and workouts.
• Purchase information, such as subscription status and product identifiers. Apple processes your payment details; Ember Forge does not receive your full payment-card information.
• Support information, including your email address and the content of messages you send to us.
• Technical information, such as device type, operating system, app version, IP address, request logs, crash or diagnostic information, and notification settings.

2. How we use information

We use information to:

• Provide, maintain, personalize, and secure Ember Forge;
• Create and manage accounts, commitments, streaks, rewards, focus sessions, partner or pod features, and the fitness and wellness features you choose to use;
• Use health and fitness information to provide the features you request, including displaying imported sleep and vital measurements in Wellness, imported workouts in training history, and information in Progress charts and Daily Score. Active calories are displayed on the Apple Health sync screen and are not automatically added to your nutrition log;
• Provide AI-powered coaching, suggestions, or scans when you have enabled AI data sharing, as described below;
• Process and confirm subscriptions and in-app purchases;
• Send service messages, reminders, password-reset messages, and support responses;
• Diagnose problems, prevent fraud or abuse, and improve app reliability; and
• Comply with legal obligations and enforce our policies.

Optional promotional email

We send Ember Forge product news, offers, and other promotional updates only if you explicitly opt in, either when creating an account or through Profile → Newsletter in the app. The signup choice is optional and off by default; creating an account or signing in with Apple or Google does not itself subscribe you. We keep your name, email address, account identity, and subscription choice so we can maintain an up-to-date recipient list.

An authorized email-sending tool acting for Ember Forge can retrieve the names and email addresses of currently opted-in recipients to send these updates. It does not receive your password, commitments, proof, or health information from this list. If you unsubscribe, we remove you from the active promotional recipient list; account deletion also ends eligibility. You can unsubscribe in Profile → Newsletter or contact us using the address below.

3. AI-powered features

AI data sharing is optional. Before Ember Forge sends information for an AI request, you must explicitly allow it in Profile → AI data sharing. You may decline or revoke that permission there. If you do not allow it, AI requests that require sharing will not be sent.

When permission is enabled and you use an AI feature, OpenAI acts as a service provider and receives the information needed for that request. This may include Coach chat messages, goals, habit and fitness summaries, selected app names for personalized focus phrases, proof text, and totals or other derived statistics calculated from imported workouts. Raw HealthKit samples are not directly provided as Coach context, although summary statistics derived from imported workout records may be. For meal, form, or posture scans, the photo and any description you submit for that scan may be sent. Automatic weekly reviews, nutrition insights, and focus phrases can request AI processing when their screens are opened, but only while sharing permission is enabled on that device. Do not submit sensitive information that is unnecessary for the feature.

Revoking permission stops future AI requests from Ember Forge, but does not guarantee deletion of information already sent or of records held by the AI provider. AI responses may be incomplete or inaccurate and are not medical or professional advice.

4. How we share information

We do not sell personal information or use health information for advertising, marketing, or ad targeting. We may share information in these circumstances:

• With partners or pods, when you intentionally share commitments, check-ins, proof, progress, or reactions through social and accountability features.
• With service providers that help us host, operate, secure, and support Ember Forge. OpenAI receives AI request information only when you have explicitly enabled AI data sharing and use an AI feature, as described above. An email delivery tool may send promotional messages only when you have opted in.
• For legal and safety reasons, when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or respond to a lawful request.
• During a business transfer, such as a merger, financing, acquisition, or sale of assets, subject to appropriate safeguards.

5. Service providers

Depending on the features you use, Ember Forge may rely on:

• Apple for App Store distribution, subscriptions, in-app purchases, and related platform services;
• RevenueCat for subscription and purchase-status management;
• Google for optional Google sign-in and Gmail-based support or service email;
• OpenAI to process AI requests when you have explicitly enabled AI data sharing and use an AI feature; and
• Replit for application hosting and infrastructure.

These providers process information under their own terms and privacy policies. Information sent to OpenAI is subject to the provider’s applicable terms and privacy practices; we do not make a retention-period or deletion guarantee for information already sent to the provider.

6. Health and wellness information

Ember Forge’s fitness and wellness features are for general wellness, planning, and habit support only. They are not medical care, do not diagnose or treat conditions, and are not a substitute for advice from a qualified healthcare professional. Ember Forge is not a healthcare provider and does not represent the service as HIPAA-certified.

Apple Health (HealthKit) connection is optional. If connected, Ember Forge requests read-only access to step count, resting heart rate, sleep duration, weight, active calories, and workouts. Ember Forge does not write records back to Apple Health. Imported records are stored on your device; imported Wellness and workout records also sync to your signed-in Ember Forge account to support recovery and access on other devices. Active calories are displayed on the Apple Health sync screen, not automatically added to your nutrition log. Imported raw HealthKit samples are not directly sent as Coach context; summaries or statistics derived from imported workouts may be included in an AI request if you have explicitly enabled AI data sharing. Health information is not sold or used for advertising or marketing.

You can change or revoke HealthKit access in Apple Health or your iPhone privacy settings. Revoking access stops future reads from HealthKit but does not erase records already imported into Ember Forge. To remove account data, use the in-app account-deletion option described below or contact us.

7. Data retention and deletion

We retain information for as long as reasonably necessary to provide Ember Forge, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type.

To request account deletion in the app, open Profile → Privacy & Data → Delete account and confirm. This removes the current account and its synced fitness/progress records and starts local account cleanup. Some finance, security, fraud-prevention, or other recordkeeping information may be retained where necessary. Previously shared community or conversation records may remain; contact us to request review or removal of those records. Historical backups may continue to contain information until those backups are rotated or overwritten. Timing can vary.

You may also make a manual request for access to, correction of, or deletion of personal information by emailing ruhaan.jain@myemberforge.com. We may need to verify your identity before responding. Requests are handled subject to applicable limits and the retention circumstances described above; we cannot promise instant or complete removal from all systems and backups.

8. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, or to object to or limit certain processing.

• You can manage subscriptions through your Apple account.
• You can manage notifications through Ember Forge or your device settings.
• You can turn optional promotional emails on or off in Profile → Newsletter. This is separate from necessary account and service emails.
• You can choose whether to submit photos, wellness information, or content to partner and pod features.
• You can contact us to exercise applicable privacy rights or appeal a privacy-request decision.

We will not discriminate against you for exercising applicable privacy rights.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Children’s privacy

Ember Forge is available only to people aged 13 or older. Before entering the app, including the guest Focus experience, users must complete a self-declared date-of-birth check. We use the entered date only to calculate whether the user meets the minimum age; we do not retain the full birth date. We retain the eligibility result, declaration method, policy version, and time of the check. Account eligibility is associated with the specific account, and guest declarations are stored on the device. A failed check is temporarily remembered on the device to prevent immediate repeated attempts. This is self-declaration, not identity-document verification or parental consent. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it where appropriate.

11. International processing

Ember Forge and its service providers may process information in the United States and other countries. Those countries may have privacy laws different from those where you live. Where required, we use appropriate safeguards for international transfers.

12. Changes to this policy

We may update this Privacy Policy as Ember Forge changes. We will post the revised policy here and update the effective date. If a change is material, we may also provide notice in the app or through another appropriate channel.

13. Contact us

For privacy questions, safety reports, or requests, contact:

Community content is subject to review. You can report or block users in the app, including specific messages and pod check-ins. Reported content is quarantined pending human review; new shared pod photos require approval. Blocks prevent messaging in both directions. We retain reports and moderation decisions to protect the community, and reviewers can remove content or suspend abusive accounts.

Sign in with Apple authorization tokens are encrypted on the server and used to revoke the Apple connection during deletion. If Apple is temporarily unavailable, only the encrypted token needed for a retry is retained until revocation completes. Historical Apple sign-ins with no revocable token require manual disconnection in Apple settings after account deletion.