Ember

Privacy policy

Last updated October 29, 2026

This policy covers the Ember app for iPhone, Ember Keyboard and the servers behind them. It says what Ember reads, saves and sends, where, for how long, and how to delete it.

Who runs Ember

Ember is made by Vladislav Hanin, an independent developer based in Poland, who decides how this data is used (the "controller" under the EU and UK GDPR). Questions and requests go to support@embermove.app.

The short version

• Capture runs only when you start it. Anything on screen that isn't a chat is dropped right away, unread and unsaved.
• On a chat screen, Ember reads the chat's name, its photo and the messages on screen, and saves them to your account.
• To write suggestions, Ember sends the text of recent messages to Anthropic, the AI company that writes them. Anthropic doesn't train its models on them.
• Ember Keyboard doesn't save or send what you type.
• Ember shows no ads and sells no data.
• Delete your account in Settings and everything saved to it goes with it.

What Ember handles, and why

Your account

You sign in with Apple, with Google, or with a link sent to your email address. Sign-in runs on Firebase Authentication, a Google service. Your account holds your email address, your name if Apple or Google passes it on, how you signed in, an account ID, and when you created the account and last signed in. Ember uses it to sign you in and to keep your saved chats apart from everyone else's.

Sign-in links are emailed from noreply@embermove.app through Firebase.

Your consent

Before your first capture, Ember asks you to agree to sending your chats to Anthropic. Your account records which version of that wording you agreed to and when. Each time you agree or withdraw, the change is logged and kept for two years, as a record of your consent.

Capture

While capture is on, iOS sends a video of your screen to Ember's servers, which run on Google Cloud in Sweden. The video isn't saved: each screen is checked as it arrives.

• A screen that isn't a chat, such as your home screen, another app or a photo, is dropped right away, unread and unsaved.
• On a chat screen, Ember reads the chat's name and photo at the top, and the messages on screen with whether each was sent or received.
• Ember Keyboard's suggestions are left out of the video, so Ember never reads its own suggestions back.

Capture stops when you tap Stop in Ember or in Control Center.

Saved to your account

For each chat Ember reads, it saves the chat's name and photo as images, and each message as text with an image of its line. They are saved in Google Cloud Firestore, in Sweden. Ember uses them to recognize the chat the next time you open it, and to give the AI the messages that came before.

Sent to Anthropic

To write suggestions, Ember sends Anthropic the text of the recent messages in the chat on screen, and whether each was sent or received. It sends no names, no photos, and nothing from your account. Anthropic processes them in the United States to write the replies. Its commercial terms don't let it train its models on them, and it deletes them within 30 days, or keeps them up to two years if its safety systems flag them as breaking its usage policy.

How many suggestions you get

Ember counts the replies it writes for your account, by the hour for the last 24 hours and in total. It uses the counts to apply a limit on suggestions per day. A request that fails isn't counted.

Subscriptions

Apple takes your payment; Ember never sees your card or payment details. RevenueCat, a company in the United States, receives your purchase status from Apple with your account ID, and tells Ember whether your subscription is active.

App settings from the servers

The app checks Firebase Remote Config, a Google service, for update and maintenance notices. Firebase identifies the app on your phone with an installation ID to do that.

Analytics

The app measures how it is used, to find what is hard to use and fix it. Google Analytics for Firebase, a Google service, receives events such as the screens you open, the features you use, errors and how long you use the app, with your device model, iOS and app versions, language, and approximate location from your IP address, tied to an ID for the app on your phone. It receives nothing from your chats: no names, photos or messages, and no suggestions.

Analytics run while you use the app. Google Analytics keeps the data for up to 14 months. To object to analytics, write to support@embermove.app.

Service logs

Ember's servers write logs to run and fix the service, kept for 30 days on Google Cloud.

The capture servers' logs can include the text of the messages they read.

Writing to support

If you write to support@embermove.app, ImprovMX forwards your email, mostly through data centres in the EU, to Ember's mailbox at Gmail, a Google service, where it is kept for a year after the last message, then deleted.

Ember Keyboard

Ember Keyboard shows your suggestions and inserts the reply you tap. It doesn't save or send what you type, and it has no internet connection of its own. iOS asks you to allow Full Access because Ember Keyboard reads your suggestions from the Ember app on your phone.

The people you chat with

A chat holds other people's names, photos and messages. When you capture a chat, Ember reads them as they appear on your screen, saves them to your account and sends the message text to Anthropic, as described above. Use capture only in chats you're part of.

Where your data is processed

• Google Cloud in the EU: the capture servers and saved chats in Sweden, account functions in Finland.
• Firebase Authentication, Remote Config and Google Analytics: Google's servers, which may be outside the EU.
• Anthropic and RevenueCat: the United States.
• Support email: ImprovMX, which forwards it through data centres mostly in the EU and some in the United States, and Gmail, which holds it.

Transfers outside the EU and UK to Google, Anthropic and RevenueCat rely on the European Commission's standard contractual clauses, part of each company's data processing terms. ImprovMX states that it follows the EU–US Data Privacy Framework.

How long it is kept

• Your account and your saved chats: until you delete your account.
• Counts of your suggestions: the hourly counts for 24 hours, the total until you delete your account.
• Service logs: 30 days.
• Consent records: two years after each change.
• Requests to Anthropic: deleted by Anthropic within 30 days, or up to two years if flagged, as above.
• Support emails: a year after the last message.
• Analytics: up to 14 months, in Google Analytics.
• Your RevenueCat record: deleting your account in Ember doesn't reach it. Write to support@embermove.app to have it deleted.

Deleting your data

In Ember, go to Settings, then Delete account. Ember asks you to sign in again, stops any capture, and deletes your account and everything saved to it: your saved chats and your counts. Consent records and service logs are deleted when their periods above end.

To stop Ember sending your chats to Anthropic without deleting anything, turn off Send chats to AI in Settings. Capture can't start while it's off, and your saved chats stay in your account until you delete it.

Your rights

Depending on where you live, you can ask to see the data Ember holds about you, get a copy, correct it, delete it, limit or object to how it's used, and withdraw your consent at any time. Write to support@embermove.app. In the EU or UK you can also complain to your data protection authority.

Under the GDPR, Ember relies on:

• the contract with you, to run your account, capture, suggestions and your subscription;
• your consent, to send your chats to Anthropic;
• legitimate interests, for service logs, keeping the service secure, and analytics that show how to improve the app;
• a legal obligation, to keep records of your consent.

Age

Ember is for people 18 and over.

Changes

When this policy changes, the date at the top changes. If Ember is to send your chats to a company other than Anthropic, the app asks for your consent again before your next capture.