What Embering knows about you

Almost nothing — and nothing that would let us pick you out. The app works without an account, keeps your reading and your practice on your device, and counts only anonymous events with no identifier attached. An account is optional, and is needed only to claim a free Welcome Pack voice or to become a Member. Nothing you write is sent to an AI service, or anywhere else. This page is about the few moments where anything at all leaves your phone, so you can decide about those honestly.

Last updated: October 19, 2026

Who we are

Embering is made by Embering LLC, a single-member limited liability company registered in the State of Wyoming, USA, at 30 N Gould St Ste N, Sheridan, WY 82801. Embering LLC is the data controller for the purposes of this policy.

If you have a question about anything here, write to admin@embering.app.

What stays on your device

The following is written to your phone's local storage and never sent anywhere by us:

• The quotation you're served each day, and which voices are in your rotation
• Quotations you save as favourites
• Affirmations you write yourself
• Your Memory Coach progress and the recalls you've completed — including the words you type or speak, which are compared with the original on your phone and sent nowhere
• Your settings — wake time, timer length, reminder preferences, text size

Some of this is also written to a shared storage area on your device so the home-screen widget — and, on iPhone, the lock-screen widget — can display today's quotation. That area is readable only by Embering and its own widget.

If you delete the app, this all goes with it. There is no copy on a server for us to return to you, and none for us to lose.

What leaves your device

1. Dictation — handled by your phone

If you tap the microphone to speak a recall instead of typing it, your speech is transcribed by your phone’s own speech recognition — Apple’s on iPhone, Google’s on Android. Depending on your device and language, either one may process the audio on its servers rather than on the phone. That processing is governed by Apple’s or Google’s privacy policy, not ours — we receive only the resulting text, which is then compared on your phone and never sent anywhere.

Dictation is never automatic. It runs only while you hold the microphone active, and you can decline the microphone permission entirely without losing any other part of the app.

2. Letters

The Letters screen fetches publicly published newsletter posts. It sends no information about you.

3. Your Embering account (optional)

You never need an account to read the daily quotation. An account is asked for only at the moment you do something that needs one: claiming a free Welcome Pack voice from an author, or becoming a Member.

You sign in with your email address. We send a six-digit code to it; there is no password. What we hold, and where:

• Your email address is held by our sign-in provider, Supabase, and by our email sender, Resend, only so the code can reach you. We do not copy it into our own tables, and we do not use it to market to you.
• A random account id that Supabase gives your account.
• Your library: which packs you hold, and where each came from (a Welcome Pack or a credit).
• Your credits, if you are or were a Member: a running record of credits added and spent.
• Your free voice choice: that you have claimed a Welcome Pack, and which one, so a second claim can be refused.

When an author invites you with a link, the link carries only the author’s name. We do not record who opened it, and it never claims anything for you; only your own tap does.

None of this is used for advertising, none of it is sold, and nothing you write in the app is part of it.

4. Membership

If you become a Member, payment is handled entirely by Apple or Google; we never see your card or billing details. RevenueCat, the service that checks store purchases for us, receives your account id and records what you hold so we can give you the right access and credits, and restore them on a new phone. We keep the record of your subscription state (active or not, its period, and the store’s receipt events) so we can grant credits correctly. If you leave Membership, what you already hold stays on your shelf.

5. Deleting your account

In the app, go to Settings, then Account, then Delete account. Or follow the steps on the delete-account page. Deleting removes your sign-in, your email address, your library, your credits and your free voice choice from our systems, and asks RevenueCat to delete its record of you. Packs already on your phone stay on your phone. A deleted account cannot be restored. Deleting an account does not cancel a store subscription: cancel that in your Apple or Google account settings.

If you can’t reach the app, write to admin@embering.app from the address you signed up with and we will delete the account.

6. Founding Reader status

Founding Reader needs no account. That leaves one practical problem: if you reinstall the app or move to a new phone, we need some way to know you already hold Founding Reader — and we deliberately hold no list of readers to check you against.

The answer is that the App Store or Google Play holds that record, not us. Claiming Founding Reader was a purchase at no cost, and it is the store — keyed to your own Apple or Google account, which we never see — that remembers it. That is why “Restore Purchases” can bring your status back on a new device without you ever telling us who you are.

What that means for your data:

• There was no payment. Claiming Founding Reader cost nothing. If you ever buy anything in Embering, payment is handled entirely by Apple or Google, and we never see your card details.
• Your status is kept by RevenueCat, the service that checks store purchases for us. It gives this app on your phone an anonymous identifier and records what you hold, so it can be restored. It is not linked to your name or your email.

Current prices are shown in the app and on your store receipt, not here, so this page can’t go out of date about them.

7. Anonymous counts

We need to know whether Embering actually works — above all, whether the daily quotation leads anyone back to the writing behind it. To measure that we count a small number of events: that a quotation was shown, and that someone opened a “go deeper” link. On Android we also count that the home-screen widget was tapped.

These counts carry no identifier of any kind — no account, no device id, no session id, no advertising id, no IP address stored. That is a deliberate design choice, not a promise we're asking you to take on trust: because there is nothing to join events on, they cannot be assembled into a profile, or linked to each other, or traced back to you, by us or by anyone who obtained the data.

What that gives us is a ratio — how often a line leads someone onward — and nothing about any individual reader. That ratio is the only thing we actually need.

Links out of the app may carry a tag identifying Embering as the source, so the author can see that a visit came from the app. It says where the visit came from, not who made it.

8. Feedback you send

If you use Send feedback, the app opens your own email with our address filled in. Nothing is sent unless you press send. We then receive what you wrote, your email address and the app version shown in the message, and use them only to read and reply.

What we don't do

• No AI service, and no third party, ever receives what you write
• No profile of you, and no identifier that would make one possible
• No advertising, and no advertising identifier
• No tracking of you across other apps or websites
• No selling or sharing of personal information
• No account required to read your daily quotation
• No email marketing from a sign-in address

Reminders

Notifications are scheduled on your own device. There is no push server, and nothing about them is transmitted — including the quotation itself, composed on your phone from lines already stored there. Switch them off in Settings, silence a day from a later notification, or decline the permission.

Children

Embering is not directed at children under 13, and we do not knowingly collect information from them.

Your choices

• Stop dictation — decline or revoke the microphone permission in your phone’s Settings.
• Stop reminders — turn off Daily notifications in the app, tap “Not Today” on a later notification to silence the rest of that day, or turn notifications off in your phone’s Settings.
• Erase everything on your phone — delete the app.
• Erase your account — delete it in Settings, or on the delete-account page.

Changes to this policy

If this changes in a way that affects what leaves your device, we'll update this page and the date at the top of it.