Plain English.
No dark patterns.
Last updated: April 21, 2026
Ember is a habit tracker for adults with ADHD. This page explains what we collect, where it lives, and how to get it out — in the same plain language we use inside the app.
The short version
- We store what you tell us: your habits, completions, medication schedule, focus sessions, brain-dump notes, rituals, and waitlist signup email if you join before launch.
- We don't sell anything to anyone. There are no ad networks embedded in Ember.
- Anonymous product analytics are opt-out in Settings. Off means off — no tracking, no hidden fallback.
- Your data lives in the EU (Supabase, Frankfurt region).
- Delete your account from Settings → Danger Zone. Everything is purged within 30 days.
What we collect
Account data
- Email address — used to sign in, never used for marketing without explicit consent.
- Display name — shown only to you and (optionally) in body-doubling rooms.
- Timezone, preferred wake and sleep times — used to pick reasonable reminder windows.
Usage data
- Habits you create and when you mark them done.
- Focus sessions you start, their length and whether you finished.
- Medications you schedule and dose logs you record.
- Brain-dump captures — text or transcribed voice.
- Ritual check-ins (morning plan, evening shutdown).
- Feedback you send us through the in-app form.
What we do NOT collect
- No location data.
- No contact list or calendar access.
- No facial scanning, voice biometrics, or health-sensor data.
- No credit card numbers — payments route through Apple or Google via RevenueCat; we never see the card.
- No brain-dump content in analytics. The only thing sent to PostHog on save is the length in characters and the type chip you picked.
Who processes your data on our behalf
| Service | What for | Data shared |
|---|---|---|
| Supabase (EU, Frankfurt) | Database, auth, file storage | All of the above |
| RevenueCat | Subscription state only | Your RevenueCat user ID + entitlement |
| Apple / Google Play | Payment processing | Whatever your app-store account provides to them |
| Resend | Sending weekly-report emails | Your email + the email body. Togglable off. |
| Anthropic (Claude) | AI summarisation in weekly report | Your last-7-days activity as a short anonymised bundle. Togglable off. |
| PostHog (EU) | Anonymous product analytics | Event name + non-identifying properties. Togglable off in Settings. |
| Sentry | Crash reporting | Stack traces + device type. No user content. |
Your rights (GDPR)
You can, at any time and from inside the app:
- See your data — every screen is a view of it.
- Export everything as JSON — Settings → Your Data → Export my data.
- Correct anything — edit any habit, medication, or note directly.
- Delete your account — Settings → Danger Zone. This also purges any mirrors at our sub-processors within 30 days.
- Withdraw consent to analytics — Settings → Notifications → Analytics + marketing toggle.
If you prefer to do this by email, write to hello@adhdfocus.app and we'll action the request within 30 days.
Children
Ember is not designed for children under 16. If you believe a child has created an account, email us and we will delete it.
Crisis resources are not medical advice
The crisis screen lists phone numbers and web chats for suicide-prevention and emotional-support lines. It is not a substitute for professional care. If you are in immediate danger call 112 (EU), 999 (UK), 911 (US/Canada), or your local equivalent.
Security
- All traffic uses TLS 1.2+.
- Row-level security in Supabase: one user's rows are never readable by another user's session.
- Passwords are bcrypt-hashed by Supabase Auth; we do not see them.
- Breach notification: if a data incident affects you, we will email you within 72 hours of discovery.
Changes to this policy
If this policy changes materially, the in-app notice will surface on next launch and the effective date above will update. Minor clarifications (typos, renaming sections) will not trigger a notice.
Contact
Questions or data requests: hello@adhdfocus.app.