Privacy Policy
Last updated: 10/11/2026
1. Introduction
This Privacy Policy explains what information Emberly ("we," "the App") collects, how we use it, and your rights regarding that information.
2. Information We Collect
Account information: name, email address, password (encrypted).
Onboarding preferences: dietary goal, diet type, allergen exclusions, taste/mood preferences, cooking time available, household size.
Usage data: meals you view, cook, log, or post; streak history; points balance; shop purchases; likes.
Photos: photos you take or upload when logging a meal ("Eat & post"). These may be visible to other users in Community Kitchen if you choose to post. Before a photo appears it is checked automatically (see Third-party services); a photo that fails the check is deleted straight away.
Subscription data: subscription status and purchase history, processed via Apple's App Store and RevenueCat. RevenueCat tells our servers whether your subscription is active, which we check before making a Charity cook donation. We do not see or store your payment card details.
Device/technical data: basic device information for app functionality and crash diagnostics.
3. How We Use Your Information
We use your information to:
- Provide and personalise the App (meal recommendations, allergy filtering)
- Maintain your streak, points, and Community Kitchen posts
- Process and manage your subscription
- Improve the App and fix bugs
- Communicate with you about your account (e.g. sign-up and password reset codes)
4. Allergen & Dietary Information
Allergen and dietary preferences you provide are used solely to filter meal suggestions within the App. This information is not shared with third parties for advertising purposes. We strongly encourage you to independently verify ingredients for any meal, as Emberly's filtering does not replace your own judgment, especially for serious allergies.
5. Data Storage & Security
Your data is stored securely using Supabase, with database access protected by row-level security so that only you can access your personal data (meals data itself is shared reference content). Photos are stored via Supabase Storage.
6. Third-Party Services
We use the following third-party services, each with their own privacy practices:
- Supabase — database, authentication, and photo storage
- Resend — sends your account emails (sign-up and password reset codes). It receives your email address and the email itself, nothing else
- RevenueCat — subscription and payment management
- Anthropic — checks each Community Kitchen photo, caption and dish name before it appears, to keep the feed to food and free of harmful content. It sees only what you post, never your account details, and its terms don't let it train its models on what it checks
- Apple App Store — payment processing
- Cloudinary — hosting recipe images
- Sentry — crash reports, if the App crashes (device model, system and app version, and what went wrong; never your meals, photos or messages)
7. Data Sharing
We do not sell your personal data. We only share data with the third-party services listed above, as necessary to operate the App.
8. Your Rights
You can:
- Access or update your account information in Settings
- Delete your account and associated data at any time
- Request a copy of your data by contacting us
9. Data Retention
We retain your data for as long as your account is active. If you delete your account, your personal data is removed, though anonymised/aggregated data may be retained for analytics.
10. Children's Privacy
Emberly is not intended for children under 13 (or the relevant minimum age in your region). We do not knowingly collect data from children. The App asks your age before you create an account, and does not let anyone who says they are under 13 sign up. If we learn we hold data from a child under 13, we delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of material changes via the App.
12. Contact
Questions about this Privacy Policy? Contact us at emberlyapp@proton.me.