Privacy Policy
Emberstead is a shared family calendar. We keep only what the app needs to work, we never sell your data, and we never show you ads. This page explains what we hold, why we are allowed to hold it, how long we keep it, and what you can ask us to do with it.
Who is responsible for your data
Emberstead ("we", "us", "the app") is the data controller for the information described here. That means we decide what is collected and why. You can reach us about anything on this page at alfredulu3328@gmail.com, and we aim to reply within a few days.
What we collect, and why we are allowed to
Every row below names the lawful basis we rely on. Where that basis is consent you can withdraw it at any time, in the app, without losing anything else.
- Your account: email address and display name. So you can sign in, so the app can greet you, and so changes in a shared household can be attributed to a person. Basis: performance of our contract with you. Without this the app cannot function.
- Your household plan. The household you create, the member cards in it (names, roles, birthdays, and any profile photo you choose to add), the activities and trips you plan, and your settings. This is stored so it can sync between your family's devices. Profile photos live inside your plan, not as separate public files.Basis: performance of our contract with you.
- A push notification token, if you allow notifications. An anonymous device address so a notification can reach your phone. It is a delivery label, not a tracker. Basis: your consent.
- Diagnostic information you choose to send us. If you email us about a problem, we hold what you send for the support retention period below. Basis: our legitimate interest in supporting the app.
That is what the app collects directly. Website and support information is described below. We do not build a profile of you, and we do not enrich your data with anything bought from elsewhere.
What we do not collect
- No advertising, and no advertising or tracking SDKs of any kind.
- No third party analytics that follow you across apps or the internet.
- No location tracking. We never ask for your location.
- No contacts or microphone access. Camera access is optional and used only to scan a household invite QR code; the camera feed is not uploaded or stored. A member-card photo comes only from an image you choose.
- Nothing from your phone's own calendar leaves your device. If you switch on "show my phone's calendar", those events are read on your device only, to draw them alongside your family's plan. They are never uploaded, stored by us, or shared with your household.
- We never sell, rent or trade your information, and we never will.
Who else touches it
Your plan is visible only to the members of your own household. Beyond that, a small number of providers process data strictly on our instructions and cannot use it for their own purposes:
- Supabase hosts the database that holds your account and your household plan. Access is enforced at the database level, so only accounts that have joined your household can read it.
- Apple and Google deliver push notifications to your device, and only if you have turned alerts on. They receive the notification and the device it is addressed to.
- Cloudflare Pages serves this website and processes ordinary request information such as an IP address, browser details, requested path and time so it can deliver and protect the site.
- Our email provider processes messages you choose to send to our support address.
We will also disclose data if the law genuinely requires it, and we will tell you unless we are forbidden from doing so.
Where it is stored
Your data is held in the region we have configured for our database, and push notifications necessarily pass through Apple's and Google's global infrastructure. Where data moves outside the UK or the European Economic Area, it is covered by the transfer safeguards those providers offer, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
Security
Everything travels over HTTPS. Access to a household is bound to your signed in account and enforced by row level security in the database, not just by the app, so another household cannot read yours even if the app were bypassed. On your device your plan is stored in the app's own private storage. No system is perfect, so if a breach ever affected your data we would tell you and the relevant regulator promptly.
How long we keep it
- Your account and plan: for as long as your account exists.
- When you delete your account: your account and associated live data are removed immediately. If you are the last member of a household, that household and its plan are removed too.
- Push tokens: deleted when you sign out or when the notification provider reports one invalid.
- Support emails: kept for up to 12 months after the question is closed.
- Waitlist details: kept while the waitlist is active and deleted when they are no longer needed for the launch notice, or sooner if you ask us to remove you.
Your rights
You can ask us to do any of the following, free of charge:
- See what we hold about you, and get a copy.
- Correct anything wrong. Most of this you can do yourself in the app.
- Delete your account and data, from Settings, without asking us first.
- Take it elsewhere. Ask us for your plan in a portable, machine readable form.
- Restrict or object to a particular use, including anything we do on a legitimate interest.
- Withdraw consent for alerts at any time, in Settings, with no other effect.
- Leave a household to take your card and your own plans out of it.
Email alfredulu3328@gmail.com for anything you cannot do in the app. If you are unhappy with our answer you can complain to your data protection regulator. In the UK that is the Information Commissioner's Office at ico.org.uk; elsewhere in Europe it is your national supervisory authority.
No automated decisions
Nothing about you is decided by a machine on its own. Clash detection compares the times of activities you have entered and flags an overlap. That is arithmetic on your own calendar, and it has no consequences beyond showing you a warning you are free to ignore.
Children
Emberstead is built for a whole family, children included, and that puts a higher bar on us. So:
- A parent or guardian always sets up the household and adds a child's card. Children do not sign themselves up.
- An account holder must be 13 or older. A younger child takes part through the card their parent created for them, not through an account of their own.
- A child's information stays inside the household. It is never used for advertising, never profiled, and never shared outside the family.
- Parents stay in control. Anything added for a child can be edited or removed at any time by the parent who added it.
- We collect the minimum. A first name is enough for a member card. A birthday and a photo are optional and only there if you want them.
If you believe a child's information reached us without a parent's involvement, email alfredulu3328@gmail.com and we will delete it.
What the app store labels say
Apple's privacy labels and Google Play's Data safety section describe the same thing this page does, in their own format: we collect your contact details and your app content because the app needs them to work, we link them to your account, we do not use them to track you, and we do not share them with third parties for those parties' own purposes.
This website
This site sets no advertising or tracking cookies. It stores your light or dark theme choice in your browser so the page does not change on you next time. Fonts are served from this site rather than a third party.
If you join the waitlist through a configured signup endpoint, we receive your email address and the part of the page where you signed up. We use them only to manage the waitlist and send the launch notice. Basis: your consent. If no endpoint is configured, the form opens your email app instead; the website does not receive your address unless you choose to send that message. You can ask us to remove you at any time by emailing us.
Changes to this policy
If we change how we handle data, we will update this page and the date at the top. Anything meaningful will be flagged in the app rather than quietly edited here.