Privacy Policy

Version 1.0
Effective Date: January 5, 2026
Last Updated: January 5, 2026

1. Introduction

Aether Creations LLC ("we," "us," or "our") builds Ember, a task management app that helps you stay organized. This Privacy Policy explains how we collect, use, store, and share your information when you use Ember.

By using Ember, you agree to this Privacy Policy. If you don't agree with how we handle your data, please don't use the app.

2. Information We Collect

2.1 Information We Collect

We collect:

• Account Information: Email address, full name, password (stored using one-way hashing, not reversible encryption), and session tokens (for secure authentication)
• Device and Usage Information: Device type and operating system, IP address (city/region level only-no precise location tracking), app interactions and feature usage, performance data and crash reports, and timestamps of your actions in the app
• Task and Productivity Data: Tasks and descriptions, projects and organization, task status and metadata, and any other content you input into the app

2.2 What We Don't Collect

We do not collect:

• Precise location data
• Camera or photo library access
• Microphone or audio recordings
• Contact lists
• Calendar data (unless future features request your explicit permission)
• Payment information (handled directly by Apple App Store)

3. How We Store Your Data

3.1 Local and Cloud Storage

Ember uses a hybrid storage model:

• Local Storage (Your Device): Your task data is stored locally on your iOS device, giving you offline access and control over your information.
• Cloud Sync (Optional): If you sign in and create an account, your data is synchronized to our cloud backend using Convex. This allows you to access your tasks across devices and provides backup protection.
• Server Location: Data is stored on secure cloud infrastructure managed by Convex and its infrastructure providers in accordance with industry security standards.

3.2 Third-Party Data Processing

We use Clerk for authentication and Convex for synchronized storage and real-time data sync. Their privacy practices are governed by their privacy policies: https://clerk.com/legal/privacy and https://www.convex.dev/privacy

3.3 Offline Functionality

After initial sign-in, Ember works offline:

• Create and manage tasks without internet
• Changes sync automatically when you reconnect
• Initial account creation and sign-in require internet

4. How We Use Your Information

4.1 Service Delivery

Legal Basis for Processing (GDPR): We process your personal information based on (1) performance of our contract with you (to provide Ember's services), (2) our legitimate interests in improving and securing our services, and (3) your consent where required by law.

We use your information to:

• Create and authenticate your account
• Provide task management and productivity features
• Synchronize data across your devices
• Enable offline functionality
• Identify and fix bugs or technical issues
• Improve features based on aggregated, anonymized usage patterns

Important: We do not use your task content or personal data to train artificial intelligence or machine learning models.

4.2 Safety and Compliance

We process information when reasonably necessary to:

• Enforce our Terms and Conditions
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Protect the rights and safety of our users and the public

4.3 Communication

Transactional Emails (cannot be opted out of while your account is active):

• Account confirmations and password resets
• Service updates and policy changes
• Security notifications

Marketing Emails (you can opt out anytime):

• Tips, feature updates, and product announcements

To opt out of marketing emails:

• Click the unsubscribe link in any marketing email
• Adjust preferences in App Settings
• Email us at contact@embertask.app (Section 10)

5. Data Retention and Deletion

5.1 While Your Account Is Active

• Account information is retained while your account is active
• Task content is retained while your account is active
• Usage analytics are retained for up to 2 years

5.2 After Account Deletion

When you delete your account:

• Account information and authentication data are deleted immediately
• Task content is deleted and cannot be recovered
• Aggregated, anonymized analytics data may be retained indefinitely (it cannot identify you)
• Some data may be retained longer only if required for legal compliance or fraud prevention

6. Your Privacy Rights

Depending on your location, you have rights over your personal information.

6.1 Universal Rights

You can:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Download a copy of your data in a portable format
• Request deletion of your account and data

6.2 European Union & UK (GDPR)

You have the right to:

• Access, correct, erase, or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent for processing at any time
• Lodge a complaint with your local data protection authority

6.3 California (CCPA/CPRA)

You have the right to:

• Know what personal information we collect and how it's used
• Delete your personal information
• Opt out of "sales" or "sharing" of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

6.4 How to Exercise Your Rights

Contact us at contact@embertask.app (Section 10). Include "Privacy Request" in the subject line. We'll respond within 30 days and may ask for identity verification.

7. Security

7.1 What We Do

We implement reasonable technical and organizational safeguards:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure authentication and session management
• Limited internal access to personal data (need-to-know basis)
• Employee training on data protection
• Incident response procedures

7.2 Limitations

No system is completely secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security against all threats.

8. Other Important Information

8.1 Children's Privacy

Ember is intended for users aged 13 and older. If you are under 13, please do not use Ember or provide any personal information.

If a parent or guardian believes their child under 13 has created an account, please contact us immediately at the email address in Section 10, and we will delete the account.

8.2 International Data Transfers

Your information may be transferred to and processed in countries other than where you live, including the United States, which may have different data protection laws.

8.3 Data Breach Notification

If a data breach affects your personal information, we will notify you via email and in-app within 72 hours with details about what happened, what data was affected, and how we're fixing it.

9. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We'll update the "Last Updated" date and notify you of material changes via email at least 30 days before they take effect. Your continued use of Ember after changes take effect means you accept the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

Aether Creations LLC
Ember
4030 Wake Forest Road, Suite 349
Raleigh, NC 27609
United States
Email: contact@embertask.app

Please include "Privacy Request" or "Privacy Policy" in the subject line. We will respond within 30 days.

By using Ember, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described.