Privacy Policy

Ember Focus

Effective Date: January 22, 2026

Ember Focus ("App," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

We collect the following types of information to provide and improve our services:

Data Type	Purpose	Retention Period
Name (Display Name)	Account identification and service delivery	Until account deletion
Email Address	Account linking and user identification	Until account deletion
User ID (OAuth ID)	Authentication and data synchronization	Until account deletion
Device Identifier (Firebase Instance ID)	Analytics and service improvement	2 years from collection
Focus Session Data	Core functionality (streak tracking)	Until account deletion
App Usage Data	Service improvement and analytics	2 years from collection
Notification Settings	Push notification delivery	Until account deletion
Crash and Performance Data	App stability improvement	90 days from collection

2. How We Collect Information

We collect information through the following methods:

• Social Sign-In: When you link your Google or Apple account, we receive your name and email through OAuth
• App Usage: Focus sessions and streak data are automatically generated as you use the service
• Automatic Collection: Device identifiers, crash data, and usage statistics are collected via Firebase
• User Input: Focus goal category and notification time preferences during onboarding

3. How We Use Your Information

We use collected information solely for the following purposes:

• Service Delivery: Operating the focus timer, streak management, and ember seed system
• Account Management: User identification and multi-device data synchronization
• Notifications: Sending focus reminder notifications at your scheduled times
• Service Improvement: Analyzing usage patterns to improve features and fix bugs
• Customer Support: Responding to inquiries and resolving issues

4. Data Retention and Deletion

4.1 Retention Periods

• Account Information (name, email, user ID): Until account deletion
• Focus Sessions and Streak Data: Until account deletion
• Device Identifiers and Usage Data: 2 years from collection
• Crash and Diagnostic Data: 90 days from collection

4.2 Deletion Process

When retention periods expire or processing purposes are fulfilled, we promptly delete your personal data. Electronic data is permanently deleted using methods that prevent recovery.

5. Data Sharing and Third Parties

However, we use the following third-party services to provide our service:

Service Provider	Data Shared	Purpose
Google (Firebase Analytics)	Device identifier, app usage events, crash data	Analytics and quality improvement
Google (OAuth)	Email, name	Account authentication
Apple (Sign in with Apple)	Email, name	Account authentication
Amazon Web Services	Encrypted user data	Data storage and synchronization

6. International Data Transfers

To provide our services, your data may be transferred to and processed in countries outside your residence:

• Recipients: Google LLC, Apple Inc., Amazon Web Services, Inc.
• Countries: United States
• Data Transferred: As described in the "Data Sharing" section above
• Safeguards: HTTPS encryption, industry-standard security protocols

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request access to your collected personal data
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data (account deletion)
• Restriction: Request restriction of processing your personal data
• Withdraw Consent: Withdraw your consent to data collection and use
• Data Portability: Request a copy of your data in a portable format

You can exercise these rights through the Settings screen in the app or by contacting us at the address below.

8. Data Security

We implement the following measures to protect your personal data:

• Encryption: All data transmissions use HTTPS (TLS 1.2 or higher)
• Access Control: Minimized access to personal data
• Authentication: OAuth 2.0 standard authentication protocol
• Regular Audits: Periodic security vulnerability assessments and patches

9. Automatically Collected Information

As a mobile application, we do not use cookies. However, the following information may be automatically collected through the Firebase SDK:

• Device model and operating system version
• App version
• App launch and termination times
• Screen views and events
• Crash logs

10. Children's Privacy

We do not knowingly collect personal data from children under 13 years of age (or the applicable age in your jurisdiction). If we become aware that a child has provided us with personal data, we will promptly delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of any material changes through in-app notifications or other appropriate means before the changes take effect.

• Publication Date: January 22, 2026
• Effective Date: January 22, 2026

12. Contact Us