Privacy Policy

Effective date: August 6, 2026

This Privacy Policy explains how Jayson Barino (“we”, “us”, or “our”), based in the Philippines, collects, uses, shares, and protects information when you use Ember.

1. Information we collect

Account and profile information: your email address, display name, avatar, invite code, authentication identifiers, profile preferences, usual crew, experience level, and general categories about children or pets you may travel with.

Adventure information: event names, destinations, dates, locations, memberships, invitations, RSVP responses, packing lists, assignments, completion status, packing correspondence, templates, reviews, and cover images.

Expense and Embers information: event currency, expense descriptions and amounts, participants and shares, settlement records, Embers balances, rewards, and event-upgrade transactions. Embers have no cash value and Ember does not process real-world payments.

Cindra and weather information: when you use Cindra, we send event context to third-party AI providers (currently OpenAI and/or Google Gemini) to generate tips or summaries. That context may include adventure details such as the event name, destination, dates, packing data, RSVPs, profile categories, correspondence, and participant display names or other member identifiers shared in the adventure. Generated responses are stored with the event. Weather requests use destination coordinates and event dates.

Technical information: session and authentication data, device and push-notification tokens, platform type, notification status, local cache data, and basic diagnostic information provided by our service providers.

Approximate location: when you search for a destination and grant permission, we use your device’s approximate location to show how far suggested places are from you. Location is used for that search request and is not stored as a continuous tracking history.

2. How we use information

We use information to create and secure accounts; provide collaborative event planning, invitations, packing, RSVP, expense, review, weather, notification, Embers, and Cindra features; personalize suggestions; calculate readiness and balances; prevent abuse; troubleshoot and improve Ember; enforce these Terms; and comply with legal obligations. We process information as needed to provide the service, based on your consent where required, and for legitimate security and service-improvement purposes.

3. Sharing and service providers

Other event members can see information you share within a shared adventure, subject to feature rules. Personal packing items are intended to remain visible only as designed by the app.

We use third-party providers only as needed to operate features: Supabase for authentication, database, storage, and backend services; Google for Google Sign-In and Places; Apple for Sign in with Apple; WeatherAPI.com for forecasts; Google Gemini and OpenAI for Cindra generation; and Firebase for push notifications. These providers may process information in other countries under their own privacy terms.

For Cindra, OpenAI and/or Gemini receive prompts that can include adventure and participant details described above so they can produce suggestions for that event. Do not put highly sensitive personal information into fields or messages that may be included in Cindra requests.

We may disclose information when legally required, to protect users or the service, or as part of a business transfer. We do not sell personal information.

4. Local storage, location, and notifications

Ember may cache event and packing information on your device to improve performance and offline access. Signing out or deleting the app may not immediately remove every operating-system backup. Destination search may request approximate location permission so place suggestions can include distance; you can deny or revoke that permission in your device settings and still search without distances. If you enable notifications, device tokens are used to deliver event invitations, mentions, and other enabled updates. You can change notification permissions in your device settings.

5. Retention and account deletion

We keep information while your account is active and as needed to provide the service, resolve disputes, prevent fraud, and meet legal obligations. You can delete your account from My profile. Account deletion removes your account, Embers balance, adventures you organize, and records tied to your participation as implemented by the service. Shared adventures you only joined may continue for other members without you. Limited information may remain temporarily in provider backups or where retention is legally required. For steps and a web request form, see Account deletion.

6. Security

We use access controls, authenticated requests, and service-provider security features designed to protect information. No internet or storage system is completely secure. Protect your password and notify us if you believe your account has been compromised.

7. Children

Ember accounts are not intended for children under 18 or under the age of legal majority where they live. Profile categories about children are planning context supplied by an adult account holder; they are not intended to identify a child. Contact us if you believe a child has provided personal information without appropriate authorization.

8. Your privacy rights

Depending on applicable law, including the Philippine Data Privacy Act of 2012, you may request access, correction, deletion, restriction, or portability of personal information, object to certain processing, or withdraw consent. You may also lodge a complaint with the National Privacy Commission of the Philippines. Some requests may be subject to identity verification and lawful exceptions.

9. International processing

Our providers may store or process information outside the Philippines. When information is transferred, we rely on provider safeguards and other measures appropriate to the service and applicable law.

10. Changes and contact

We may update this policy as Ember changes. We will update the effective date and provide additional notice when required. Questions or privacy requests may be sent to [email protected].