Privacy Policy

You are here because you care about your privacy, especially when it comes to sharing your most personal thoughts with an app. We built Ember for our own reflection too, so we take that responsibility seriously.

WorkHive Inc. (the "Company," "we," "us," or "our") provides Ember (the "Service"), an AI-assisted journaling and coaching application. This Privacy Policy explains what information we collect, how we use and protect it, whom we share it with, and the choices and rights you have. If anything is unclear, please contact us.

1. Our Commitment

Ember is a private space. What you write and say in Ember is for you. Our commitment is to keep your information as safe, secure, and private as we can while still delivering useful features, and to be transparent about how your data is handled so that you can make informed decisions. In particular:

・We do not sell your personal information.
・We do not use your journal entries to train AI models, and we require the AI providers we use not to either.
・We do not share your journal entries with advertisers or analytics providers.
・You can delete your account and data at any time.

2. Why We Store Data on Our Servers

Your journal entries are stored on our servers rather than only on your device. We chose this so that you can access your entries across devices, so that losing or replacing a phone does not mean losing your journal, and so that AI features such as reflections and reports can be generated reliably. Data is encrypted in transit and at rest, and access is restricted as described in the Security section below.

3. Information We Collect

We collect the following information, either directly from you or automatically when you use the Service.

(1) Account and profile information. Your email address and sign-in credentials (or, if you sign in with Google or Apple, the identifier and email address shared by that provider), and any profile information you choose to provide, such as your name, date of birth (including age), gender, occupation, and self-introduction.

(2) User Content. The journal entries, messages, voice recordings, goals, tasks, and other content you create in the Service, together with the AI responses, summaries, reports, and suggestions generated from them.

(3) Connected services. If you choose to connect a calendar (Google Calendar or your device calendar), we access the calendar information needed to provide that feature. You can disconnect it at any time from the app settings.

(4) Automatically collected information. Device information (model, operating system, app version, language, and time zone), IP address, app usage events (such as screens viewed and features used), crash reports, and push notification tokens.

(5) Purchase information. Your subscription status and purchase receipts, which are processed by the Apple App Store or Google Play. We do not receive your payment card details.

User Content may include sensitive information, such as information about your health or emotional state, that you choose to write about. We collect such information only because you provide it, and we handle it as described in this Policy. Providing information to us is voluntary, but if you do not provide the information we need to operate the Service, we may not be able to provide it to you.

4. How We Use Information

We use the information we collect for the following purposes, and we do not use it beyond these purposes:

(1) Providing the Service, including authenticating your account, storing and displaying your entries, generating AI responses, reflections, reports, and suggestions, and sending notifications you have enabled.
(2) Maintaining the Service, including resolving technical issues, ensuring compatibility, and keeping the Service running.
(3) Analyzing usage in aggregate to understand how the Service is used and to improve it or develop new features. We do not use your journal entries for this purpose except in aggregated or de-identified form.
(4) Communicating with you about the Service, including service announcements and, where permitted by law or with your consent, marketing communications about Ember. You can opt out of marketing communications at any time.
(5) Responding to your inquiries and requests.
(6) Protecting the Service and our Users, including verifying accounts, preventing fraud and abuse, enforcing our Terms of Service, and complying with legal obligations.

5. Legal Bases for Processing (EEA, UK, and Similar Jurisdictions)

Where the General Data Protection Regulation (GDPR), the UK GDPR, or a similar law applies, we process your personal information on the following bases: performance of our contract with you (to provide the Service); your consent (for the sensitive information you choose to include in your entries, for optional features such as calendar connection and voice input, and for marketing communications); our legitimate interests (to maintain, secure, and improve the Service and to communicate with you about it), balanced against your rights; and compliance with legal obligations. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

6. AI Features and AI Providers

Ember's AI features (conversation, reflections, reports, suggestions, and voice) are powered by third-party AI providers acting as our service providers. When you submit an entry or message, use voice input, or request an AI-generated reflection or report, the information listed below is sent to one or more of these providers for processing. The providers act on our instructions under contracts that restrict their use of your data, and we use their services on the basis that your data is not used to train their models.

We may change which providers we use or add new ones. When we do, we will update this Policy.

OpenAI
Provider: OpenAI, L.L.C.
Information sent: Journal entries and messages you submit, conversation history, profile information (age, gender, self-introduction, etc.), goals and tasks, and summaries generated from them
Purpose: Generating AI responses, reflections, reports, and suggestions; text-to-speech
Note: Used only to provide the Service and not used to train AI models.
Anthropic
Provider: Anthropic PBC
Information sent: Journal entries and messages you submit, conversation history, profile information (age, gender, self-introduction, etc.), goals and tasks, and summaries generated from them
Purpose: Generating AI responses, reflections, reports, and suggestions
Note: Used only to provide the Service and not used to train AI models.
Google (Gemini)
Provider: Google LLC
Information sent: Journal entries and messages you submit, conversation history, profile information (age, gender, self-introduction, etc.), goals and tasks, and summaries generated from them
Purpose: Generating AI responses, reflections, reports, and suggestions; text-to-speech
Note: Used only to provide the Service and not used to train AI models.
Deepgram
Provider: Deepgram, Inc.
Information sent: Voice recordings you make when using voice input, and the language you use
Purpose: Converting your speech to text (transcription)
Note: Used only to provide the Service and not used to train AI models.
ElevenLabs
Provider: ElevenLabs, Inc.
Information sent: Text of AI responses to be read aloud
Purpose: Converting AI responses to speech (text-to-speech)

7. Other Third-Party Services

We use the following services to operate, secure, and support the Service. Each provider handles information under its own privacy policy. Your journal entries are not sent to analytics, crash reporting, or advertising services.

Firebase (Authentication, Analytics, Crashlytics, Cloud Messaging)
Provider: Google LLC
Information sent: Account identifiers, email address, device information, app usage events, crash reports, and push notification tokens
Purpose: Sign-in and account authentication, usage analytics, crash reporting, and delivering push notifications
Note: Your journal entries are never sent to Analytics or Crashlytics.
RevenueCat
Provider: RevenueCat, Inc.
Information sent: App user identifier, subscription status, and purchase receipts from the app stores
Purpose: Managing subscriptions and verifying purchases
Apple App Store and Apple Push Notification service
Provider: Apple Inc.
Information sent: Purchase and subscription information handled by the App Store; device push tokens
Purpose: Processing in-app purchases and delivering push notifications on iOS
Google Play
Provider: Google LLC
Information sent: Purchase and subscription information handled by Google Play
Purpose: Processing in-app purchases on Android
Fly.io
Provider: Fly.io, Inc.
Information sent: All data stored by the Service, encrypted in transit and at rest
Purpose: Hosting our servers and database

The Service may also contain affiliate links to third-party websites. When you follow such a link, the third party may collect information such as click data and cookies under its own privacy policy. We do not send any of your User Content to affiliate partners.

8. When We Share Information

We do not sell your personal information, and we do not share your journal entries or other information that identifies you with third parties, except in the following cases:

(1) With service providers that process information on our behalf and under our instructions, such as the AI providers and other services listed above. We assess these providers, enter into contracts including confidentiality obligations with them, and supervise their handling of your information.
(2) When required by law, regulation, legal process, or a governmental request, or when we believe disclosure is necessary to protect the life, health, or property of a person and it is difficult to obtain your consent.
(3) In connection with a merger, acquisition, corporate split, or transfer of all or part of our business, in which case the successor will be bound by this Policy with respect to your information.
(4) With your consent or at your direction.

9. International Transfers

We are based in Japan, and our servers and service providers are located in Japan, the United States, and other countries. Your information may therefore be transferred to and processed in countries other than the one in which you reside, which may have different data protection laws. Where required, we rely on appropriate safeguards for such transfers, such as contractual commitments from our providers, and we take reasonable steps to ensure your information remains protected as described in this Policy.

10. Security

We take organizational, personnel, physical, and technical measures to protect your information against unauthorized access, loss, alteration, and disclosure. These include:

(1) Encryption. All data transmitted between your device and our servers is encrypted using TLS, and data is encrypted at rest on our servers.
(2) Access control. Access to production data is restricted to authorized personnel who need it to operate the Service or resolve technical issues, and is protected by authentication controls and logging.
(3) Authentication. Sign-in is handled through Firebase Authentication, and sign-in tokens on your device are stored in the operating system's secure storage.
(4) Vendor management. We assess the providers we entrust with your data and require them to maintain appropriate safeguards.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

11. Data Retention and Account Deletion

(1) We retain your information for as long as your account is active and as needed to provide the Service to you.

(2) You can delete your account at any time from the app settings. After you delete your account, you can restore it by signing in again within 30 days. After that period, your account can no longer be accessed and your data cannot be recovered.

(3) After the 30-day period, we delete your information from our systems, except that we may retain limited information for a further period where necessary to prevent fraud or abuse, to resolve disputes, to enforce our agreements, or to comply with legal retention obligations. Backups are overwritten in the ordinary course of operations.

(4) Deleting your account does not cancel an app store subscription. Please cancel the subscription separately through the Apple App Store or Google Play.

12. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

・Access the personal information we hold about you and receive a copy of it
・Correct inaccurate or incomplete information
・Delete your account and associated information
・Restrict or object to certain processing, including direct marketing
・Receive your information in a portable format
・Withdraw consent where processing is based on consent
・Lodge a complaint with your local data protection authority

You can update your profile information and delete your account directly in the app. For other requests, please contact us using the details in the Contact section. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

You can control push notifications, calendar connection, and voice features in the app or device settings. You can opt out of marketing emails using the unsubscribe link in any such email.

California residents: we do not sell or share (as defined under California law) your personal information, and we have not done so in the preceding 12 months. The categories of personal information we collect, and the purposes for which we use them, are described in Sections 3 and 4.

13. Children

The Service is not directed to children under 13, or under the higher minimum age required in your country or region to consent to the use of an online service, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by posting a notice on our website, in the app, or by email before the changes take effect. The date of the latest revision is shown at the bottom of this page.

15. Applicable Version

If you reside in Japan, the Japanese version of this Privacy Policy applies to you, and this English version is provided for reference only. If you reside outside Japan, this English version applies to you.

16. Contact Us

If you have any questions about this Policy or wish to exercise your rights, please contact us at hello@workhive.dev.

WorkHive Inc., Japan. Support hours: 9:00 to 17:00 JST, excluding weekends, Japanese public holidays, and the year-end and New Year holidays.

Supplementary Provisions
Established and effective: April 1, 2026