Privacy Policy

HEXELITY LABS S.R.L. ("we", "us", or "our") operates the Ember mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. Please read this policy carefully. By using Ember, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• User Input Content: Text, photos, or screenshots you submit to generate roasts. Images are compressed on your device before upload.
• Roast Preferences: Your selected tone (e.g., friendly, savage, brutal), intensity level, and output length preferences.
• Feedback: If you submit feedback through the App, we collect the sentiment and any message you provide.

1.2 Information Collected Automatically

• Anonymous Account: We use anonymous authentication — no email, name, or password is required. A unique anonymous identifier is created on first launch.
• Device Language: We detect your device's language setting to localize AI-generated content. We do not collect your full locale or region data beyond the language code.
• Usage Data: We track aggregated usage metrics such as the number of roasts generated and tokens consumed, for quota enforcement and service improvement.
• Analytics Data: We use PostHog to collect anonymized analytics events including app opens, session duration, screen views, and feature usage. PostHog autocapture is disabled — we only track explicitly defined events.

1.3 Information We Do NOT Collect

• Email addresses, names, or passwords
• Precise location or GPS data
• Contacts, calendar, or other device data
• Advertising identifiers (we do not serve ads)

2. How We Use Your Information

• Generate Roasts: Your input content and preferences are sent to our AI service to produce roast outputs.
• Enforce Quotas & Rate Limits: Usage data is used to enforce free-tier daily limits (5 roasts/day) and prevent abuse.
• Process Payments: If you subscribe to Premium, your purchase is processed through Apple In-App Purchases via RevenueCat. We store your RevenueCat subscriber ID and subscription status — we never see or store your payment card details.
• Improve the App: Analytics and crash data help us fix bugs, improve performance, and understand how features are used.
• Security & Abuse Prevention: We use request signing, rate limiting, and automated anomaly detection to protect the service from abuse.

3. Third-Party Services

We share data with the following third-party services, solely to operate the App:

4. Data Storage & Retention

• Your roast history is stored in our database and associated with your anonymous account.
• Uploaded images are stored in Convex File Storage and are associated with the roast that generated them.
• We retain your data for as long as your account exists or as needed to provide the service.
• You can delete individual roasts from your history within the App at any time.
• You can request deletion of all your data by contacting us (see Section 8).

5. Data Security

We implement multiple layers of security to protect your data, including authenticated API access, server-side rate limiting, HMAC request signing, and automated abuse detection. All data is transmitted over encrypted connections (HTTPS/TLS). While we strive to use commercially acceptable means to protect your data, no method of electronic transmission or storage is 100% secure.

6. Children's Privacy

Ember is not directed to children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to delete such information.

7. International Data Transfers

Your information may be processed and stored in countries outside your country of residence, including the United States, where our third-party service providers operate. By using the App, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)

To exercise any of these rights, please contact us at ember@hexelitylabs.com. We will respond to your request within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. You are encouraged to review this page periodically. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: