Privacy Policy

Who we are

Emberby (emberby.com) is a small social-planning app run by its founding team, based in the United States. Emberby is the “data controller” of your information. For anything in this policy, write to datahuntergatherers@gmail.com — a person reads every message.

What we collect

• Account: your email address and your first and last name. If you sign in with Google, we receive your name and email address from your Google account — nothing else (no contacts, no calendar, no password). Other people only ever see your first name and last initial (“Maya C.”).
• Plans: what you post — title, time, place (including the map coordinates if you set a specific address), optional details, and who joined.
• Connections: who you’re connected to, requests you send or receive, and anyone you block.
• Usage: product events (e.g. “created a plan”, “opened a share link”) tied to a random user ID — never your email. When anyone opens a share link we also record that it was opened, with the browser type and referring site. Our analytics stores nothing on your device (see Cookies below).
• Technical: IP addresses and request logs held briefly by our hosting providers, error reports if something crashes, and a delivery report (with your email address partially masked) if an email to you bounces.

We do not collect your contacts, your device location (map pins come from addresses typed by plan hosts, not from GPS), or anything for advertising. We don’t sell or rent personal data — to anyone, ever.

Why we use it

To run the service you signed up for (keeping your account, showing plans to the right people, sending sign-in codes and plan notifications); to keep the service safe (blocking, abuse prevention, debugging); and to understand product usage in aggregate so we can improve it. In GDPR terms these are “performance of a contract” and “legitimate interests”. Notification emails can be turned off per category in Settings; sign-in emails are required to log in.

Who can see what

Your plans are visible according to the audience you pick (friends, friends-of-friends, or people with a share link). A share link opened by someone who isn’t signed in shows only a limited preview — the plan text, time, place label, the host’s first name, the first name of whoever shared the link, and a head-count. It never shows the guest list or exact map coordinates.

Where your data lives

Our servers are in the United States. If you use Emberby from the EU, your data is transferred to the US — under the EU-US Data Privacy Framework where the provider is certified, and otherwise under standard contractual clauses in our agreements with them. These providers process data on our behalf:

• Supabase (database & sign-in)
• Vercel (hosting)
• Resend (sending email)
• PostHog (product analytics)
• Sentry (error monitoring)
• GitHub (private storage of our database backups)
• OpenStreetMap Foundation (map images — when you view a plan map, your browser requests the map tiles directly from them)

Beyond these providers, we only disclose data if the law requires it.

How long we keep it

Your data stays while your account exists. Expired plans leave the feed but remain stored with your account. Encrypted backups are kept for up to 90 days. When you delete your account (Settings → Delete account): your name and email are removed, your connections and settings are deleted, your upcoming plans are canceled, and our internal activity log is de-identified. Plans you hosted remain visible to their attendees in anonymized form (“Deleted user”), and deleted data ages out of backups within 90 days.

Your rights

Wherever you live, you can: see the data we hold about you, correct it (your name is editable in Settings), delete your account yourself in Settings, get a copy of your data in a portable format, object to a use of it, or ask us to pause (restrict) a use of it while we sort something out. Email datahuntergatherers@gmail.comand we’ll respond within 30 days. If you’re in the EU, you also have the right to complain to your data-protection authority (in Italy, the Garante per la Protezione dei Dati Personali).

Cookies

Emberby uses only cookies that are strictly necessary to keep you signed in. Our analytics runs without cookies and stores nothing on your device, which is why you don’t see a cookie banner.

Age

Emberby is for people 16 and older.

Changes

If this policy changes, we’ll update this page and its date, and email you about anything material. Questions? datahuntergatherers@gmail.com.