Privacy Policy
Nothing leaves your device
Effective 30 July 2026 · applies to embertiles.ca and the Ember Tiles apps for Android and iOS
Most privacy policies are long because the app collects a lot. This one is short for the opposite reason.
Ember Tiles collects no personal data whatsoever. There is no account, no sign-up, no server to send anything to, and no analytics or advertising of any kind. Every tile, streak, journal entry and note you write stays in storage on the device you wrote it on, and is never transmitted anywhere.
Who this is
Ember Tiles is made by an independent developer in Canada. For anything in this policy, write to privacy@embertiles.ca.
What this app is not
Ember Tiles is a self-tracking tool, not medical care. It does not diagnose, treat, or advise, and nothing it shows you — a streak, a badge, a day count — is a clinical judgement about how you are doing. It is not a substitute for a doctor, a counsellor, a sponsor or a meeting, and it works best alongside those rather than instead of them.
If you are in crisis, please reach a person: 988 (call or text) in Canada and the United States, 116 123 for Samaritans in the UK and Ireland, or findahelpline.com for a verified line almost anywhere else. The same list is inside the app under Settings, and opening it there is not recorded, counted, or included in any export.
What we collect
Nothing. Not your name, not an email address, not a device identifier, not an advertising ID, not your location, not your contacts, not usage statistics, not crash reports.
The app has no login because it has nowhere to log in to. It works fully in airplane mode from the first launch, which is only possible because it never needed the network in the first place.
Where your data lives
Everything you enter is written to ordinary local storage on your own device:
- On the website and PWA, in your browser's
localStoragefor embertiles.ca. Clearing site data for this domain erases it. - In the Android and iOS apps, in the app's own private storage, plus a mirror copy the app keeps so that your history survives if the operating system clears the web view's storage to reclaim space. Uninstalling the app erases both.
We cannot see any of it. There is no database, no cloud backup, no sync service and no administrator with a way in — not by policy, but because none of it was built.
Permissions the apps ask for
| Permission | Why |
|---|---|
| Notifications | Only if you switch on the daily reminder in Settings. It schedules one local notification on your device at the hour you choose. Nothing is sent through a push service, so no server ever learns that you use the app. Leave the reminder off and the permission is never requested. |
| Internet | Declared because the app is a web view and Android requires it to load its own bundled files. The app makes no network requests of its own. |
| Vibration | The small haptic tap when you light a tile. |
The apps request no camera, microphone, location, contacts, calendar, health, photo or file-system access.
Backups and exports
Settings → Extras & data lets you export everything to a single file and import it again on another device. That file is written wherever you tell your device to put it, and from that moment it is an ordinary file under your control — if you place it in a cloud drive or email it to yourself, it goes wherever you sent it. We never see it, and there is no upload step.
Your device's own system backup (Google One backup, iCloud device backup) may include the app's storage. That is a function of your operating system and is governed by Google's or Apple's privacy policy, not this one. You can exclude it in your device settings.
Analytics, advertising and third parties
There are none. The app ships no analytics SDK, no crash-reporting SDK, no advertising library, no social login and no embedded third-party content. Every font, icon and script is served from this domain — the pages are blocked from contacting any other host by a Content-Security-Policy header, so even an accidental third-party request would simply fail.
The site sets no cookies and does not use any tracking technology. Local storage is used only to hold the data you enter.
Children
Ember Tiles is a general-audience tool and is not directed at children under 13. Since it collects no personal information from anyone, it collects none from children either.
Your rights over your data
Rights of access, correction, portability and erasure normally require asking a company to act on data it holds about you. Here there is nobody to ask, because nobody else holds anything:
- Access and portability — Settings → Extras & data → Export backup gives you the complete contents of your data in one readable file. The journal can also be exported as plain text.
- Correction — every entry is editable in the app.
- Erasure — Settings → Extras & data → Delete all my data clears all of it immediately, as does uninstalling the app or clearing site data in your browser. It is gone at that point; there is no copy anywhere else to request the deletion of.
Changes to this policy
If Ember Tiles ever gains a feature that touches the network, this page will say so plainly and carry a new effective date before that feature ships. The commitment above is a design constraint, not a preference — the app has no server-side component to change its mind with.