Privacy Policy

EMBRACE is a local-first reset tracker built so your private reset history stays yours. The core 90-second reset is free; EMBRACE Plus is an optional subscription billed entirely by Apple. This policy describes exactly what the app stores, what may leave your device only with your consent, how optional product analytics work, and how optional AI enrichment works if you choose to turn it on.

What EMBRACE stores on your device

• Your full reset history, including reset entries and the parts you name.
• Anything you type during a reset or check-in.
• Your optional profile card: three selections from pre-written options about your situation, stressors, and what steadies you. It has no name or free text.
• Your preferences, such as haptics and reminder settings.

The full history and reset or check-in text are not uploaded and are not tied to an account. If you turn on AI Insights, selected pre-written choice and profile-card IDs — plus short AI-written pieces of your previous fireside — are processed as described below; anything you type is not. Deleting the app deletes this local data.

Your signature is never saved

When you sign an intention, the drawing is shown for that moment and then discarded. It is never stored, never uploaded, and never recorded.

What leaves your device

Only if you opt in, EMBRACE sends product analytics while you use the app:

• A random app-install identifier, created only after you opt in. Events from the same installation are linked by this identifier, but it is not an Apple ID, advertising ID, or hardware ID.
• A fixed list of feature-use events, such as onboarding progress, reminder enablement, reset start/completion/abandonment, check-in completion, and use of island, theme, and sanctuary features.
• Before and after ratings; reset duration; local hour of the reset; presence, progress, and other numeric counts.
• Stable codes for pre-written choices, work/personal context, part, mood, movement direction, theme, and island. The displayed words are not sent.
• Coded paywall and purchase events: the plan's product ID, whether a free trial started, and coded failure reasons. Never prices, receipts, or payment details — billing belongs entirely to Apple.
• A server timestamp for each event.

Analytics is optional worldwide. EMBRACE works fully if you decline. Declining is not sent as an event, and the app does not create an analytics identifier for someone who does not opt in.

In the app, we do not collect your name, email, phone number, Apple ID, advertising ID, hardware identifiers, contacts, location, your signature, or the full reset history stored on your device. Text you enter during resets and check-ins is never sent. The profile card has no free text. EMBRACE has no accounts and no ads. We never sell analytics or use it for advertising.

Use, processor, and protection

We use analytics only to measure product use, reliability, and whether resets appear helpful in aggregate. Events are sent directly to an access-controlled Supabase database. Supabase processes the data for us and is required to protect it at least as carefully as described here. The public key included in the app can insert allowlisted events but cannot read, update, or delete analytics rows.

Optional AI Insights (off by default)

EMBRACE offers an optional feature — AI Insights — that lets AI write your periodic "fireside debrief" conversation and personalize the pre-written choices shown during a reset. It is off by default and only turns on through its own separate consent screen. Declining it (or never touching it) changes nothing: firesides still work, built entirely on your device.

If you turn AI Insights on:

• The app first builds a complete fireside on your device. That on-device fireside remains the fallback at every step: any failure below means you see it instead.
• The client sends coded ratings, context, character, time patterns, streak and stable IDs for selected pre-written reset choices and profile-card options. For week-to-week continuity it also sends short AI-written pieces of your previous fireside: the AI characters' lines, their questions, the text of the pre-written option you tapped, and the AI's own brief summary of that fireside. Everything else is coded values only. Never anything you type or draw, never your signature, never your name.
• Our stateless server checks the catalog version and resolves selected IDs through reviewed catalogs. Anthropic therefore receives the reviewed wording of the pre-written choices and card options you selected, alongside the coded ratings and patterns and the prior AI-written fireside pieces above. Unselected choice wording is not sent.
• Anthropic writes the fireside scene: the three characters' lines, one to three questions with short tappable answers and a reply for each, up to eight complete suggestion rankings, a pre-written intention pick, and a short summary for next week. The conversation must stay descriptive and warm and must not provide advice, diagnoses, therapy claims, causal claims, judgments, crisis inference, or claims about another person's motives.
• Every line is checked three times before you see it: a second AI model reviews the whole scene against those rules, our server enforces mechanical limits (length, characters, a crisis-term blocklist, and that every number matches your actual data), and the app validates everything again on your device. Anything that fails — one line or the whole scene — is dropped or replaced by the complete on-device fireside. AI firesides are labeled AI-generated conversation, live and in your journal.
• Our server stores nothing and keeps no copy. Anthropic processes the request as our service provider, does not use it to train models, and may retain it for up to 30 days for abuse monitoring. The result is kept only on your device.
• You can turn AI Insights off at any time in More → Privacy. Sending stops immediately and firesides go back to being built on your device. Because nothing is stored on our servers, there is nothing to delete there.

Your optional profile card

The profile card contains one pre-written selection about your situation, what tends to set things off, and what helps you settle. It has no name field and no free text. Its themes improve on-device suggestion ranking even when AI is off. While AI Insights is on, the same single consent covers the card's stable IDs and the reviewed wording resolved from them. You can change or clear the card at any time.

Retention, withdrawal, and deletion

Analytics events are retained for up to 12 months and then deleted.

• In More → Privacy, you can turn analytics off. Transmission stops immediately, the events we already received are deleted, and the local Analytics ID is removed. Turning analytics on again creates a fresh random ID.
• If that deletion cannot reach our server, we tell you so and show you your Analytics ID rather than discarding it, so you can email us and we will remove the events for you.
• Deleting the app deletes local data and any random ID from the device. It does not itself delete analytics events already sent.

Crash reports

If you have chosen to share analytics with Apple in your device settings, TestFlight and the App Store may pass us anonymous crash reports through Apple. You can turn this off in iOS Settings under Privacy and Security.

The website waitlist

If you join the waitlist on our website, we store what you submit (name, email, and any comments) in an access-restricted spreadsheet viewable only by the EMBRACE founder, used only to contact you about EMBRACE, never sold, never shared. To be removed, email swoo@swnconsultingllc.com.

Accounts and purchases

EMBRACE has no accounts and does not collect your email, phone number, or name in the app. The 90-second reset is free. EMBRACE Plus is an optional auto-renewing subscription billed entirely by Apple through your Apple ID that unlocks the deeper practice, including fireside debriefs (AI-personalized only under the separate AI Insights consent); we never see or store your payment details, and refunds are handled by Apple. If data practices change later, this policy and the relevant consent copy will be updated before the change takes effect.

Your choices

• Turn analytics off: More → Privacy; future analytics stop immediately, the local Analytics ID is removed, and the app remains fully usable.
• Turn AI Insights off: More → Privacy; future AI requests stop while your local profile card and deterministic firesides remain available.
• Delete local data: delete the app.
• Delete analytics already sent: email the address below with the Analytics ID shown in More before turning analytics off.
• Questions or requests: swoo@swnconsultingllc.com.

Washington residents

Washington's My Health My Data Act treats some of what EMBRACE records — your before and after activation ratings, and the coded topic and choices for a reset — as consumer health data. Because that law requires it to stand alone, those disclosures live in a separate Consumer Health Data Privacy Policy: what is collected, who it is shared with, and how to access it, withdraw consent, or have it deleted.

Nothing there changes what this policy says. Analytics remains off until you turn it on, and turning it off deletes what we already received.

Availability outside the United States

EMBRACE is not currently offered in the European Economic Area or the United Kingdom, and is not available on those App Store storefronts. We are not offering the app or its services to people in those regions, so the GDPR and UK GDPR do not apply to this release.

If that changes, we will publish the disclosures those laws require — controller identity and postal address, our representative in the region, the legal basis for each purpose, the international-transfer safeguard, and how to lodge a complaint with a supervisory authority — before making the app available there, and we will say so in the change notice below.

Wherever you are, the choices described in this policy are the same: analytics and AI Insights are off until you turn them on, and turning either off stops it immediately.

Children

EMBRACE is not directed at children under 13 and we do not knowingly collect information from them.

Not a medical service

EMBRACE is a self-regulation tool, not therapy, medical treatment, or a crisis service. If you are in crisis, call or text 988 (US) or call 911.

Changes

We will update this page and the in-app copy before any change to these practices takes effect.