Ember Privacy Policy
Last updated: 20 September 2026
This policy explains what Ember collects about you, why, and what you can do about it. It is written to be read, not to be skipped.
Who we are
Ember is a trading name of Benjamin Fowler, a sole trader based in the United Kingdom.
We are the data controller for the information described here. That means we decide what is collected and why, and we are responsible for looking after it.
For anything about your privacy, email privacy@e-mbr.uk. You can also write to us, and we will give you a postal address on request.
What we collect
When you create an account
| What | Why |
|---|---|
| Email address | To sign you in, and to reset your password. It is never shown to other users. |
| Password | Stored only as a one-way hash. We cannot read it, and neither can anyone else. |
| Handle and display name | How you appear on Ember. Public. |
What you post
Videos, comments, likes, follows, and anything in your bio or profile picture. All of this is public by design. That is what the app is for.
Embers and payments
| What | Why |
|---|---|
| Your ember balance, and every movement of embers in or out | So the balance is correct and can be audited. See "What we cannot delete" below. |
| Gifts you send and receive | They are shown publicly on the video or stream, and they decide what a creator earns. |
| A record of each purchase: what you bought, when, how much, and the store's transaction reference | To credit your account, to help you if something goes wrong, and to meet UK accounting law. |
We never see your card. Payments are handled entirely by Google Play or the Apple App Store. Your card number, bank details and billing address never reach Ember. We only receive confirmation that a purchase happened.
Safety information
To stop fake accounts, bought followers and fraud, we record a small amount of technical information when certain actions happen, such as following someone:
- A scrambled version of your IP address. We store a one-way hash, not the address itself. It lets us tell that two accounts acted from the same place, without us knowing where that place is.
- Your country. Country only. Not your town, not your location.
- A scrambled device identifier. Again a one-way hash, used to spot one person running many accounts.
What we do not collect
- Your precise location. Ember never asks for GPS.
- Your contacts, photos, calendar, microphone or camera, except a photo or video you deliberately choose to upload.
- Advertising identifiers. Ember shows no adverts and contains no advertising or analytics trackers.
- Anything about you from other apps or websites.
Why we are allowed to hold it
Under UK GDPR we need a lawful basis for each thing we do:
| What for | Lawful basis |
|---|---|
| Running your account and showing you the app | Performance of our contract with you, meaning our terms of use |
| Taking payment and crediting embers | Performance of our contract with you |
| Keeping financial and tax records | Legal obligation |
| Fraud prevention and platform safety | Our legitimate interest in keeping Ember honest and safe for everyone |
Who else sees it
We do not sell your data. We do not share it for advertising. We never will.
We use a small number of suppliers to run the service. They may only act on our instructions:
| Who | What they do | Where |
|---|---|---|
| Supabase | Hosts our database, sign-in system and uploaded videos | United States (Northern Virginia) |
| Google Play | Takes payment for ember purchases on Android | Worldwide, under their own privacy policy |
| Apple | Takes payment for ember purchases on iPhone and iPad | Worldwide, under their own privacy policy |
Where your data is held
Ember's database and uploaded videos are currently stored in the United States. That means your information leaves the UK.
We are allowed to do this because our agreement with Supabase includes the standard data protection clauses approved for UK transfers, which oblige them to protect your data to UK standards wherever it sits.
You can ask us for a copy of those safeguards at any time.
We may also disclose information where the law requires it, for example to the police under a valid request, or to protect someone from harm.
How long we keep it
- Your account and posts: until you delete them, or until you close your account.
- Safety information: 12 months.
- Financial records: six years, because UK tax law requires it.
What we cannot delete
Ember's balances work like an accounting ledger. Every movement is written once and never changed or removed. This is deliberate. It is the only way a balance can be proven correct, and the only way a creator can trust what they have earned.
So if you ask us to delete your account, we will remove your profile, your posts and your personal details. The financial entries stay, with your identity detached from them. UK tax law requires us to keep those records for six years either way.
Your rights
Under UK GDPR you can ask us to:
- Show you what we hold about you.
- Correct anything that is wrong.
- Delete your data, subject to the ledger above.
- Give you a copy in a portable format.
- Stop us using it where we rely on legitimate interest.
Email privacy@e-mbr.uk and we will respond within one month. There is no charge.
If you are unhappy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You can go to them without coming to us first.
Children
Ember is not for children. You must be at least 18 to use it, and at least 18 to earn money as a creator.
If you believe a child has an account, email privacy@e-mbr.uk and we will remove it.
Keeping it safe
Data is encrypted in transit and at rest. Access to the live database is limited to people who need it. Identifiers used for safety checks are stored as one-way hashes, so the original values cannot be recovered, including by us.
No system is perfect. If a breach ever puts your rights at risk, we will tell you and the Information Commissioner's Office within 72 hours, as the law requires.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top always shows the current version.