Privacy Policy
Your privacy matters. This policy explains what data Embrace collects, how we use it, and your rights.
1. Who We Are
Embrace ("we", "us", "our") is a self-reflection companion app. We are based in Turkey and operate under Turkish law.
2. Your Conversations Are Yours Alone
This is our core promise.
Messages and conversations with AI are processed entirely on your device using Apple Intelligence (iPhone 15 and later). We do not have access to this content. We cannot read it, store it, or transmit it.
Current Implementation: On-device processing via Apple Intelligence. Works offline. Your conversations never leave your device.
Future Changes: We may expand AI capabilities to include cloud-based processing. If we do:
- You will be notified before any change takes effect
- We will clearly explain what data is processed and where
- Where feasible, cloud features will be optional
Our Commitment: Embrace is transparent about how your data is handled. We will always tell you what happens with your conversations—before it happens.
3. What We Collect
Data You Provide
| Data Type | What | Why |
|---|---|---|
| Account Info | Email (if you sign up), nickname, bio, avatar | To create your account and personalize your experience |
| Essences & Terms | Words, definitions, practices you create | Core app functionality - your personal vocabulary |
| Packs | Collections of essences you create or subscribe to | To organize and share content |
| Social Content | Posts, replies (if you use social features) | To enable community features |
Usage Information
We may collect anonymized usage data to understand how the app is used and improve your experience. This may include:
- Features you interact with
- Screen navigation patterns
- App preferences and settings
- Session information
This data is collected in aggregate or anonymized form and cannot be used to identify you personally.
Data We Do NOT Actively Collect
- Your AI Conversations: Processed on-device, never accessible to us
- Your Device Contacts: Never requested or accessed
Note: Third-party services (Supabase, RevenueCat) may collect technical data such as IP addresses as part of their standard operation. See their privacy policies for details.
4. How We Use Your Data
- Provide the Service: Store and sync your essences, packs, and profile
- Enable Features: Social features, notifications, subscriptions
- Improve the App: Understand usage patterns, fix issues, develop features
We do NOT:
- Sell your data
- Use your data for advertising
5. Where Your Data Lives
On Your Device (Local)
- AI conversations (never transmitted)
- Cached data for offline access
- Encrypted using Apple's security frameworks
In the Cloud (Supabase)
- Account information
- Essences, packs, social content
- Protected by Row-Level Security (only you access your data)
6. Third-Party Services
We use these services to operate Embrace:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication | Account data, content |
| RevenueCat | Subscription management | User ID, purchase data |
| Apple | Sign-in, payments, on-device AI | Auth tokens, purchases |
| Sign-in (optional) | Auth tokens |
We may use additional analytics services to collect anonymized usage data. Any such services will be selected for their privacy practices.
7. Your Rights
Under KVKK (Turkey), GDPR (EU), and CCPA (California), you have the right to:
- Access: Request a copy of your data
- Correction: Fix inaccurate data
- Deletion: Delete your account and all data
- Export: Download your data in portable format
- Withdraw Consent: Opt out of optional data processing
To exercise these rights: Use the "Delete Account" feature in Settings, or contact us via the Support page.
8. Data Retention
- Active Account: Data retained while you use the app
- Deleted Account: Data permanently deleted within 30 days
- Anonymized Usage Data: May be retained indefinitely in aggregate form
9. Security
We protect your data with:
- Encryption at rest (on device)
- Encryption in transit (HTTPS/TLS)
- Row-Level Security (database)
- Secure authentication (JWT tokens)
- On-device AI processing for conversations
10. Children's Privacy
Embrace is intended for adults (18+). We do not knowingly collect data from children. If you believe a child has provided us data, contact us for deletion.
11. International Transfers
Your data may be processed in Turkey (our location), United States, or European Union (Supabase infrastructure). Transfers are protected by standard contractual clauses and applicable data protection agreements.
12. Changes to This Policy
We may update this policy. Material changes will be announced in-app before taking effect and posted with a new "Last Updated" date. Continued use after changes constitutes acceptance.
13. Contact
Questions about privacy? Visit our Support Page.
Summary: Your conversations are private and stay on your device. We collect account data and content you create to provide the service. We may collect anonymized usage data to improve the app. We are transparent about any changes.