Privacy Notice
Last updated: May 17, 2026
1. Who we are
Ember is operated by Bellview Fitness ("we", "us"). We are the data controller for the personal data described in this notice.
2. Personal data we collect
- Account data — email address, authentication credentials, sign-in provider identifiers.
- Profile and usage data — partner names you add, cycle start dates, tracking history, regulation check-in responses.
- AI conversation data — messages you send to the AI advisor.
- Support and communications — messages you send to us.
- Technical data — device identifiers, IP address, browser type, usage telemetry, crash logs.
Payment information (card number, billing address) is collected directly by Paddle and is not stored on our systems.
3. Why we use your data and the legal basis
- To provide the Service (account creation, cycle tracking, AI chat) — performance of our contract with you.
- To process payments and manage subscriptions — performance of our contract, and via Paddle as Merchant of Record.
- Security, fraud prevention, and abuse detection — legitimate interests.
- Product improvement and analytics — legitimate interests.
- Customer support — performance of our contract / legitimate interests.
- Legal compliance — to meet our legal obligations.
4. How we share your data
- Service providers / subprocessors — hosting, database, authentication, and AI model providers that help us operate the Service.
- Paddle (Merchant of Record) — for sale of the product, subscription management, payments, tax compliance, refunds, and invoicing.
- Professional advisers — legal and accounting where necessary.
- Authorities — where required by law or to protect rights and safety.
We do not sell your personal data.
5. International transfers
Some recipients may be located outside your country, including in the United States and the EEA/UK. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Data retention
We keep personal data only as long as needed for the purposes above, to comply with legal obligations, or to resolve disputes. When no longer needed, data is deleted or anonymised. You can delete your account at any time, which removes your associated personal data.
7. Your rights
Depending on your location, you have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. EEA/UK users also have the right to lodge a complaint with their supervisory authority. We aim to respond within one month.
8. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security in our database — to protect your data.
9. Cookies
We use cookies and similar storage that are essential for authentication and core functionality. We may also use limited analytics cookies to understand usage. You can manage cookies in your browser.
10. Children
The Service is not directed at children and is intended for adults only.
11. Contact
For privacy questions or to exercise your rights, contact us through the in-app support channel.