Ember · Privacy Policy

Your logs stay with
you and your iCloud.

Ember keeps your fibromyalgia data on your device and your own private iCloud. The only time anything leaves is when you choose to generate an AI Visit Brief. Here is exactly how it works.

Last updated: June 2026 · Effective immediately

The short version
Stored on device + your private iCloud. Your logs sync through Apple CloudKit in your own iCloud account. We run no server that stores them and cannot read them.
The AI Visit Brief is the one exception. When you tap generate, a summary of your logs is sent over TLS to our API and our AI provider (Anthropic) to write the brief, then discarded. Our server keeps only a monthly usage count.
Weather and Apple Health are optional. Location is used to fetch barometric pressure and temperature; Health data (sleep, cycle, steps, HRV, resting heart rate) is read-only. Decline either and the app still works.
We never sell or track you. No advertising, no analytics, no cross-app tracking. Payments are handled by Apple.
1. Who we are

Ember ("the App") is published by Velora Health ("we", "us", "our"). For any privacy question or request, contact customer-care@velorahealth.io.

Ember is a wellness tracker. It is not a medical device and does not diagnose or treat fibromyalgia. The FIQR, WPI and SSS scales in the app are self-assessments to share with your doctor, and all patterns are observations from your own logs.

2. The data in Ember

You can log fibromyalgia-related information, all of which is health data:

We also use a small amount of non-health data: an anonymous Apple identifier from Sign in with Apple (used only for the AI brief quota) and your subscription status from Apple. We do not collect your email, contacts, photos, usage analytics or advertising identifiers.

3. Where your data is stored

Everything you log is stored on your device using Apple's SwiftData and synced through your own private iCloud (Apple CloudKit). This data resides in your personal Apple account; Velora Health cannot access it and operates no backend database that stores your health logs. Your sign-in token is stored in the iOS Keychain.

4. The AI Visit Brief

When you choose to generate a brief, the App sends a compressed summary of your logs for the period (pain and fatigue trends, FIQR/WPI/SSS results, medications, flares, weather and Health context) over an encrypted TLS connection to our Ember API (Google Cloud Run).

Our API is stateless for your health data: it forwards the summary to Anthropic (Claude), which writes the brief and returns it to your device. Your logs and the brief are not stored on our servers; the only record kept is a monthly usage count (your account identifier plus the month) to apply the one-brief-per-month quota. Anthropic processes the request solely to generate your brief and, per its API terms, does not use API data to train its models. Every brief carries a "not medical advice" disclaimer.

5. Location & weather

If you enable it, Ember uses your approximate location to fetch local barometric pressure and temperature from OpenWeather, because many people with fibromyalgia notice weather-linked symptom changes. Only your coordinates are sent to OpenWeather - never your health data. This is optional; declining simply turns off weather context.

6. Apple Health (HealthKit)

With your permission, Ember reads - read-only - your sleep, menstrual cycle, steps, heart rate variability and resting heart rate from Apple Health, to add context to your symptom patterns. Ember never writes to Apple Health.

In line with Apple's requirements, HealthKit data is used only to provide app functionality. It is never used for advertising or marketing, and never sold or shared. You can revoke access anytime in iOS Settings > Health > Data Access & Devices.

7. Subscriptions & payments

Ember Pro is an auto-renewable subscription sold through Apple's App Store. Apple handles all payment processing; we never receive or store your payment details.

8. Third-party services

We share data only with the providers needed to deliver these features:

Ember contains no third-party analytics, advertising or crash-reporting SDKs.

9. International data transfer

Our API and its usage counter are hosted in the United States. When you generate a brief, the summary is processed on US servers (by us and by Anthropic). Your health logs themselves remain in your own iCloud account, governed by Apple.

10. Data retention, deletion & your rights

Your logs live in your own device and iCloud, so you control them: delete entries in the App, or remove the App and its iCloud data to erase everything. You can also delete your account in the App, which removes the only record we hold - your monthly usage counter. Depending on where you live (e.g. GDPR, CCPA) you may have rights to access or delete personal data; contact us and we will help.

11. Children's privacy

Ember is intended for adults managing fibromyalgia and is not directed at children under 13. We do not knowingly collect data from children.

12. Changes to this policy

If we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the App.

Questions?
We're happy to help with any request, including data deletion.
customer-care@velorahealth.io ->