Novaire Digital / Ember / Privacy

Privacy Policy

Ember · Last updated 22 October 2026

Ember ("the App") is a monthly relationship ritual app for couples, developed by Benjamin Jacquet, trading as Novaire Digital (ABN 24 349 309 268) ("we", "our"). The short version: Ember has no accounts, no analytics and no ads. We run no server that holds your data. Everything you write stays on your phone and we never see it. The only things that leave your phone are an anonymous app user id and your Ember Plus purchase records or access code, if you have either. They go to RevenueCat so that Ember can tell whether Ember Plus is active.

1. What stays on your phone

Ember stores the following only on the device you use it on:

  • Your couple profile: the first names or nicknames you enter, your ritual night, your preferred length and your date-idea tastes.
  • Your rituals: the cards drawn, the appreciations you write, ratings, the one-line notes you seal each month and your plans.
  • Your decisions and whether you kept them.
  • The Vault: each partner's answers, their private notes, the shared notes and the shared list.
  • Whether Ember Plus is active and on which plan, so the App opens correctly without a connection.

We have no copy of any of this and no way to read it. There is no Ember account, no sign-in and no Ember server.

2. The Vault

The Vault is encrypted on your phone (XChaCha20-Poly1305) with a key held in your phone's secure keychain, set so it never leaves that phone. Each partner opens their own side with their own PIN. Only items you both answered yes or curious to are ever shown to both of you; a no is never shown to anyone. The decrypted Vault exists only in the phone's memory while a side is open, and it locks when you leave the app.

3. Backups

Your phone's own backup (iCloud on iPhone, Google on Android) may include Ember's ritual data, under Apple's or Google's terms, so a new phone can keep your story. The Vault is different: a backup only carries its encrypted form, and because the key never leaves the original phone, a restored Vault cannot be opened on another phone, by anyone, including us. Ember then starts that phone with an empty Vault.

4. What leaves your phone: Ember Plus and RevenueCat

Ember Plus is an auto-renewing subscription, monthly or yearly, sold through Google Play and, once Ember is on the iPhone, the App Store. Google or Apple takes the payment and holds your payment details; we never see them.

To check whether Ember Plus is active, Ember uses RevenueCat, Inc. (United States), a subscription service that works for us. When Ember opens, it asks RevenueCat for your Ember Plus status. RevenueCat receives an anonymous app user id created for this install, the store's purchase records for Ember Plus (your purchase history) and the technical details needed to validate a purchase, such as the app version and the platform. Ember has no accounts, so we never give RevenueCat your name or email address. It does not receive anything you write in Ember. RevenueCat's handling of that data is described in its privacy policy. If you never buy Ember Plus there is no purchase record to send, but the anonymous id and the technical details are still sent when Ember checks.

Ember Plus can also be unlocked with an access code. Codes are used for app store reviewers, press and support. When you redeem a code, RevenueCat links your phone's anonymous app user id to that code so that the Plus access applies. No personal information is involved.

5. What Ember does not do

  • No analytics, advertising or tracking of any kind and no advertising identifiers.
  • No crash-reporting service.
  • No third-party software that sends what you do in the App anywhere, apart from the RevenueCat check described in section 4.
  • No contacts, camera, microphone, photo library or location access.
  • No selling or sharing of personal information, because we do not hold any.

6. Notifications

If you say yes to reminders, Ember schedules two local notifications per ritual on your phone: one three days before at 10:00 and one at 10:00 on the day itself. They are created on the device; there is no push server. A "discreet" option keeps the lock-screen wording to a plain reminder, such as "A reminder about this evening".

7. Sharing

After a ritual you can choose to share a card that shows your first names and how many months you have kept the ritual. It never contains what was said. Nothing is shared unless you tap share.

8. Adults only

Ember is made for adult couples aged 18 or over and is not directed at children. Parts of the App deal with intimacy. The store listings are rated for adults. The App also asks you both to confirm that you are 18 or over before the after-dark round and before the Vault.

9. Delete your data

Ember has no account to delete. Your data is on your phone and you can erase it yourself at any time. The only thing held on a server is RevenueCat's anonymous record described in section 4.

How to delete your data

  1. Everything in the App: open Settings and tap Erase everything and start over, then confirm. This deletes every ritual, decision and plan, the whole Vault, its key and both PINs from your phone. It also cancels scheduled reminders. There is no undo.
  2. Only the Vault: in Settings, tap Erase the Vault. Your rituals and decisions stay.
  3. Uninstalling: deleting the app removes its data from the phone. On iPhone, keychain items can outlive an app, so Ember clears any leftover Vault keys when a couple next sets it up.
  4. Phone backups: if your phone's own backup (Google on Android, iCloud on iPhone) includes Ember's ritual data, that copy belongs to your Google or Apple account and stays there until you remove it in your backup settings. The Vault in a backup is encrypted and cannot be opened without the key from your phone.
  5. Purchase records: RevenueCat keeps the anonymous record described in section 4 (any purchases and the access code link if you redeemed a code). To have it deleted, email support@novairedigital.com and we will help. Google and Apple keep their own record of payments under your account. Erasing the App's data does not cancel a subscription: cancel Ember Plus in your Google Play or App Store subscription settings.

10. Your rights

We handle personal information in line with the Australian Privacy Principles and, where they apply, laws such as the EU and UK GDPR. Because Ember keeps your content on your phone, we hold nothing about you to access, correct or delete, apart from what RevenueCat holds about a purchase.

11. Changes to this policy

If Ember changes how it handles data, this page will change first, with a new date above.

12. Contact

Developer: Benjamin Jacquet, trading as Novaire Digital
ABN: 24 349 309 268
Email: support@novairedigital.com