Privacy Policy

We are EMBI Inc. and we provide a voice-first application that lets you capture meaningful moments with your closest people. We are committed to transparency regarding our privacy practices and provide this Privacy Policy to describe how we collect, use, disclose, process, and safeguard your information when you use our websites, mobile application, and related services (collectively, the “Services”).

Please read this Privacy Policy carefully. It describes our practices regarding your personal information. Where applicable law requires your consent for a particular use of your information, we will request it. If you have questions or comments about this Privacy Policy, contact us at privacy@embi.app.

Our Services are offered in the United States, and your personal information is processed and stored in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. under this Privacy Policy.

1. Information EMBI Collects

We collect or process the following personal information about you from what you provide us directly, what we receive from others, and what we collect automatically when you interact with our Services.

Information you provide directly

Contact information and identifiers. When you use our Services, we may ask you to provide certain contact information, including your first and last name and email address. We may also collect your social media login if you choose to access the Services via a social media account.

Account information and age verification. If you set up an account, we ask you to provide certain additional information including your first and last name, email address (personal and/or work), images you associate with your profile, password (stored in hashed form) and other authentication-related information, and your date of birth. We collect your date of birth to verify that you are at least 18 years old and to help verify your identity if you contact us for support or to exercise your privacy rights. Your date of birth is stored with your account and is deleted when your account is deleted. We may derive a generalized age range from your date of birth for use in aggregate, de-identified analytics; this age range cannot be used to reconstruct your date of birth and is not linked back to your account. Where your app store provides an age category signal for your account, we query that signal in real time to confirm eligibility; we do not store the signal itself, only the resulting verification status. For individuals who participate in special subscriptions and features, we may collect additional personal information, for example, home address and names and emails of members you want to include in your Circles.

Content you submit. Content you submit includes your voice and audio notes, videos and images, posts, comments, and messages, usernames, and some of your profile information, as well as related metadata. If you enable photo access, we may access recent photos from your device's photo library in order to suggest photos to attach to your Moments; only photos you choose to attach are stored with your content.

Payment information. Subscriptions are processed and managed through the app store from which you downloaded the Services. If you complete a financial transaction, you may be required to provide payment card or bank account information to the app store. We do not directly process payment card information; we rely on third-party payment processors, and third-party terms may apply. Certain anonymized, limited and/or truncated versions of this information may be provided to us.

Communication information. When you send or respond to emails, feedback, messages, chats, or other communications from us, we may collect your email address, name, and any other personal information you choose to include. When you interact with certain features of our Services, we may collect the content of those communications.

Support information. When you submit a support request or otherwise engage with our support team, we collect the information you provide as part of that interaction, which may be retained and used for our business purposes, including by our customer service personnel and service providers.

Information we automatically collect

Usage and device information. When you use the Services, we may collect your IP address, operating system, device-identifying information, how you interact with the Services, the pages and application sections visited, and the domain from which you accessed the Services. We may collect the date and time of your visits, your time zone, and a coarse, IP-derived location (such as city or region) used for security, service delivery, and analytics; we do not collect precise geolocation. We may also collect browsing and use behavior such as time spent and return visits, and content you create on the Services. We may use non-personal or aggregated information for statistical analysis, research, and other purposes.

Information from others

We may collect the name, email address, content engagement, and preferences of individuals that our users identify through our sharing and referral features. We use this data for the sole purpose of sharing content and referring individuals to join the Services.

Aggregated, anonymous, and de-identified data

We may create aggregated, anonymous, or de-identified data from personal information by removing, masking, or otherwise altering data components that make the data personally identifiable (“De-Identified Data”). We maintain De-Identified Data in de-identified form and do not attempt to reidentify it except when testing our de-identification practices. De-Identified Data is not personal information and is not subject to this Privacy Policy.

2. Use of Personal Information

We may use your personal information to: provide our Services, including delivery of content, interactive features, and tailoring your experience; verify your age and eligibility to use the Services; support account creation and authentication; verify your identity when you contact us; communicate with you regarding the Services, including updates or changes; provide support and respond to your questions, requests, or complaints; determine the availability of certain features for you; fulfill our obligations under agreements with you; maintain and improve the quality of our Services, including research, analytics, development, and understanding user trends; power machine learning that supports our Services; provide you with information about new products, features, and opportunities we believe may interest you; personalize the content and features of our Services; protect ourselves, you, and others, including preventing fraud and unlawful activity and maintaining a trusted, secure environment; comply with legal obligations, including responding to subpoenas, court orders, or other legal process; and establish or exercise our legal rights or defend against legal claims.

AI is core to our Services. Our Services use artificial intelligence as a core part of how they work: when you record a Moment, we use AI to transcribe your voice, identify emotional tone, and generate the private insights, captions, prompts, and patterns the Services provide. This processing is integral to the Services and is not optional. AI also operates behind the scenes, such as in security monitoring and quality assurance. Where we offer additional, genuinely optional AI features in the future, we will identify them so you can choose whether to use them.

Our Services are designed to identify emotion and tone in captured inputs using AI.

3. Who We Share Your Information With

We may disclose your personal information to the following categories of third parties:

Our service providers

We disclose personal information to third parties that provide services on our behalf, such as analytics, payment processing, website and application hosting, cloud storage, AI processing, and customer and technical support. Examples of the vendors and tools with which we share user information are described below; this table may be updated from time to time.

Our service providers have access to your personal information only to perform these tasks on our behalf, based on our instructions, and are contractually obligated to maintain the confidentiality and security of your personal information and not to use it for any other purpose.

Your integrations

If you connect your account through supported third-party integrations, we will share your personal information with those third parties as needed to operate the integration. That third party's terms and privacy policy will apply to the shared information; we encourage you to review them before connecting.

Community activity

If you engage with other users through our community features, such as members of your Circles, we will share some information about you, such as your name associated with content you share, and other information you choose to share with other users. The Services also generate engagement indicators derived from your Circle activity — for example, a qualitative indicator of how recently and consistently you have responded within a Circle — which may be visible to other members of that Circle. These indicators are categorical only; we do not expose counts, rates, or other numeric measures of your activity to other users.

Compliance and harm prevention

We may disclose personal information to comply with a legal obligation, such as a subpoena, bankruptcy proceeding, or similar legal process; to enforce our agreements; or to protect the rights, property, or safety of EMBI, our users, or others, including exchanging information with other companies and organizations for fraud protection.

4. Securing Your Information and Retention

To help protect the privacy of data and personally identifiable information you transmit through the Services, we maintain appropriate physical, technical, and administrative safeguards. We follow generally accepted standards, practices, and procedures to protect personal information during transmission and once received, update and test our security technology on an ongoing basis, restrict access to your personal data to employees who need it to provide services to you, and train our employees on confidentiality and privacy. No security can be fully guaranteed. If you suspect unauthorized use of your account, contact us immediately at privacy@embi.app.

We keep your personal information for as long as needed to perform our obligations to you, or as long as legally required or permitted. The criteria used to determine retention periods include: (i) the length of our ongoing relationship with you; (ii) legal obligations to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as applicable statutes of limitation, litigation, or regulatory investigations).

What happens when you delete your account

When you delete your account, we delete your identifiable personal information — including your profile, date of birth, reflections, audio recordings, transcripts, and responses you created — within 30 days, except where retention is required by law. Certain derived, non-identifying signals are irreversibly de-identified rather than deleted and are retained in aggregate form as De-Identified Data (see Section 1). Content you contributed to shared Moments with other users is removed as part of your deletion; content that other participants created remains theirs and is not deleted by your request.

5. Your Privacy Controls

We believe you should have control of your personal information. We provide the following rights, no matter where you reside. You may make requests by contacting privacy@embi.app.

Access. You have the right to know what personal information we collect about you and how we use it, and to request a copy of that information.

Correction. You have the right to request correction of inaccurate personal information.

Portability. You may request an export of your personal information in a structured, machine-readable format such as .csv or .pdf; where feasible, we can send that export to a third party you identify.

Deletion. You have the right to request deletion of your personal information, subject to the process described in Section 4.

Restriction. You have the right to request that we restrict certain uses of your personal information; in some cases we may be unable to do so where the use is necessary for the functionality or delivery of the Services.

No retaliation or discrimination. You will not receive discriminatory or retaliatory treatment for making a request.

Upon receiving your request, we may ask for additional information to verify the request, which may include confirming your date of birth or other account details. We endeavor to respond to verifiable requests without undue delay; if we require extended time, we will inform you by email. We do not charge a fee to process a verifiable request unless it is excessive, repetitive, or clearly unfounded, in which case we will explain why and provide a cost estimate first. Your rights are not absolute, and exceptions may apply based on our legal obligations, the rights of others, safety, and our ability to bring or defend legal claims. We will not fulfill a request if we cannot verify your identity or a representative's authority.

Some U.S. jurisdictions provide residents with additional rights under applicable law; those rights are honored consistent with the laws of your jurisdiction.

6. Children

Our Services are intended only for individuals who are at least 18 years old (or the equivalent age of majority in your jurisdiction). No one under 18 may use the Services or provide any personal information to us. We verify age at onboarding using your date of birth and, where available, an age signal from your app store. If we learn we have collected personal information from an individual under 18, we will delete that information. If you believe we may have information from or about anyone under 18, please contact us at privacy@embi.app.

7. Do Not Track Signals

Your browser settings may allow you to transmit a “Do Not Track” signal. There is no industry consensus on how operators should respond to these signals, and unless and until the law requires it, we do not monitor or act on “Do Not Track” signals. For more information, visit www.allaboutdnt.com.

8. Cookie Notice

When you use our Services, we may collect information automatically through cookies, including cookies provided by third parties. We use cookies for functionality, performance analysis, security, and personalizing content. We will obtain your consent or provide opt-out choices for such trackers to the extent required by applicable law. For more information on the cookies we use and your choices, see our Cookie Policy.

9. Changes

This Privacy Policy is effective as of the date stated at the top. We may update it from time to time to reflect changes to the Services, corrections, clarity improvements, changes in our privacy practices, or legal requirements. When we make a significant change, such as to how we use your personal information or to your rights, we will notify you within the Services or through another channel such as your registered email, in addition to posting the revised version. We encourage you to review this Privacy Policy periodically.

10. International Users

The Services are operated from the United States and are currently offered only to users in the United States. The Services are not directed to individuals in the European Economic Area or the United Kingdom, and we do not target or knowingly offer the Services to EEA or UK residents. If we expand availability to additional regions, we will update this Privacy Policy with the disclosures and rights required in those regions before doing so.

11. Contact Us

We may communicate with you through any means of contact you have provided, including email, as well as by posting information through the Services. If you have questions, concerns, or requests regarding this Privacy Policy, contact us at privacy@embi.app.